Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft
File: p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft (raw, json)
Hash identifier: HDfeEC5qRT3xhn7+0SNTX+6NTY05GSymXyb74NuxYDs=
Subject key identifier: 94:FF:35:E0:89:A1:A4:81:6F:B1:94:30:6D:8B:2B:17:F6:78:D4:C3
Authority key identifier: A7:F0:9A:D8:AA:D3:B3:35:48:75:BB:EA:ED:05:B6:1A:54:A0:37:04
Certificate issuer: /CN=a7f09ad8aad3b3354875bbeaed05b61a54a03704
Certificate serial: 019D28BBEA1A1A4AFF3CAE33417A65D3223F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft
Manifest number: 0DFB
Signing time: Thu 26 Mar 2026 06:01:36 +0000
Manifest this update: Thu 26 Mar 2026 06:01:36 +0000
Manifest next update: Fri 27 Mar 2026 06:01:36 +0000
Files and hashes: 1: 9pepTGO1AQ-BgqQPPvdXVGo8fj8.roa (hash: Oz17KeL/QvTihYxjOX/vDKG2jFWQLOGdnlYrSALuc3I=)
2: p_Ca2KrTszVIdbvq7QW2GlSgNwQ.crl (hash: YcNXUa7HSHEs7/4/+p5hMnzJEvWIP9UKThnmP3KTK58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:ea:1a:1a:4a:ff:3c:ae:33:41:7a:65:d3:22:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f09ad8aad3b3354875bbeaed05b61a54a03704
Validity
Not Before: Mar 26 06:01:36 2026 GMT
Not After : Mar 27 06:01:36 2026 GMT
Subject: CN=94ff35e089a1a4816fb194306d8b2b17f678d4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0b:5c:88:d5:b2:9f:62:b0:45:ea:c1:b5:8a:
9e:06:d8:32:59:7a:b0:5a:d9:1e:4f:23:76:5b:61:
e9:6b:22:d0:cf:35:23:c5:c4:d8:89:d7:99:26:13:
f8:1a:23:7f:0a:0f:6b:3e:a9:2e:03:1b:e3:a6:f7:
80:9d:14:45:af:06:eb:76:a1:04:39:c3:8e:69:3b:
cc:b0:55:a7:f8:19:65:2c:bb:6f:bc:09:c2:3d:63:
77:56:9e:4f:90:c9:fe:4e:18:be:c2:b0:4d:ef:79:
5b:0e:f0:93:04:c0:30:fd:4c:89:1c:51:77:40:da:
d9:84:68:52:46:e6:32:84:fa:5b:a5:a0:3c:19:da:
4d:4b:6e:d3:0a:e6:8d:fb:ef:20:92:24:08:0b:d9:
3b:96:85:8f:83:96:72:f1:b2:bb:42:50:4d:af:2d:
1c:ea:8b:07:67:69:64:2b:4e:0b:bd:c0:c3:cb:ed:
08:6c:8c:c7:bc:ad:16:64:03:4b:4b:bb:c2:59:58:
0b:cb:81:e0:4d:ee:a4:bb:24:ab:b7:ff:ba:80:c5:
7f:71:01:22:e1:21:3e:8f:66:04:3a:ea:b8:ac:ee:
a2:de:78:4b:b0:ce:bd:ff:54:70:b8:cd:67:d2:47:
e8:8a:c5:9d:8f:e9:a9:5f:e6:79:7b:ce:8e:42:68:
1d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FF:35:E0:89:A1:A4:81:6F:B1:94:30:6D:8B:2B:17:F6:78:D4:C3
X509v3 Authority Key Identifier:
keyid:A7:F0:9A:D8:AA:D3:B3:35:48:75:BB:EA:ED:05:B6:1A:54:A0:37:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:79:7a:52:2f:aa:6c:af:f6:ef:6a:8d:62:04:be:77:72:73:
63:d1:7b:c8:21:08:d5:a0:39:6e:92:91:09:ce:f6:17:ad:dc:
e6:04:28:e7:7f:27:f5:40:a7:b3:4a:a2:b9:ff:9b:22:b8:e9:
91:a1:88:4e:7a:d2:9c:90:88:88:fd:40:3d:c0:2e:fa:54:48:
8b:4e:d2:fa:b4:9d:ff:3e:99:ae:9f:87:86:63:02:d9:e1:c9:
30:30:3b:39:60:99:fb:10:22:c9:29:4e:c9:42:62:8e:a2:fb:
95:b9:3f:8f:09:8b:1f:a0:05:65:65:6c:c8:81:5a:9f:ec:ad:
ee:62:c9:e2:be:b1:03:6f:75:69:3d:70:26:69:44:bc:39:b6:
46:71:02:33:0f:59:28:40:dc:7a:0e:1d:f9:83:f5:a8:de:0a:
5d:10:64:8e:17:42:a3:48:84:74:f3:30:e0:7c:ce:b0:90:f3:
2a:bc:98:44:0b:e5:16:af:06:fd:03:ec:88:4c:30:f5:b7:b0:
6f:91:35:32:68:52:7b:b0:98:c9:5a:d0:a7:f7:3a:78:5b:c4:
7b:25:1d:14:6b:58:41:31:6c:59:e9:60:7f:4d:e9:bb:9a:1b:
44:c8:95:be:f9:84:e6:ab:2c:63:e2:08:9e:12:3a:52:9c:be:
98:88:88:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:51:39 2026 by rpki-client