Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
File: PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft (raw, json)
Hash identifier: nbx1QgzaLd7MBNaPuV+g04MFSagftMXZdgTsmOImy+g=
Subject key identifier: BC:34:D0:90:F2:2C:28:BC:AC:26:89:B8:1F:74:5D:89:C0:BC:FD:8E
Authority key identifier: 3C:A1:FA:BE:9F:0B:3E:97:7F:8E:08:29:C0:BF:5F:08:78:38:46:68
Certificate issuer: /CN=3ca1fabe9f0b3e977f8e0829c0bf5f0878384668
Certificate serial: 019D265F78678380BF42532E13E12ACB868E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 19:01:24 +0000
Manifest this update: Wed 25 Mar 2026 19:01:24 +0000
Manifest next update: Thu 26 Mar 2026 19:01:24 +0000
Files and hashes: 1: PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl (hash: OVB3reT2zPsgw00MZE+H39WVG68DEpfWwjtOwMbjRA8=)
2: m5c3Kp4r9aaG4JXnWoVgbW6fzLM.roa (hash: zFQk8P7qdiOsDme61W/zQfVewpw/uX39LK39s6ZU7J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:78:67:83:80:bf:42:53:2e:13:e1:2a:cb:86:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca1fabe9f0b3e977f8e0829c0bf5f0878384668
Validity
Not Before: Mar 25 19:01:24 2026 GMT
Not After : Mar 26 19:01:24 2026 GMT
Subject: CN=bc34d090f22c28bcac2689b81f745d89c0bcfd8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:65:2c:e9:bb:5e:b8:5a:1f:79:97:42:3e:67:
8b:6a:18:ec:51:5e:68:7f:85:ec:4b:74:36:fe:48:
2f:ee:bf:db:40:f3:9d:62:1d:dd:98:4f:26:a9:a5:
2d:3c:d7:5f:d2:60:3d:fe:07:ae:a5:49:3f:a3:d6:
46:9c:45:57:43:54:07:1a:d7:1a:15:d7:ff:cd:ef:
ed:55:ec:81:77:3a:07:52:06:32:c5:d3:d8:bc:27:
c5:44:3b:a4:04:d4:8d:01:2c:df:cb:12:df:05:1d:
ab:ef:07:31:40:db:bb:65:83:d9:f8:77:40:75:ba:
85:d6:81:d6:47:22:f1:41:4b:d9:66:d0:99:e7:6a:
f7:38:8f:89:db:0d:da:bf:22:e1:98:3d:f9:c2:fd:
c0:ea:45:77:b1:bb:e1:cf:33:33:ed:9d:6a:56:af:
a6:b7:4a:ed:6c:1d:e0:3b:26:79:b9:97:67:6a:b4:
c3:a0:d2:41:b6:8b:78:4a:bc:96:5e:86:47:85:3d:
f2:0c:2c:60:1a:85:99:94:07:db:49:56:a7:2d:78:
a8:23:cd:cb:32:49:23:e8:08:1d:b1:9b:fa:87:21:
b7:39:a5:4a:ff:9d:78:4e:a7:6b:b7:21:f8:9c:a1:
34:89:8a:9d:f0:fc:9f:bf:e5:e4:46:5a:af:bc:cb:
51:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:34:D0:90:F2:2C:28:BC:AC:26:89:B8:1F:74:5D:89:C0:BC:FD:8E
X509v3 Authority Key Identifier:
keyid:3C:A1:FA:BE:9F:0B:3E:97:7F:8E:08:29:C0:BF:5F:08:78:38:46:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:df:21:18:81:67:32:f3:ff:d8:2e:5e:51:c2:bc:e3:db:56:
f1:fc:c2:e1:29:c4:f6:0a:85:20:b0:7f:8b:f3:97:4b:d6:89:
dd:3b:dc:a3:52:8d:cc:00:77:5e:ac:02:70:c3:a5:6f:88:c6:
79:26:af:c4:0b:e5:24:bf:76:37:a0:06:01:fe:d3:49:db:6b:
38:1f:32:6e:2b:17:d4:d6:2e:5e:99:05:33:4b:b6:fa:1d:d4:
5b:66:bb:ce:af:83:e4:04:91:ca:ec:e7:47:71:6a:32:ba:c0:
ca:f2:55:63:2b:b6:52:76:57:e4:70:4c:33:27:14:65:73:26:
e2:98:27:0d:44:a9:64:5a:39:de:11:32:30:e8:79:0f:46:fd:
5c:e9:dd:13:e8:ff:4a:06:99:90:df:6e:52:25:54:d6:d5:95:
76:e4:15:3e:1e:00:17:2e:41:72:8b:ae:ac:8d:bd:ab:dc:c4:
35:94:0a:76:cd:f2:09:c9:e7:a2:6d:b6:6b:5d:76:89:1e:78:
cf:f3:a1:ab:f4:c8:17:d1:81:be:16:e6:31:22:dc:7f:61:dc:
cd:26:e4:c9:c9:5a:4d:67:71:99:c0:b9:58:2f:4c:f8:c4:10:
91:98:11:1a:db:f2:20:bf:48:d2:9f:d2:3e:af:1f:a5:19:b0:
96:89:63:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:21:36 2026 by rpki-client