Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
File: pH9wjDSl5x2vPS5UuZq3Twae-As.mft (raw, json)
Hash identifier: FwTS+uewtUFA4KbB2zEmS3NATKnEWIpRAbOb3L3L9TI=
Subject key identifier: BB:DE:3D:0A:71:29:55:98:6E:F6:F1:B3:73:CB:EF:AC:38:97:56:C3
Authority key identifier: A4:7F:70:8C:34:A5:E7:1D:AF:3D:2E:54:B9:9A:B7:4F:06:9E:F8:0B
Certificate issuer: /CN=a47f708c34a5e71daf3d2e54b99ab74f069ef80b
Certificate serial: 019D28167A889C9C40B78990D2CE5FB67DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
Manifest number: 0E21
Signing time: Thu 26 Mar 2026 03:00:54 +0000
Manifest this update: Thu 26 Mar 2026 03:00:54 +0000
Manifest next update: Fri 27 Mar 2026 03:00:54 +0000
Files and hashes: 1: A6bS9MJ8yre_3dAu3nPGm8Z-iC8.roa (hash: aAYbB32YuDe6wK9PH2k9OTcq9zpop8zHvpCVPrmNr5w=)
2: IGrzDBTp7WeP7TiBE_F5uUv9_o4.roa (hash: BP1wezzsyhWU23ICMkBjQqvAxLHe4ED89SFQ2RP2Mlw=)
3: pH9wjDSl5x2vPS5UuZq3Twae-As.crl (hash: xE8AratpYaCc45Dc4qVrjDNQfvxMTDIxEjKfi0NTOww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:7a:88:9c:9c:40:b7:89:90:d2:ce:5f:b6:7d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a47f708c34a5e71daf3d2e54b99ab74f069ef80b
Validity
Not Before: Mar 26 03:00:54 2026 GMT
Not After : Mar 27 03:00:54 2026 GMT
Subject: CN=bbde3d0a712955986ef6f1b373cbefac389756c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:78:a9:6a:d8:ad:26:cb:e6:eb:60:b8:d5:99:
39:72:b8:a1:6c:13:66:f1:08:a9:ac:3d:26:b8:e0:
af:d3:fe:b6:5c:53:d6:ef:e3:bd:7f:80:cf:d2:7d:
be:56:2d:68:c9:be:9b:76:29:13:4b:13:8e:db:82:
20:94:43:08:e2:9c:12:a3:4f:40:e1:93:2f:fa:19:
e4:d3:5d:3a:7e:bc:38:d2:19:23:cd:d0:4b:8e:51:
1b:1c:c4:c3:3b:c4:3a:5a:76:39:4f:5d:ca:68:04:
42:6d:7c:08:a1:6a:79:fd:1c:4d:70:cd:63:9e:52:
f9:e3:27:2c:2b:8d:9f:39:6e:df:d3:53:62:88:1e:
01:ea:67:e4:f7:17:f1:b8:c3:6c:89:29:fc:40:1c:
e4:9f:41:9e:bd:8a:77:f8:ac:e1:5b:97:ae:70:99:
39:a5:72:75:c6:f8:32:a9:6f:9d:24:2c:b2:35:92:
99:4d:ae:82:a4:cc:cf:be:8f:b5:2c:59:1c:40:0d:
2f:ce:e1:c7:6f:9c:58:e8:3e:27:7f:7d:f6:e5:71:
8a:97:40:30:99:09:c9:fa:3a:65:c1:10:a5:7b:38:
49:85:e8:db:f0:d8:54:a4:b4:8f:24:ca:65:55:22:
7c:77:e9:8a:37:bc:78:aa:2a:85:1b:a5:7a:e1:74:
6b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DE:3D:0A:71:29:55:98:6E:F6:F1:B3:73:CB:EF:AC:38:97:56:C3
X509v3 Authority Key Identifier:
keyid:A4:7F:70:8C:34:A5:E7:1D:AF:3D:2E:54:B9:9A:B7:4F:06:9E:F8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:46:56:34:fc:75:6f:bb:ad:56:f7:1c:c0:b0:77:c6:e8:20:
7c:ae:11:0b:ca:57:69:97:ee:a6:20:1c:94:8d:e0:b4:1e:72:
06:c4:fd:3e:ea:70:8e:6b:1c:fa:75:f8:a6:96:9b:e0:90:11:
dc:8f:fa:ac:d0:40:38:6d:2b:9a:d9:8c:47:4e:5e:6d:1f:6d:
60:72:01:7a:dc:25:4a:64:63:e5:8c:c5:d2:6e:43:45:61:39:
e6:a9:80:02:7e:27:e6:56:ab:c8:f2:6a:ce:7c:9b:b1:47:33:
7e:da:fc:d6:03:93:8c:02:c2:4c:38:af:1f:be:2d:23:9b:11:
af:c1:b1:0c:c9:3a:2f:d9:21:70:89:97:90:11:1d:a2:52:4d:
e2:00:0b:a8:c4:44:87:b6:cc:a1:a2:2c:cd:b0:4b:4e:b8:18:
40:63:82:94:00:8d:80:d9:0f:be:48:f2:23:9f:6e:c0:20:14:
84:62:b8:a3:d6:0e:04:cb:e4:0b:2e:8b:fc:04:1b:2d:66:a2:
d3:80:0e:a2:2c:e5:fb:26:91:2b:aa:60:40:b6:f1:25:b5:04:
52:94:3a:b2:c2:7d:13:18:26:f6:b3:62:2b:9d:f0:d8:83:9e:
76:ec:de:b6:28:b3:fe:45:2c:d7:29:3b:9b:d4:70:8e:37:ce:
25:ac:fa:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:52:18 2026 by rpki-client