Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
File: pTi7DCtB76jDsCBk68UvupLCNiY.mft (raw, json)
Hash identifier: iAXt4tOuqTeI4jfVoxM7UzBIynFDPh2FcoK9UDq9T7M=
Subject key identifier: 8E:A1:77:2A:4F:41:BC:02:7B:18:EF:51:36:F5:8F:64:A6:FE:C7:5E
Authority key identifier: A5:38:BB:0C:2B:41:EF:A8:C3:B0:20:64:EB:C5:2F:BA:92:C2:36:26
Certificate issuer: /CN=a538bb0c2b41efa8c3b02064ebc52fba92c23626
Certificate serial: 019D27A8F7B8022196B9E6944093C09B575B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
Manifest number: 1471
Signing time: Thu 26 Mar 2026 01:01:17 +0000
Manifest this update: Thu 26 Mar 2026 01:01:17 +0000
Manifest next update: Fri 27 Mar 2026 01:01:17 +0000
Files and hashes: 1: CPVxDc_aZPt8p2hD-fQ5EY3ek5w.roa (hash: YSCCvnapCyu6BSWmfyyXkWgH96EnMt+2gyVUr+pHUOM=)
2: cxSAbl9AGDjuAytpRHVKIsDfitI.roa (hash: 6VeXR5AotX5hFxSi1IUjWsyHhQBxezCmfN4HLADcz8c=)
3: pTi7DCtB76jDsCBk68UvupLCNiY.crl (hash: hMCmI8NvdC6pcmzqO6Yffeb9zKnhRvj1pGoN2O3BpFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:f7:b8:02:21:96:b9:e6:94:40:93:c0:9b:57:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a538bb0c2b41efa8c3b02064ebc52fba92c23626
Validity
Not Before: Mar 26 01:01:17 2026 GMT
Not After : Mar 27 01:01:17 2026 GMT
Subject: CN=8ea1772a4f41bc027b18ef5136f58f64a6fec75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c2:bf:b6:d8:a4:da:8b:2f:ba:00:11:f3:6b:
49:a2:a0:db:e2:2f:7c:54:87:d6:1c:9b:ed:fa:1d:
ec:c0:67:43:bc:f9:37:5c:d3:29:02:60:a7:b3:79:
cb:74:d2:86:00:ae:af:44:d2:49:2f:55:fa:ae:38:
be:ad:af:e1:2d:40:c7:71:8d:55:d9:c6:91:97:f5:
99:04:c3:13:78:13:8c:df:4b:c4:63:f8:6b:75:07:
05:c6:ba:d2:0d:a2:81:a9:81:bc:ad:34:58:bc:0e:
ba:28:52:c2:a8:86:ac:d1:0b:09:2d:54:cc:93:4f:
9e:4e:e9:f4:77:eb:16:c6:56:a2:97:0b:d4:2f:d3:
d5:14:5a:15:52:a6:01:88:dd:2e:3f:0d:16:06:25:
c2:c4:b3:57:97:07:f4:36:3a:3d:04:31:95:ad:e4:
7f:0f:36:69:be:c2:be:2d:cc:dc:4f:24:a6:a6:fe:
10:bd:fc:ac:ab:fd:5b:c3:08:d1:37:33:39:1d:42:
97:67:07:db:92:be:ce:95:64:2f:38:10:e7:02:fd:
87:98:c7:ad:e8:a1:93:fe:86:df:79:68:4f:aa:65:
60:99:3f:71:29:e7:d6:b6:88:8e:be:7e:6e:99:6c:
c0:f6:f7:48:72:63:30:36:3e:84:c8:f4:5f:32:0d:
ee:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A1:77:2A:4F:41:BC:02:7B:18:EF:51:36:F5:8F:64:A6:FE:C7:5E
X509v3 Authority Key Identifier:
keyid:A5:38:BB:0C:2B:41:EF:A8:C3:B0:20:64:EB:C5:2F:BA:92:C2:36:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f0:89:bd:c2:43:05:06:75:45:62:3c:01:83:13:63:3b:10:
22:92:0a:d7:ab:2c:f8:4a:3e:76:1a:dc:7b:56:38:eb:fd:39:
ea:ce:18:ef:44:2c:98:d2:1c:78:04:4c:d9:2f:33:38:d3:0b:
68:c3:f8:25:11:e0:97:bd:de:f6:53:d5:09:53:60:ae:df:23:
84:eb:e6:1a:34:79:dc:22:e6:b5:dd:d9:cc:9f:fe:3d:db:e6:
f9:ed:2d:2d:9f:10:ba:da:0d:2c:aa:6d:f3:4a:5b:fc:c8:18:
66:5f:f7:55:dd:ed:fa:c4:c8:2b:6a:3d:c7:54:ef:36:c8:90:
c8:78:90:0e:8a:17:ec:f4:5d:6a:0a:73:45:09:3a:9c:bd:d2:
6e:87:23:9b:12:b0:ec:71:49:65:9c:b0:c9:d3:be:94:10:da:
b9:c3:41:aa:9a:26:6b:34:7e:00:07:1f:f6:90:d2:8a:94:a0:
ad:47:50:84:7b:6d:cd:6f:8e:8a:14:33:17:8c:79:c4:84:3c:
9e:a0:e5:14:69:40:0a:a5:b5:8e:ed:60:95:05:f5:51:5e:df:
7f:81:db:16:b4:ec:c6:54:04:c3:67:35:cc:75:9e:2f:21:fd:
f2:bc:eb:ef:2f:7f:19:86:da:cb:9e:13:b4:ee:fc:e7:53:17:
75:45:79:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:43:23 2026 by rpki-client