Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
File: PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft (raw, json)
Hash identifier: fFFJqaLc14YJo+9OiX1cRHaHxBPIVgldxAQTf9+iizM=
Subject key identifier: 5B:0D:31:93:C7:E0:C2:DF:98:E9:6E:B3:EA:9C:8D:68:E8:96:8B:57
Authority key identifier: 3C:A1:FA:BE:9F:0B:3E:97:7F:8E:08:29:C0:BF:5F:08:78:38:46:68
Certificate issuer: /CN=3ca1fabe9f0b3e977f8e0829c0bf5f0878384668
Certificate serial: 019D2A3BA07D62E1F251A463030ACE9C2A2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 13:00:43 +0000
Manifest this update: Thu 26 Mar 2026 13:00:43 +0000
Manifest next update: Fri 27 Mar 2026 13:00:43 +0000
Files and hashes: 1: PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl (hash: Wi8UlPTB7XCzTCGhLfEPMSmV4sB0FFJPZ706RssDty0=)
2: m5c3Kp4r9aaG4JXnWoVgbW6fzLM.roa (hash: zFQk8P7qdiOsDme61W/zQfVewpw/uX39LK39s6ZU7J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:a0:7d:62:e1:f2:51:a4:63:03:0a:ce:9c:2a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca1fabe9f0b3e977f8e0829c0bf5f0878384668
Validity
Not Before: Mar 26 13:00:43 2026 GMT
Not After : Mar 27 13:00:43 2026 GMT
Subject: CN=5b0d3193c7e0c2df98e96eb3ea9c8d68e8968b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ea:40:e0:36:fc:7b:82:69:69:87:80:3d:05:
ee:c7:61:9b:2e:aa:c0:7e:cb:5c:fe:57:1b:63:1d:
60:40:af:e4:24:a3:a9:af:1b:d4:bb:94:85:4c:e5:
ce:23:e0:5a:99:65:0f:e2:a1:b1:cf:52:01:cf:cd:
7d:ac:23:95:cc:57:51:aa:42:fe:69:11:c7:eb:b3:
12:d8:56:a5:03:fa:c0:b9:4f:6e:7c:06:39:e2:02:
cd:a2:fc:6a:e6:45:56:c0:89:56:49:fc:f0:d0:52:
49:ee:c5:03:ff:b4:34:23:6b:38:f8:e8:d2:4a:88:
b5:2f:31:54:c7:ea:c1:60:f4:a7:3d:f6:a2:cf:ea:
66:2f:7b:db:e0:0b:91:34:99:1b:2a:cc:c9:60:32:
c2:be:1d:60:0b:da:51:63:03:ec:34:da:b4:b2:74:
f9:62:93:19:22:13:08:4c:27:16:47:5a:88:e8:24:
ab:c3:1a:4c:8b:e8:10:66:40:90:d4:19:2a:6d:cc:
51:1f:ef:07:85:13:18:d6:32:be:35:41:3c:44:6a:
f3:90:25:27:49:3a:bb:12:d3:03:65:b0:08:cb:8b:
7f:86:e3:54:3c:20:2d:d1:7b:05:2d:4e:64:b7:14:
fd:b9:2d:06:46:b3:b6:bd:dd:a0:65:50:0d:f9:fa:
c4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0D:31:93:C7:E0:C2:DF:98:E9:6E:B3:EA:9C:8D:68:E8:96:8B:57
X509v3 Authority Key Identifier:
keyid:3C:A1:FA:BE:9F:0B:3E:97:7F:8E:08:29:C0:BF:5F:08:78:38:46:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:50:b2:75:b1:23:a3:a6:ca:e4:f7:d6:d0:49:81:c4:ad:8a:
28:9d:6a:81:36:22:29:5f:53:bb:66:b3:b3:f5:78:ae:4e:83:
e6:f8:6a:6f:e0:6e:2a:38:05:45:b3:bc:8b:80:e6:d9:18:d3:
82:1e:75:3f:38:11:fa:b6:0a:52:af:19:1a:8e:0f:96:fe:62:
d8:06:e2:57:24:bc:0f:c5:53:d2:c3:05:4e:b5:09:08:04:5d:
35:b5:bb:68:8d:e9:a1:ef:f8:0c:fd:38:b0:dd:fb:b8:18:18:
04:19:16:81:df:ac:34:59:fc:2f:38:af:00:fa:10:51:f4:49:
6f:13:e5:60:46:e1:16:25:30:a4:d5:f6:6f:9e:91:40:3c:7d:
67:40:7e:ed:ed:6b:79:4b:a6:86:1a:e3:e0:c6:72:79:ba:06:
03:9d:b5:12:c1:6f:11:2c:b7:4e:78:67:88:3a:88:d6:db:4b:
24:61:ee:cc:e9:49:71:36:c2:e1:6f:5e:eb:de:e3:65:40:54:
61:37:15:7b:d2:7a:28:20:7b:d6:cf:68:71:30:41:c3:49:cb:
1d:65:01:95:43:2b:44:7a:17:2f:69:85:01:d0:f7:8d:70:91:
65:bb:a6:df:40:5b:0c:4e:9d:74:a9:d9:18:5a:97:89:8f:a7:
4c:f4:3a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:22:32 2026 by rpki-client