Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
File: pZrIMj67a-IPronQmMokE4-MkAU.mft (raw, json)
Hash identifier: 9aldHbW6S9YhI0whoC8JLnLvdKOOMKIA7eBh6r+wvJg=
Subject key identifier: 02:09:4C:5C:E5:78:00:AD:88:DA:71:68:8F:CA:EF:44:20:CE:71:9C
Authority key identifier: A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
Certificate issuer: /CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Certificate serial: 019E21368B6D2CEF2910355D5FE2D6E35905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 12:01:23 +0000
Manifest this update: Wed 13 May 2026 12:01:23 +0000
Manifest next update: Thu 14 May 2026 12:01:23 +0000
Files and hashes: 1: QPbL87CmRT1ll0u9cNfWuv1QlyA.roa (hash: 8Z1WQs/0Meh/R2Q6A9r9cYWb2lmAvHlCtOd8UxHsBvk=)
2: pZrIMj67a-IPronQmMokE4-MkAU.crl (hash: ijnwrL41P2qQ/Gquv6rP2gUBuXueKG+tAowSVfzDgJY=)
3: zA-JAsK-5Dim3-SrX670VbjLnXQ.roa (hash: 8KB8obCvtfReso5cwgxqXrjE6TJfCW9MSYEyqCiQ9Zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:36:8b:6d:2c:ef:29:10:35:5d:5f:e2:d6:e3:59:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Validity
Not Before: May 13 12:01:23 2026 GMT
Not After : May 14 12:01:23 2026 GMT
Subject: CN=02094c5ce57800ad88da71688fcaef4420ce719c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:db:95:2b:58:49:08:82:23:ce:ed:5f:3e:08:
5e:db:32:98:ac:bc:a7:53:8f:20:2b:49:69:30:df:
94:5e:06:ca:88:d3:9d:e7:7c:64:3b:b9:b5:20:06:
9c:03:48:59:33:08:2c:0e:0a:2f:0e:3f:8b:a2:d7:
e9:92:27:1d:13:23:16:ab:f7:9d:6e:f5:e1:d4:95:
81:8d:39:f3:c5:e0:89:ad:de:70:06:9b:0e:78:24:
d3:71:1d:80:9c:3c:bf:47:d6:72:77:cd:b8:2f:9e:
5e:de:09:b2:26:8f:7b:91:5e:fb:ad:05:24:80:fe:
b9:99:fa:4f:15:6a:5b:26:e2:ba:c8:66:99:ff:5b:
36:c4:83:32:5b:49:57:48:c2:07:cc:44:18:a2:93:
58:13:7b:62:a7:d2:25:6e:fb:7c:a8:12:70:cb:24:
52:1f:12:c6:44:46:8a:b9:f6:e6:de:01:15:7c:e4:
eb:dc:44:8c:fd:61:a6:c6:d3:cd:c0:f5:ca:01:33:
a7:ed:a7:11:47:2f:03:54:69:54:59:f7:e2:88:5a:
dd:03:a8:b4:ca:f1:14:e1:a3:58:aa:6e:df:af:aa:
11:eb:85:93:73:2e:5d:85:f9:d5:b7:64:45:af:45:
e4:44:fb:24:1a:6e:d7:33:62:f9:5f:5e:46:78:4c:
b9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:09:4C:5C:E5:78:00:AD:88:DA:71:68:8F:CA:EF:44:20:CE:71:9C
X509v3 Authority Key Identifier:
keyid:A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:fa:48:7d:79:cd:07:04:81:02:0a:fc:a0:81:f1:b1:18:3d:
d3:a9:08:58:4f:91:c7:63:98:bb:c1:17:91:46:73:a7:59:6f:
50:2b:9e:fa:ff:2a:2c:23:e4:ba:e1:5a:6e:ab:0f:0c:f6:4d:
11:c8:44:a7:f3:ce:87:ee:15:fe:15:99:2f:19:50:44:c7:42:
3d:51:68:59:8b:4a:9b:33:01:12:82:41:3f:5b:b1:15:d5:16:
71:d9:cf:39:01:d4:df:b6:33:2e:66:89:a7:17:68:82:c9:9d:
24:01:3e:fe:8e:fb:34:76:aa:3f:5a:54:ba:ac:99:37:cb:37:
fd:82:7b:76:54:d5:31:f6:c7:40:e4:9e:12:a0:e4:03:5f:c2:
ea:e9:10:e1:45:0b:e0:f8:69:aa:d6:e7:1c:ef:62:72:48:43:
30:9f:33:1a:31:42:70:32:f4:a3:25:a8:a8:ac:89:eb:0a:f7:
f6:36:23:04:be:12:51:f2:25:4f:dc:8f:18:43:40:1b:2c:98:
61:54:a8:1f:28:f7:ff:fa:df:ff:46:8a:19:b6:6d:32:6c:07:
d8:a5:0a:79:e3:a7:8f:c1:b9:e0:cf:df:4e:d9:d2:d3:e6:01:
23:46:56:8d:3c:39:29:b0:20:4a:80:22:9a:c4:5c:25:37:af:
b4:1e:86:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:12:18 2026 by rpki-client