Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
File: pZrIMj67a-IPronQmMokE4-MkAU.mft (raw, json)
Hash identifier: AdNOr2rJRRYAejlPeeWMRrhktfFkWVv4muvhuuYBfJk=
Subject key identifier: AE:E5:4B:D9:6B:74:13:D3:8A:59:D8:47:44:AA:3C:CD:5C:F8:F3:EC
Authority key identifier: A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
Certificate issuer: /CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Certificate serial: 019D2817054AD4808C54BB523DA1CA882ED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 03:01:30 +0000
Manifest this update: Thu 26 Mar 2026 03:01:30 +0000
Manifest next update: Fri 27 Mar 2026 03:01:30 +0000
Files and hashes: 1: QPbL87CmRT1ll0u9cNfWuv1QlyA.roa (hash: 8Z1WQs/0Meh/R2Q6A9r9cYWb2lmAvHlCtOd8UxHsBvk=)
2: pZrIMj67a-IPronQmMokE4-MkAU.crl (hash: Ez3cPcViffKxrJo9e/wcnQuHsOCvXOucw57hQyM2Szc=)
3: zA-JAsK-5Dim3-SrX670VbjLnXQ.roa (hash: 8KB8obCvtfReso5cwgxqXrjE6TJfCW9MSYEyqCiQ9Zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:17:05:4a:d4:80:8c:54:bb:52:3d:a1:ca:88:2e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Validity
Not Before: Mar 26 03:01:30 2026 GMT
Not After : Mar 27 03:01:30 2026 GMT
Subject: CN=aee54bd96b7413d38a59d84744aa3ccd5cf8f3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:77:93:d0:27:40:ec:ef:ce:ba:5f:f6:dc:21:
54:5a:5f:78:4e:fe:07:68:4f:62:20:08:b2:fa:e3:
a5:a6:9e:c0:fc:01:88:65:56:5f:94:4d:46:d7:84:
0d:a0:2a:e8:c5:5d:b9:d3:0d:17:44:70:1a:d9:c5:
21:7f:b8:d2:f2:45:53:ac:85:95:d7:fd:1a:16:43:
fa:fe:d6:32:50:ec:a9:9c:94:79:a8:41:8b:11:bf:
93:6b:e2:0d:bf:16:92:3c:8e:78:a6:28:4c:a0:c6:
ba:55:7b:e2:63:4a:75:de:cf:b4:d9:38:89:59:a4:
8f:5d:a9:6c:70:1a:0c:6c:2c:67:a7:c6:ba:fd:45:
fc:17:b3:1d:51:72:8b:d6:3d:c0:ef:af:ba:c9:37:
7d:b1:09:65:3b:6c:56:4b:48:ef:97:e9:68:41:90:
62:7e:3c:df:1f:3d:44:74:f4:80:92:b2:3e:cd:b2:
a5:65:57:40:24:01:84:c5:50:8f:b1:e7:4d:ce:2e:
08:8d:2c:6b:54:b6:20:01:7e:ff:dd:86:a0:3b:17:
14:78:32:2e:ec:f1:fa:be:9c:03:92:8e:86:81:27:
c5:fd:b4:1f:a9:cc:82:41:ff:d4:57:e6:12:63:c7:
3f:71:1b:68:da:84:41:47:54:a6:be:88:fb:c7:11:
c1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E5:4B:D9:6B:74:13:D3:8A:59:D8:47:44:AA:3C:CD:5C:F8:F3:EC
X509v3 Authority Key Identifier:
keyid:A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:bc:53:35:43:c2:e7:fa:f2:ad:03:5d:cd:91:15:6f:6a:c2:
5b:ee:94:2c:7e:ad:3e:ff:c5:7e:8e:80:b0:9c:3f:31:96:ce:
a0:c5:b7:96:49:49:ff:d0:f1:c0:e4:51:df:c3:db:20:6a:d0:
c0:cc:c1:d7:96:db:ca:5e:96:ff:ba:46:3e:e8:79:e9:bf:50:
6b:87:34:91:3a:d3:0d:e5:d8:52:1b:41:8a:d4:b6:2f:40:7a:
19:75:89:81:06:b6:51:ea:54:94:b9:a1:b5:0a:a3:c1:da:87:
70:52:61:b6:c1:c2:22:c2:fe:71:fb:c4:22:0d:ba:8f:93:65:
7b:74:19:b5:31:43:f7:ae:a4:81:97:00:a2:66:be:35:6d:ac:
45:dd:bf:3d:37:0c:41:23:2b:05:51:18:9a:cf:03:98:ab:80:
be:00:2f:9f:d7:c7:00:e4:c8:09:b4:64:77:8b:1a:fd:b6:b4:
41:c9:d8:75:73:ba:51:08:b9:80:d7:1e:f6:55:61:d9:67:20:
fd:0d:c9:f0:47:77:97:4a:d9:4a:e8:46:1c:9f:a5:8b:27:19:
e0:48:39:00:30:65:92:7f:71:37:64:fe:53:86:23:b7:f7:2c:
3a:55:4f:3f:31:4b:87:2a:c4:9a:73:f5:8c:e4:98:25:71:9f:
37:46:06:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:11 2026 by rpki-client