Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
File: p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft (raw, json)
Hash identifier: N0MSzy+PRzgRe321vhjapyqhJ7EmS3Mr2urthvQARBo=
Subject key identifier: FA:6F:BD:2D:D4:F5:35:E5:19:92:C8:4E:46:62:61:F8:95:EF:C2:BD
Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Certificate serial: 019D284E125812F6220986DFD58DF77D9C17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
Manifest number: 188E
Signing time: Thu 26 Mar 2026 04:01:38 +0000
Manifest this update: Thu 26 Mar 2026 04:01:38 +0000
Manifest next update: Fri 27 Mar 2026 04:01:38 +0000
Files and hashes: 1: 1pNjMggR1gYBaftihFMx8w1rMhE.roa (hash: PULZtkL3C3zDaM8kMCwf21Yb0UEXTXjrHY8fh/1iHFc=)
2: BH6ERj2EK1Gwrfo5u9qhco6CgYM.roa (hash: HBZO37pz26No65orIL67yFB8MvBngZCIHxDCzlTkjJc=)
3: C-hiHL_GzbD5a_s8Sar_hmP-Vyw.roa (hash: hyN/ftVawg2QF6kkYn1VlnFyi9JVIm7PN5l5sJloEAU=)
4: Wc1vP6_SY_r3YRWRNCEYvgmMIEU.roa (hash: DTSBhlEZWBIgKWeFJQfKtS9sYqKdFbuY0AXldEHxAZ4=)
5: eo5H4o3ZZ3iXbDapo6cBEE7NS6M.roa (hash: X2Eq1j8xxP8127RbRQQH82ZQaRO794u+GIRwZ/G/1eM=)
6: mK3OtIQBuc5E_Igw6gzRMSv2d3c.roa (hash: DMwAvTUmsGM0zrMHUTJobXjFU2+cLUzH4tvhaMwkiwc=)
7: nUVyELULlyE5fyAdMqySIUcD1Kg.roa (hash: 7IAppAs9x9RzUF7a3+rIPbPjrq3AFXyVcrF/g7C0QPU=)
8: p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl (hash: /eE+gNlL+3p3ljKOsTooNLJ24hyVydF07wHumPmrMkQ=)
9: taXjOwEPFjUj9cMa7Gq70xb_Xw8.roa (hash: amO1PgtWxEDUcYd/ZIcEzv+wLt54N13hJwoq+TKEsJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:12:58:12:f6:22:09:86:df:d5:8d:f7:7d:9c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Validity
Not Before: Mar 26 04:01:38 2026 GMT
Not After : Mar 27 04:01:38 2026 GMT
Subject: CN=fa6fbd2dd4f535e51992c84e466261f895efc2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c9:bd:59:19:2f:65:fd:d8:ac:2c:cf:e8:15:
82:2a:bf:1f:49:c9:c1:a7:78:cb:73:66:29:ca:16:
55:20:f7:90:54:50:b0:6f:ea:98:3c:57:52:d8:e8:
0f:5f:b4:90:ec:90:64:d0:42:89:e7:c7:4c:41:ce:
a1:6d:f9:79:bf:94:4d:5f:fd:3b:9d:35:7d:be:bf:
10:dc:13:c0:3a:df:d3:17:f4:35:00:da:70:29:0d:
e3:09:e9:e2:2f:ae:74:c4:74:47:a3:82:c8:74:6c:
18:13:2c:3b:b9:f9:d6:63:2b:56:a7:ad:69:d5:dc:
44:1a:f1:c5:e2:06:d6:8d:a4:4a:4d:75:3e:d8:ba:
e1:c6:7f:f9:37:0d:f7:d3:81:e7:d6:b4:91:3b:68:
bf:b7:db:ca:2c:fe:22:3d:e4:66:da:11:7a:f9:ef:
24:91:77:89:f0:8c:09:18:b8:1f:da:32:ae:11:64:
33:df:57:d1:78:0a:6a:9c:e9:1f:39:4e:22:2f:cd:
3d:7e:e1:a8:8f:e9:8b:6c:e3:0d:33:5c:3c:c2:fd:
1b:a8:3e:9f:bf:ad:47:79:6e:fb:48:50:7d:9f:19:
3e:d8:b3:ef:b8:d1:da:46:aa:e1:da:6e:f9:d5:be:
1b:2f:94:5a:f3:42:b4:a2:da:4f:b1:6c:4f:f1:bc:
e5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6F:BD:2D:D4:F5:35:E5:19:92:C8:4E:46:62:61:F8:95:EF:C2:BD
X509v3 Authority Key Identifier:
keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:47:4f:8f:93:58:fd:29:a4:51:cf:04:5f:bc:b5:c9:98:98:
a9:74:b2:e8:ab:fe:e5:ad:bc:da:ea:a8:7c:19:22:e1:44:d5:
a5:18:a8:c6:f9:59:79:02:e7:b7:12:bf:de:2d:1a:70:2b:35:
26:5d:3d:5f:d5:27:78:88:4d:a3:85:49:ca:70:5f:49:c0:23:
ed:75:a3:24:26:bc:2c:b3:57:88:12:2c:8f:6e:55:0b:7a:89:
14:8c:eb:fb:56:db:33:c4:f6:5d:3c:af:84:bd:0d:dc:05:f0:
c7:41:d6:cc:71:f5:2d:68:84:b0:f5:5f:bc:38:32:2c:02:39:
b1:5f:5b:c0:6e:b3:93:4c:f5:91:7e:85:c6:f6:4e:38:b8:7d:
8f:11:1a:7d:cb:35:0b:83:70:ec:77:40:7c:36:6a:ef:c7:fc:
69:0a:3b:8f:47:7b:20:da:ab:b7:b5:ca:b5:bf:85:f3:9f:ed:
5d:9b:8a:5a:da:98:d7:a5:37:b0:c1:b2:cf:08:0a:48:24:ca:
02:5f:27:f8:b6:40:1a:5e:21:ca:bb:74:ff:31:87:58:e5:74:
6b:74:aa:55:34:6e:34:de:64:00:3f:54:40:c9:42:af:11:9a:
86:0c:1c:c6:b5:a3:20:a2:5f:a7:4e:09:40:59:a5:50:a5:fa:
cd:17:5c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:59 2026 by rpki-client