Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft
File: pTJy83vudp-iPqZUueOPsCNGjZI.mft (raw, json)
Hash identifier: gX2ploCYa9Y0y/vEL4BiueRF3abwxN1s6WDVbyuwf7E=
Subject key identifier: C2:E5:5E:55:5B:60:C7:8B:41:D8:62:4A:46:CE:68:E6:3D:11:2C:AB
Authority key identifier: A5:32:72:F3:7B:EE:76:9F:A2:3E:A6:54:B9:E3:8F:B0:23:46:8D:92
Certificate issuer: /CN=a53272f37bee769fa23ea654b9e38fb023468d92
Certificate serial: 019D2695D6162AC13A88354C737197EDFFE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTJy83vudp-iPqZUueOPsCNGjZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft
Manifest number: 043D
Signing time: Wed 25 Mar 2026 20:00:47 +0000
Manifest this update: Wed 25 Mar 2026 20:00:47 +0000
Manifest next update: Thu 26 Mar 2026 20:00:47 +0000
Files and hashes: 1: DTley2nDPplvZNQopBTQO4n1Ceo.roa (hash: u9j+aNgInYMXRDSEIlTiThKlupffu4ylSrg+Bxy7vx4=)
2: pTJy83vudp-iPqZUueOPsCNGjZI.crl (hash: fRCfBD9xzSaYEXJTpX72h1yOLyXA02ryP9bUAsLjc10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTJy83vudp-iPqZUueOPsCNGjZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:d6:16:2a:c1:3a:88:35:4c:73:71:97:ed:ff:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53272f37bee769fa23ea654b9e38fb023468d92
Validity
Not Before: Mar 25 20:00:47 2026 GMT
Not After : Mar 26 20:00:47 2026 GMT
Subject: CN=c2e55e555b60c78b41d8624a46ce68e63d112cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:16:44:15:9b:f4:a9:b7:4f:67:5a:43:d2:be:
03:07:b9:8e:c1:7a:70:ce:e8:88:c1:bb:70:4c:9c:
55:53:d1:63:f2:b9:d4:b1:83:32:05:86:72:ff:97:
14:17:09:d1:d8:d4:1f:94:41:17:7e:c8:9d:1b:56:
ec:1b:62:83:85:31:8d:4d:bb:08:cd:6e:18:c4:85:
15:30:50:29:34:bd:e8:89:e4:31:da:eb:86:71:c4:
29:ed:a7:27:b5:c2:f8:68:7e:00:2b:4c:77:98:fe:
8d:50:bd:a6:d5:04:75:8f:ef:80:60:b5:a9:52:d4:
d5:08:12:9c:85:b4:70:54:08:e8:0f:27:cf:ce:77:
84:6e:8a:24:19:2c:17:73:b4:07:71:db:c7:07:11:
7c:74:d0:ff:fa:af:33:d1:0a:32:42:5c:3e:ea:8d:
50:00:02:58:ad:a7:74:4b:02:d8:77:51:50:35:0b:
53:8c:d9:9d:29:a6:e5:c7:91:a7:57:77:15:12:e6:
be:cd:61:34:16:12:cf:6c:09:ed:44:d7:65:a7:88:
d8:30:19:fd:24:7f:0e:85:70:59:f8:40:00:71:11:
9a:02:e0:b4:35:76:0d:ef:06:c3:10:37:13:9a:5c:
e8:93:70:2d:c3:8a:f9:cf:c3:14:20:c7:5f:88:53:
a9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E5:5E:55:5B:60:C7:8B:41:D8:62:4A:46:CE:68:E6:3D:11:2C:AB
X509v3 Authority Key Identifier:
keyid:A5:32:72:F3:7B:EE:76:9F:A2:3E:A6:54:B9:E3:8F:B0:23:46:8D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTJy83vudp-iPqZUueOPsCNGjZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:55:0d:91:7b:f6:24:7f:40:f8:79:a4:17:22:3e:e2:82:e8:
d4:e7:9c:8f:a1:4e:95:cd:33:77:bc:98:33:15:d5:cb:b9:81:
1b:f2:54:d2:63:1d:63:14:57:9c:f9:ff:74:4b:6e:fe:4c:7f:
8c:68:a3:11:e8:d8:66:4d:d0:40:42:46:17:7f:e0:8e:95:3f:
18:62:2f:d7:a1:e5:93:e5:08:33:c6:87:10:7e:cd:8c:12:88:
fc:b1:3a:1e:d2:50:53:ac:86:28:f4:b5:05:ef:41:e2:bc:c6:
15:1b:9e:3e:c0:ae:5a:59:90:b0:c8:f0:78:83:ef:68:88:0c:
cf:47:64:ad:6b:2e:0a:33:6c:6b:b8:d1:59:56:00:de:66:20:
9a:df:0a:69:5a:8f:77:3c:ec:99:38:84:90:25:fb:dc:94:0d:
5b:be:ae:b9:81:b0:af:c4:79:38:c7:a6:a2:37:d4:fb:35:e7:
ff:ad:ad:88:b0:87:1d:ee:35:e0:c2:d4:ce:47:13:a6:b5:33:
7e:d9:f7:73:08:f4:92:69:df:19:0e:48:c0:68:e2:e8:d5:56:
0e:30:ab:fc:23:67:34:43:1b:4d:0d:c0:1b:e3:63:1e:79:78:
5f:c4:c5:e2:fa:2f:cb:02:e1:04:56:c0:31:0f:61:b8:aa:47:
fe:aa:b4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:29:08 2026 by rpki-client