Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
File: pmJGuAbomrpA5-WIiPNXZROjk0o.mft (raw, json)
Hash identifier: raDEHD8T5VI7n0BHBLLHj2jj49D0VTRuvEQu7fZKJqM=
Subject key identifier: B2:C1:AE:2A:DF:B1:69:19:47:0D:E9:24:CC:F6:0D:9F:10:19:3A:FA
Authority key identifier: A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
Certificate issuer: /CN=a66246b806e89aba40e7e58888f3576513a3934a
Certificate serial: 019D277272009FB4EBEFCEB1258BE20841AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
Manifest number: 188E
Signing time: Thu 26 Mar 2026 00:01:44 +0000
Manifest this update: Thu 26 Mar 2026 00:01:44 +0000
Manifest next update: Fri 27 Mar 2026 00:01:44 +0000
Files and hashes: 1: 8MCnCiuGbqnzU7k4AiuuVxxMVjI.roa (hash: 3AKQoBBhnfUzI34hMZSnvSfZtjxdcBOFKymfp/vwl0g=)
2: MnRpYakEEH_3YM8B7YjpXHZCSHs.roa (hash: As4Z8EIpoOCvUeHagBG0PnKSVumw3phPbQAL1UT50X8=)
3: Xw_Yrbs6dG8gOuv7i9EZQhlPhlw.roa (hash: EFAh20ucPzMb4NyAoN8tNqkVM4vbiB7eJqswxMwPTCU=)
4: pmJGuAbomrpA5-WIiPNXZROjk0o.crl (hash: 6HXpEUzziekfoVL1yPGgDC/Pxm4njcK8IfmaroNChzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:72:00:9f:b4:eb:ef:ce:b1:25:8b:e2:08:41:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66246b806e89aba40e7e58888f3576513a3934a
Validity
Not Before: Mar 26 00:01:44 2026 GMT
Not After : Mar 27 00:01:44 2026 GMT
Subject: CN=b2c1ae2adfb16919470de924ccf60d9f10193afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:5f:b7:59:63:c8:53:77:42:60:7b:2e:dd:
a7:bf:1b:30:86:92:a9:85:e4:dd:8f:48:a5:d4:f4:
52:96:d0:63:2e:85:ad:96:80:92:6d:59:86:d1:03:
3b:d5:9e:8f:13:49:75:1f:9d:05:e0:7b:2b:22:52:
33:aa:9b:74:54:61:4e:05:00:81:89:4f:8b:7c:52:
2d:db:a8:12:5e:65:8e:d4:21:65:41:93:c2:9b:b5:
15:b7:6e:0a:f2:e8:66:d5:3b:fd:ad:6d:91:da:07:
a8:d8:16:38:7e:65:7f:21:12:b2:c7:e7:c4:aa:53:
76:ef:5d:66:2a:9f:bf:c7:59:12:9d:c6:b3:d8:4b:
cf:31:56:72:72:a3:5d:b6:0c:7b:8f:38:75:65:21:
0a:13:a7:ae:12:b8:2c:c8:57:9d:55:e3:73:28:bf:
da:33:39:a8:d3:ae:78:ac:ab:ad:1e:1c:f9:fd:6f:
df:3c:37:eb:75:bf:31:43:4d:16:d0:03:37:b5:ff:
d0:b9:b8:94:2c:7a:63:6e:a3:ba:8b:d2:3c:bb:3e:
f4:d9:72:c1:a1:7e:4f:ca:a6:ea:52:9c:cc:34:65:
ea:7b:11:e5:8c:8b:cb:9c:13:d5:4d:fd:9b:f6:f8:
f1:eb:cb:45:cf:7a:52:3d:7a:ca:d1:a5:d9:2e:f7:
24:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C1:AE:2A:DF:B1:69:19:47:0D:E9:24:CC:F6:0D:9F:10:19:3A:FA
X509v3 Authority Key Identifier:
keyid:A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:aa:b8:41:ff:84:45:9b:d4:4d:80:ef:84:a0:79:7e:6c:1b:
