Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
File: p0NjdfsDInVrVdr_ZOJl73LA2lI.mft (raw, json)
Hash identifier: SoapLRJLvDx7YGI1mpLTrSIvc5/v2bnEc0HW7r3PZ/s=
Subject key identifier: 98:6D:E6:42:23:BA:67:95:CD:8E:6E:B2:99:46:40:64:E8:61:81:91
Authority key identifier: A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
Certificate issuer: /CN=a7436375fb0322756b55daff64e265ef72c0da52
Certificate serial: 019D2772308B0D3710F2EFBE6422ACFA993E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
Manifest number: 188F
Signing time: Thu 26 Mar 2026 00:01:28 +0000
Manifest this update: Thu 26 Mar 2026 00:01:28 +0000
Manifest next update: Fri 27 Mar 2026 00:01:28 +0000
Files and hashes: 1: 9JSd5mLZQxTENPBnyy1O2LgxykM.roa (hash: P3ZS+YpFvi1dhS7gQBkLkLcByo9/L4kNrUtrMJzqYV8=)
2: A9RfQpBK4Lmi6Tmx0CejQJ3i_6g.roa (hash: /ml6WX65AwyNhLXMSn8MV5ORhWu+aykCZ+qTwwwxX9g=)
3: p0NjdfsDInVrVdr_ZOJl73LA2lI.crl (hash: L4EH4N9h44gvrS8mraL6EU4zjsiArXdOHK+EcutKTgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:30:8b:0d:37:10:f2:ef:be:64:22:ac:fa:99:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7436375fb0322756b55daff64e265ef72c0da52
Validity
Not Before: Mar 26 00:01:28 2026 GMT
Not After : Mar 27 00:01:28 2026 GMT
Subject: CN=986de64223ba6795cd8e6eb299464064e8618191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5a:99:d8:c3:7e:a5:c3:2d:c6:67:ea:1e:d5:
d1:6d:e7:b1:a7:52:ef:9a:1f:1d:6e:a3:fd:2f:60:
64:f9:4d:98:1c:14:02:fd:3d:22:b7:44:47:ff:d7:
29:a0:93:d8:03:aa:c7:ed:e8:3f:8b:91:24:b9:c0:
7e:1e:ed:fa:c9:9b:08:5f:40:e2:7d:b9:64:aa:83:
3d:1b:4e:a0:fe:12:f6:f9:2f:27:8f:e3:12:98:c8:
f5:15:ab:61:61:b3:96:9c:ce:ac:7d:63:3a:0a:39:
fa:42:e8:e0:95:4c:c0:f1:a8:ff:30:5d:6f:0c:f6:
53:56:56:7d:a6:55:9e:67:97:be:08:9c:6f:97:62:
4c:fc:1d:1c:52:a6:09:7d:f8:0e:4a:fc:8c:67:71:
a6:60:7f:0c:51:6b:a0:70:61:02:6a:15:87:26:b1:
89:ca:da:db:d1:a1:e3:97:96:c0:30:a9:bd:4d:4d:
87:06:1f:79:f0:f0:87:ef:77:7c:3a:11:3a:c0:18:
f1:ec:ae:a6:63:04:c6:01:45:e5:63:22:62:ce:c6:
ee:8a:2b:96:33:b9:7f:c9:16:c0:b8:b9:49:3f:87:
fc:c2:71:c9:b4:18:97:0b:72:cc:c3:03:4f:32:55:
97:c4:0e:da:80:5a:42:eb:ff:1e:ca:2d:71:d6:0c:
97:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6D:E6:42:23:BA:67:95:CD:8E:6E:B2:99:46:40:64:E8:61:81:91
X509v3 Authority Key Identifier:
keyid:A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:2d:5f:e6:99:e3:48:65:c1:61:b7:ef:52:a4:7d:37:f2:b5:
69:3f:60:bd:41:23:ba:a2:f1:06:3b:4a:cb:21:cc:69:cb:83:
cc:91:6b:4e:05:2d:3c:81:54:48:d8:21:52:fc:ec:ff:f7:50:
0c:f2:c7:cb:79:69:1e:45:36:eb:be:a4:e2:5e:43:98:08:3d:
03:7f:ea:a3:cf:df:2b:f4:92:8a:d1:7e:01:a7:7e:c5:9a:07:
1d:01:1c:27:1e:c8:a7:f6:73:6c:c9:05:b5:39:d7:19:a0:61:
ba:f0:77:96:a2:9a:7f:17:81:12:e5:6c:aa:55:2c:b7:e9:76:
2b:b9:65:35:8e:8b:a1:57:a5:d3:d9:fb:1a:ff:1c:48:44:88:
cd:e5:c1:aa:94:ae:5a:b6:3f:43:e0:c0:75:04:7c:91:62:74:
54:c5:c6:8e:1e:14:69:ce:f2:00:75:a7:a8:16:84:6e:97:eb:
da:2d:e8:1e:3f:43:95:99:ea:e4:75:20:dc:dc:45:d7:99:e1:
ad:b1:38:6a:b7:fb:7f:85:d1:6b:19:b2:e5:7d:6a:f3:c4:70:
56:bb:8d:2d:f3:c8:45:72:61:35:d5:13:6d:00:6d:a0:ae:b5:
87:43:0f:b8:cd:9a:95:10:a1:6c:36:22:75:5e:9a:cb:02:7e:
03:40:7c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:57 2026 by rpki-client