Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
File: pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft (raw, json)
Hash identifier: 2fh8qNlO1IIR/4sJSCI+MTgciHxxc2SDm2euLA7Bsgk=
Subject key identifier: 96:68:0F:FB:2A:5B:05:E7:B0:35:CD:C2:BA:A8:31:33:E9:8A:49:D6
Authority key identifier: A4:33:E3:2A:C0:C6:FA:73:5A:6C:7B:E1:44:CF:A3:FC:29:7C:0B:98
Certificate issuer: /CN=a433e32ac0c6fa735a6c7be144cfa3fc297c0b98
Certificate serial: 019D2695E5302F9690D0E1A130F4FDCCE81E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 20:00:50 +0000
Manifest this update: Wed 25 Mar 2026 20:00:50 +0000
Manifest next update: Thu 26 Mar 2026 20:00:50 +0000
Files and hashes: 1: pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl (hash: M2QINakGQZ/XZBD7BwJweHNmyhYgGFPiedyHktO9uUM=)
2: sFhaHiuTZkyPvfZGeitPsQ50uDY.roa (hash: A+Ir0fHumCJtAvIDD0Uq1l9aMQ2n7on4GhmvbKyT6iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:e5:30:2f:96:90:d0:e1:a1:30:f4:fd:cc:e8:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a433e32ac0c6fa735a6c7be144cfa3fc297c0b98
Validity
Not Before: Mar 25 20:00:50 2026 GMT
Not After : Mar 26 20:00:50 2026 GMT
Subject: CN=96680ffb2a5b05e7b035cdc2baa83133e98a49d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ee:2d:6e:41:4f:96:8f:8e:d6:7e:6c:63:79:
cf:0e:4c:23:23:0c:55:2f:3f:08:38:53:15:2a:53:
63:93:cd:5d:d1:f0:0c:c7:73:10:2b:76:0e:7b:18:
1c:9d:67:30:97:51:94:95:e6:3a:bd:27:8c:87:63:
43:a7:a9:94:5a:4a:c0:56:12:26:19:29:da:72:6f:
99:4d:21:0a:11:fc:9d:98:a7:69:32:9e:53:3d:18:
00:09:5f:fc:07:16:e7:c4:ba:0b:8e:9b:60:82:25:
5b:eb:7e:22:96:cb:e8:b6:31:88:6e:73:2e:8b:3e:
a1:16:3f:a9:ab:fe:73:50:c5:e1:4f:c9:23:30:84:
b9:6b:cd:4c:f8:2f:87:3b:2b:a2:63:b3:e2:a0:30:
3f:6e:5a:a6:96:65:ca:b6:86:ee:12:3c:c1:bc:6c:
5c:d4:fb:18:60:ee:6a:68:8d:5a:5a:f7:b1:c4:93:
68:22:7c:85:78:79:fe:5e:cf:07:db:07:aa:6b:45:
cf:95:1e:19:3c:ba:25:fb:ba:44:1e:31:25:42:00:
04:55:d8:8e:32:54:4d:2d:2c:34:4f:8b:bf:b6:f9:
a6:41:cd:28:dc:3e:66:27:2b:d0:f1:51:9d:22:c5:
a1:8e:e2:d7:ac:a8:9f:17:10:60:b3:ed:a4:e3:9c:
99:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:68:0F:FB:2A:5B:05:E7:B0:35:CD:C2:BA:A8:31:33:E9:8A:49:D6
X509v3 Authority Key Identifier:
keyid:A4:33:E3:2A:C0:C6:FA:73:5A:6C:7B:E1:44:CF:A3:FC:29:7C:0B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b5:0b:17:8e:3c:94:85:e0:82:86:a0:76:60:23:6e:32:c0:
5f:c3:b5:f8:99:9a:ae:ad:00:90:1b:3e:d1:f9:33:f5:ea:4f:
74:67:3e:80:83:ca:df:b7:5d:4c:b8:f2:40:a4:22:4b:23:ae:
c5:09:5d:2a:4f:33:84:d5:aa:8f:28:65:7e:1e:d9:87:92:10:
f4:9b:0b:ae:7c:60:d2:8f:fa:91:9d:be:a0:5c:66:38:42:ac:
a2:80:a6:2c:29:ac:d9:8e:7b:a8:52:76:cf:3a:2c:1e:6e:3c:
ca:bf:d3:90:3a:70:2a:24:fd:65:a3:96:0b:ce:6e:3c:a2:b4:
7d:a4:6a:76:26:02:0d:a1:ed:4a:da:5c:6a:25:25:17:de:35:
c2:09:86:49:e2:0e:aa:33:62:f2:4f:ba:4b:3c:69:16:fe:d3:
d2:c4:a8:e1:4e:56:35:c0:bb:2a:6b:e1:32:91:6c:12:fe:5a:
e4:26:0e:2b:fd:11:02:1a:e8:b8:25:89:7e:df:4b:d7:00:ed:
f3:ea:ac:e4:9d:36:51:8a:e6:55:b6:cd:7f:82:55:f0:e6:16:
57:a7:ef:5c:df:5a:be:94:27:88:c8:db:bb:b2:24:2b:43:79:
37:ef:5e:04:d5:46:bf:99:49:e2:89:21:3f:16:26:4c:91:a6:
e6:d6:83:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:50:59 2026 by rpki-client