85:73:1c:9e:61:d7:d6:d0:b3:1d:6e:04:c5:1b:87:8f:70:4f:
fc:2e:21:96:cf:14:e8:a1:99:d6:01:15:b9:7a:df:bb:6c:60:
cf:f1:a9:d1:fa:1b:cf:ed:dc:7d:79:28:12:32:b7:c8:43:3d:
91:07:87:9f:7e:e1:15:47:82:f0:35:2a:49:df:82:c1:9b:c0:
13:19:4c:b8:08:57:2a:56:66:7c:39:08:a0:e7:b4:f1:f1:89:
5d:cd:6d:34:d9:c9:37:3c:21:79:17:88:12:22:48:cd:51:b5:
e6:d2:bf:27:c1:b5:cc:e4:f3:49:5c:ee:7c:42:79:df:69:d2:
11:2b:b4:eb:58:8f:e3:68:5d:cd:59:ec:91:69:5d:ed:9c:98:
c7:95:03:3b:e3:58:20:85:42:56:aa:9e:7a:b6:06:18:c8:71:
44:9f:3a:7a:ee:59:e3:04:20:42:5d:31:c5:1b:82:95:2a:f4:
61:ee:4e:ad:8a:49:e4:23:df:27:49:3d:32:23:51:c3:38:9c:
5e:3d:75:9f:3d:22:bf:52:26:09:23:cc:de:cf:33:69:72:93:
3c:39:47:d8:b9:9a:b6:48:b1:d1:9f:55:b6:9a:71:b1:27:ee:
3b:f4:98:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncnIAn7Tr786xJYviCEGtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NjI0NmI4MDZlODlhYmE0MGU3ZTU4ODg4ZjM1NzY1MTNh
MzkzNGEwHhcNMjYwMzI2MDAwMTQ0WhcNMjYwMzI3MDAwMTQ0WjAzMTEwLwYDVQQD
EyhiMmMxYWUyYWRmYjE2OTE5NDcwZGU5MjRjY2Y2MGQ5ZjEwMTkzYWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUZft1ljyFN3QmB7Lt2nvxswhpKp
heTdj0il1PRSltBjLoWtloCSbVmG0QM71Z6PE0l1H50F4HsrIlIzqpt0VGFOBQCB
iU+LfFIt26gSXmWO1CFlQZPCm7UVt24K8uhm1Tv9rW2R2geo2BY4fmV/IRKyx+fE
qlN2711mKp+/x1kSncaz2EvPMVZycqNdtgx7jzh1ZSEKE6euErgsyFedVeNzKL/a
Mzmo0654rKutHhz5/W/fPDfrdb8xQ00W0AM3tf/QubiULHpjbqO6i9I8uz702XLB
oX5PyqbqUpzMNGXqexHljIvLnBPVTf2b9vjx68tFz3pSPXrK0aXZLvck0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLBrirfsWkZRw3pJMz2DZ8QGTr6MB8GA1UdIwQY
MBaAFKZiRrgG6Jq6QOfliIjzV2UTo5NKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG1KR3VBYm9tcnBBNS1XSWlQTlhaUk9qazBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81NTUyMjEtMDAwZC00OWY2LTgzMzUt
NGZkMjhjNjYxOWFlLzEvcG1KR3VBYm9tcnBBNS1XSWlQTlhaUk9qazBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC81NTUyMjEtMDAwZC00OWY2LTgzMzUtNGZkMjhjNjYxOWFl
LzEvcG1KR3VBYm9tcnBBNS1XSWlQTlhaUk9qazBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMqq4Qf+E
RZvUTYDvhKB5fmwbhXMcnmHX1tCzHW4ExRuHj3BP/C4hls8U6KGZ1gEVuXrfu2xg
z/Gp0fobz+3cfXkoEjK3yEM9kQeHn37hFUeC8DUqSd+CwZvAExlMuAhXKlZmfDkI
oOe08fGJXc1tNNnJNzwheReIEiJIzVG15tK/J8G1zOTzSVzufEJ532nSESu061iP
42hdzVnskWld7ZyYx5UDO+NYIIVCVqqeerYGGMhxRJ86eu5Z4wQgQl0xxRuClSr0
Ye5OrYpJ5CPfJ0k9MiNRwzicXj11nz0iv1ImCSPM3s8zaXKTPDlH2Lmatkix0Z9V
tppxsSfuO/SYLQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:56:02 2026 by rpki-client