Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
File: PIbsMh5y_UbJjcwM18cLytVX1Zw.mft (raw, json)
Hash identifier: QsVo0fzw59bo51RW7c5fuIShs8caICpU98AGKjAxYMc=
Subject key identifier: 54:BF:AB:4E:5B:ED:FB:A6:93:23:C4:D7:CB:00:FF:A2:8B:A4:D3:07
Authority key identifier: 3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C
Certificate issuer: /CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c
Certificate serial: 019D254C2D0425FBBB832F3ADE149A09912D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 14:00:42 +0000
Manifest this update: Wed 25 Mar 2026 14:00:42 +0000
Manifest next update: Thu 26 Mar 2026 14:00:42 +0000
Files and hashes: 1: 4rFM8nRqB3wIzJNdl4Iak_eVuZE.roa (hash: Kwqu0+r6aXX02cJCwND/MQ/S96ntwFBqXiJUoHPSRng=)
2: 8gZUKS9DPrzIKU6t3Ppj9HpjN8s.asa (hash: 5QyuW7GmPubpV6wNPhptkp1H/1cC97GACwQ13UVYU/U=)
3: PIbsMh5y_UbJjcwM18cLytVX1Zw.crl (hash: lSBd/vkBdQ8n8lNOIj//8LQEi+Vf6602/ibc1ZKbu0U=)
4: PSLB-l9ImRjJYxXtqUzR_0IrtRI.asa (hash: LVEG5N1yX8OBlNGRloySVOQ5WSEHDaxbsgyqrIM+wcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:2d:04:25:fb:bb:83:2f:3a:de:14:9a:09:91:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c
Validity
Not Before: Mar 25 14:00:42 2026 GMT
Not After : Mar 26 14:00:42 2026 GMT
Subject: CN=54bfab4e5bedfba69323c4d7cb00ffa28ba4d307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ad:cc:84:e9:0b:2e:8c:9e:dd:ac:76:29:ee:
4f:12:9f:cf:fa:f0:da:3c:2d:cf:4c:fe:92:62:46:
f6:98:dc:dc:b5:67:04:ba:6a:09:3d:a1:e5:de:0a:
bc:4d:19:43:a7:ea:bd:18:a8:42:66:3c:ab:50:06:
62:0f:47:a6:b9:a4:50:cc:42:e1:b3:35:f8:7c:ea:
fd:04:2b:f7:b3:a7:ca:0b:d4:e8:81:c6:2f:ce:e6:
38:51:55:f7:11:b3:f3:53:be:0d:f2:40:00:1c:cd:
92:3b:7a:50:03:03:91:94:2d:45:2c:9d:48:7b:8b:
a5:51:83:31:c0:65:a2:be:4a:f4:06:5f:0f:6c:fb:
31:dd:a7:b2:fb:fb:26:4a:9a:ba:cd:86:f9:8c:7e:
e0:31:1d:c1:ae:81:15:e5:a6:f8:c2:a2:3e:a4:0e:
d3:b8:01:bc:08:d3:6a:4d:d2:40:f4:63:56:5b:94:
eb:ee:ba:b6:66:c9:df:7b:7a:ec:25:45:40:42:68:
3d:09:3c:2b:73:50:ac:45:39:a7:48:0d:c6:3e:55:
30:fe:27:58:d3:10:0a:65:88:02:bb:c3:4b:4d:39:
99:73:27:0a:13:53:34:57:c7:2f:df:e9:31:c7:a6:
c3:d7:34:b3:b3:6d:70:1d:3a:21:47:68:54:4a:73:
00:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BF:AB:4E:5B:ED:FB:A6:93:23:C4:D7:CB:00:FF:A2:8B:A4:D3:07
X509v3 Authority Key Identifier:
keyid:3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:63:64:3f:d5:9e:14:5e:f5:f5:f4:62:4e:e7:6d:28:c4:a8:
82:b6:5a:54:f6:33:e3:ad:b3:5c:11:aa:0d:9f:18:f5:0f:98:
cc:4c:23:92:1a:7e:eb:2f:f6:55:f5:c2:aa:08:0c:40:6d:2a:
46:ee:b5:8f:c7:0d:17:93:99:0e:97:e8:8a:eb:f7:1d:20:53:
b0:c3:14:2a:41:d6:14:fa:d5:0c:3a:32:1c:21:df:2a:48:a5:
51:eb:4e:de:81:fe:da:49:9b:4b:32:85:85:97:fd:ee:2d:17:
1c:08:3f:e1:dd:34:e3:52:98:cc:c5:29:eb:93:ab:21:0e:be:
1b:c2:61:3a:f9:c5:7b:5e:19:82:03:e7:09:46:8d:fe:14:58:
8a:63:a7:49:20:36:23:a6:af:f6:9f:b8:76:1a:39:79:da:ee:
84:1a:99:56:94:c5:d0:67:d3:7f:b4:5b:4b:4a:23:0e:f6:a0:
f7:5a:fe:2a:f6:7a:a2:eb:a5:c7:aa:cd:63:fd:c0:da:86:a1:
ef:1a:50:ce:f4:e4:ae:aa:e5:43:94:57:9f:30:41:d8:ef:2c:
ec:85:cd:38:bf:b5:bc:a7:7d:46:99:6c:d6:b1:f1:07:6f:dd:
b7:ff:c5:aa:73:cb:5f:46:1f:67:03:be:3b:01:8a:02:f7:98:
b2:5d:39:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:47 2026 by rpki-client