Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft
File: pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft (raw, json)
Hash identifier: r5iiOAx5AJNCCUqUQHs5rQi/ul91V24hKRtFxjVci1Y=
Subject key identifier: 2C:86:D2:8B:D5:A6:81:3E:24:CB:A9:82:25:5F:C1:8B:20:26:B8:4F
Authority key identifier: A4:0C:1A:D5:47:B9:3E:BF:65:5C:58:04:38:DF:A5:AE:42:7C:65:11
Certificate issuer: /CN=a40c1ad547b93ebf655c580438dfa5ae427c6511
Certificate serial: 019D2703BE3E44BB44C99E17B07C39E4C0DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft
Manifest number: 0ED5
Signing time: Wed 25 Mar 2026 22:00:49 +0000
Manifest this update: Wed 25 Mar 2026 22:00:49 +0000
Manifest next update: Thu 26 Mar 2026 22:00:49 +0000
Files and hashes: 1: _lqYoZCtbgCjPqgBQS1sChiV3po.roa (hash: DngSWjpo0gMX1VJjUcfS5UeVdo84wIcXiRvQtRs7PEI=)
2: pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.crl (hash: ZlPNxUgaVOpTR4l0cdYjGrSsYmYBIzPi8SlqCbPGhXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:be:3e:44:bb:44:c9:9e:17:b0:7c:39:e4:c0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a40c1ad547b93ebf655c580438dfa5ae427c6511
Validity
Not Before: Mar 25 22:00:49 2026 GMT
Not After : Mar 26 22:00:49 2026 GMT
Subject: CN=2c86d28bd5a6813e24cba982255fc18b2026b84f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6a:ff:78:a5:d9:b7:8a:f7:c4:4e:3d:df:63:
19:97:d3:44:be:c7:c2:31:38:5b:ee:4d:58:7c:7b:
b7:d5:90:33:4d:8e:5a:ad:94:84:61:34:8b:0c:a3:
26:5c:5c:3d:05:74:bd:dd:4d:32:55:e7:5a:d2:c5:
d9:08:1b:b7:fc:c2:d9:7e:9e:6c:38:8f:f0:49:19:
3a:59:83:d6:b2:aa:43:e4:79:9a:bb:b0:0b:3a:67:
18:9e:dc:7d:09:07:d3:db:79:a2:45:03:6c:3c:39:
e7:e0:b1:05:1a:78:93:78:52:3f:0d:01:92:69:3e:
30:0f:40:bd:a7:4f:80:48:87:7d:f8:16:ac:c8:1e:
1c:bb:e9:1b:e6:55:a9:74:43:4a:a4:f0:b8:b7:bf:
04:30:cb:6c:99:b2:fe:61:ea:86:f6:8b:83:8f:ca:
ac:58:ce:e8:28:21:be:3a:ed:12:cf:1b:c9:de:e2:
e0:96:7f:26:a9:65:38:25:97:4e:b5:0d:09:42:5a:
aa:33:14:56:b1:b3:67:32:91:e5:47:6f:ac:f0:30:
e4:c5:f5:79:00:fd:ea:d9:62:7a:44:80:ac:60:1b:
18:fc:b8:87:af:ad:ab:e8:56:ef:5b:3e:0b:b3:90:
cd:d3:69:0f:f9:0f:72:75:e3:b6:41:6f:56:0a:8f:
43:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:86:D2:8B:D5:A6:81:3E:24:CB:A9:82:25:5F:C1:8B:20:26:B8:4F
X509v3 Authority Key Identifier:
keyid:A4:0C:1A:D5:47:B9:3E:BF:65:5C:58:04:38:DF:A5:AE:42:7C:65:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ac:97:35:05:40:4c:c9:b2:d5:c2:31:75:04:5d:99:0b:20:
3e:76:4f:9c:80:35:15:86:8a:5b:78:1e:7b:aa:67:15:cf:a0:
7a:d0:dd:56:c3:2b:f5:6a:42:9e:8b:f4:f0:8d:45:f9:54:64:
97:63:4c:55:b5:59:24:51:ee:43:5c:8d:54:70:9c:09:25:c5:
cd:d6:fd:d0:20:d1:e0:64:6c:8c:aa:00:07:8c:ea:1a:e0:b6:
3c:f4:32:7c:93:f4:76:3f:bd:64:e2:ed:54:36:13:eb:d3:cf:
6f:4c:60:ab:2e:42:be:05:5a:4b:5e:aa:e7:61:f4:b3:13:8d:
bc:46:ec:f4:93:b6:fe:5a:f0:64:2d:fd:f4:ac:26:2e:c3:f9:
40:b0:83:3f:df:88:65:9b:2e:f8:df:db:bf:88:78:63:7a:9a:
40:7b:0e:1a:f8:28:55:8b:47:0d:f5:38:7f:48:56:50:53:93:
cc:14:23:82:95:2e:16:cb:26:43:45:fe:88:00:0d:0b:e4:33:
72:36:ca:c3:2d:b9:46:3f:3a:e9:b9:90:c8:36:6b:7a:59:94:
72:b4:95:61:cc:f7:f4:eb:6a:ab:3d:a1:ed:7d:7c:8a:2e:9f:
c4:3d:7e:20:ae:e8:d2:5a:a8:2c:e0:8a:79:80:de:1d:75:72:
d1:c8:ae:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:18:44 2026 by rpki-client