Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
File: 0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft (raw, json)
Hash identifier: upi1Nig4J0AF0ICw5id4ScX6YaAh37MznguqTKw2+Ew=
Subject key identifier: 3D:55:69:7A:AA:7C:FF:4F:1E:22:78:24:D8:CB:2E:AE:42:3A:A1:D4
Authority key identifier: D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7
Certificate issuer: /CN=d0f6b8436f6634cd31d7097ce242a549935b18d7
Certificate serial: 019D28F3093DF6F8C3B35D744308992A2A3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
Manifest number: 185C
Signing time: Thu 26 Mar 2026 07:01:49 +0000
Manifest this update: Thu 26 Mar 2026 07:01:49 +0000
Manifest next update: Fri 27 Mar 2026 07:01:49 +0000
Files and hashes: 1: 0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl (hash: g62yGVcrvcbryP74D/ZQ4ymChWh70bPvmaXWqpK13j8=)
2: 5oT4wQDby08NkKpZXaWKlUX_zBw.roa (hash: UH0KTt9pI8ZDsM/VAmcpjDz5ijVSpSbjaototx0G23E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:09:3d:f6:f8:c3:b3:5d:74:43:08:99:2a:2a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f6b8436f6634cd31d7097ce242a549935b18d7
Validity
Not Before: Mar 26 07:01:49 2026 GMT
Not After : Mar 27 07:01:49 2026 GMT
Subject: CN=3d55697aaa7cff4f1e227824d8cb2eae423aa1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c1:ca:c9:7a:ff:e3:1e:0a:01:20:de:99:9f:
55:c1:7f:14:a7:0b:63:d5:bb:f2:7b:ca:e4:1e:30:
71:c9:78:d9:05:26:50:ff:7f:78:0e:93:0a:5c:a0:
2a:ac:ec:5b:20:57:59:cf:58:1a:3c:1f:5f:c2:c8:
24:10:74:ab:4c:c4:05:85:d6:62:aa:22:43:ea:bc:
12:14:af:39:7b:51:03:a2:d2:a9:a7:56:29:6a:10:
e3:3a:85:c3:a6:d3:c4:8c:1a:d2:dd:c2:de:09:40:
d7:78:d8:34:7e:eb:d9:3e:b6:12:ee:3b:21:6d:57:
a2:96:9f:ed:00:a9:09:49:c6:41:6d:04:a7:fb:e9:
d3:3e:b4:69:7b:58:ee:5e:19:cd:e6:61:52:fa:c2:
cd:6b:a5:08:2f:9b:1d:21:8c:cb:92:c2:df:e8:36:
18:5e:7b:d1:99:f3:27:a9:5f:25:0e:d8:8d:9d:65:
a6:f7:3f:28:29:f4:4f:09:70:56:6a:35:6c:49:4c:
61:fd:64:a5:9c:45:c9:2e:7e:95:9e:76:96:a4:ac:
4b:73:08:d0:3c:3f:0e:26:16:2c:41:ab:46:99:a5:
be:70:15:d7:9b:97:af:98:6c:91:3d:35:29:00:59:
73:a6:6b:d4:57:77:ed:dc:56:c3:83:84:e0:4e:7b:
1c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:55:69:7A:AA:7C:FF:4F:1E:22:78:24:D8:CB:2E:AE:42:3A:A1:D4
X509v3 Authority Key Identifier:
keyid:D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:1f:7c:17:6f:c7:f8:8f:f5:68:94:e2:91:2e:66:e7:f4:3c:
f9:81:47:29:5b:1a:a4:8c:70:67:7b:a1:90:ae:25:f5:72:2b:
b8:3d:89:56:7a:03:e7:cf:e0:ae:b0:27:01:cc:f9:6b:a3:5e:
b5:43:0e:3e:79:15:88:59:10:22:15:c8:d4:f2:7d:ab:31:32:
8b:7e:7f:59:b3:e7:48:a6:f0:b7:cf:eb:11:bf:c8:42:77:0e:
77:1b:a1:8a:57:11:21:9e:b0:38:41:34:1e:91:a6:41:73:9d:
95:43:f3:5e:90:5b:12:52:20:9c:05:00:cc:06:74:96:1a:b5:
1c:e4:79:b5:2e:62:e1:eb:a0:13:67:68:8a:a5:d2:c1:2e:ea:
72:16:21:f0:32:01:6f:ac:17:7e:12:3a:de:01:66:e2:d7:4f:
e9:25:85:5d:8f:a4:ca:1d:b7:da:74:fd:6e:e7:e3:7d:62:00:
d0:ce:70:53:f2:bb:0e:05:4e:f3:6c:db:b2:a9:f1:92:89:d0:
f2:32:17:35:b3:55:ed:55:af:45:d9:99:3c:85:fc:95:64:99:
74:4b:39:36:67:99:22:c2:7b:fe:36:35:36:80:98:99:b0:7c:
e4:ce:36:fe:9a:a0:9d:a8:24:5f:a2:87:30:b9:aa:37:7d:5c:
5d:3d:74:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:02:05 2026 by rpki-client