Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
File: pj3LkKFHQqUr5coJy-2N_BzT0e8.mft (raw, json)
Hash identifier: ekl/7WKWNOF23i7GsTO0Jdio0M3fTJB39rcYbmzG0xA=
Subject key identifier: 2D:D1:CC:BA:BB:9F:D0:EB:0A:64:2D:ED:D1:20:2F:FA:CA:15:CA:BA
Authority key identifier: A6:3D:CB:90:A1:47:42:A5:2B:E5:CA:09:CB:ED:8D:FC:1C:D3:D1:EF
Certificate issuer: /CN=a63dcb90a14742a52be5ca09cbed8dfc1cd3d1ef
Certificate serial: 019D284DF4E1E41C0652CDC33846783BBF9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 04:01:30 +0000
Manifest this update: Thu 26 Mar 2026 04:01:30 +0000
Manifest next update: Fri 27 Mar 2026 04:01:30 +0000
Files and hashes: 1: 9xtV_Pla1WgMl3ubvegTPHITTAQ.roa (hash: AXS+nn2vCSazRZVNivUy+3jk/liVHM3b04sQJUOyc0U=)
2: pj3LkKFHQqUr5coJy-2N_BzT0e8.crl (hash: x/6xEOSsifDVxSTDXqz7SFhYkDvPoNVfsVnMJ2Wr+T4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:f4:e1:e4:1c:06:52:cd:c3:38:46:78:3b:bf:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63dcb90a14742a52be5ca09cbed8dfc1cd3d1ef
Validity
Not Before: Mar 26 04:01:30 2026 GMT
Not After : Mar 27 04:01:30 2026 GMT
Subject: CN=2dd1ccbabb9fd0eb0a642dedd1202ffaca15caba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6c:d4:76:dd:4f:f1:d1:97:70:d2:f0:c4:18:
6b:ce:29:b3:b5:eb:ec:3a:50:67:25:0e:e6:35:17:
11:75:6b:19:71:d0:94:0c:82:26:92:91:ce:16:b4:
50:6f:0a:64:42:de:f7:1f:f7:c8:e6:de:4a:49:2b:
75:4f:6e:9f:74:30:44:8b:9f:17:cf:db:e8:77:62:
55:6f:31:af:d8:75:f4:75:39:b3:b9:fb:4d:4e:a1:
e5:7a:97:0a:3e:78:d0:50:28:72:e5:62:0d:89:44:
76:97:ce:9a:07:10:73:e9:dc:9a:03:97:62:12:8c:
f1:d1:35:16:87:03:b9:72:23:86:01:0e:03:e5:96:
c6:b5:fd:cd:31:ef:5d:f4:c3:f7:38:d7:1a:33:a7:
41:8c:4b:a4:8c:3a:7a:09:f2:71:01:c0:a9:35:81:
db:1d:dc:b1:96:e9:e0:c0:37:88:1a:7a:c8:d1:0b:
75:32:a8:10:89:99:28:db:c0:7f:a4:8b:eb:cd:6f:
d7:3d:4a:00:48:98:48:cf:71:e2:7c:5b:a5:e6:b8:
3e:fa:03:7a:a8:e9:c0:b2:1e:2e:8b:20:da:9f:ed:
18:eb:b9:e3:43:9c:52:38:11:f0:b2:6e:e1:a5:66:
5f:bb:48:73:98:e2:e0:b2:29:38:48:cd:4c:33:15:
3a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D1:CC:BA:BB:9F:D0:EB:0A:64:2D:ED:D1:20:2F:FA:CA:15:CA:BA
X509v3 Authority Key Identifier:
keyid:A6:3D:CB:90:A1:47:42:A5:2B:E5:CA:09:CB:ED:8D:FC:1C:D3:D1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj3LkKFHQqUr5coJy-2N_BzT0e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/2c8b70-66bc-4163-8f80-20f7d44ed126/1/pj3LkKFHQqUr5coJy-2N_BzT0e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:bc:e1:a8:51:00:8f:27:e0:9a:84:88:d8:f1:50:21:96:fb:
f8:e7:57:27:15:85:ad:79:71:a8:3d:a1:7d:86:50:71:8f:82:
40:fb:d7:c8:b1:f5:6d:f9:3b:87:86:3a:14:79:93:0f:28:c5:
53:de:eb:33:28:c1:cb:a0:4b:1b:18:36:ee:05:f4:b4:bb:2c:
e0:7a:9a:63:04:ea:c9:43:7d:85:79:c6:2f:d4:07:6f:16:52:
01:dc:2a:52:53:c2:ad:56:19:7f:a9:c9:85:19:51:d6:ce:ca:
7c:ab:5b:17:0f:d4:97:66:d5:8f:45:18:82:41:d9:19:93:17:
27:c1:78:7d:67:82:e8:b4:05:41:f7:2a:15:b6:8f:3f:e0:0a:
aa:c2:0a:41:b7:68:30:dd:f6:cc:37:ff:24:d1:ed:90:37:e7:
41:25:9c:ad:23:3b:39:e5:1b:08:ad:9a:d1:da:f8:74:9f:4f:
26:11:ab:93:ec:d7:b4:b6:01:90:01:42:01:bb:dc:4d:50:d8:
ab:4d:cf:3a:6f:19:5e:f7:03:0e:99:72:70:0a:6b:0f:ab:32:
da:9c:37:37:74:46:51:7e:3f:2a:58:cf:d0:0e:1a:40:0e:0c:
48:f3:64:00:49:5e:80:4a:ee:a8:02:77:65:0b:d7:3c:10:62:
b0:e7:a0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:11:02 2026 by rpki-client