Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
File: pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft (raw, json)
Hash identifier: fHIbE8h2AGjxIzIXpXPO/pdoA0xYWDMviVH/x9+99n4=
Subject key identifier: 4E:1C:F5:29:2F:1B:3F:4E:C1:CD:95:A4:C9:69:AB:F0:A9:FC:34:12
Authority key identifier: A4:D3:22:69:30:2E:1C:BC:CB:AA:C0:E0:E5:AF:8A:86:44:98:A1:35
Certificate issuer: /CN=a4d32269302e1cbccbaac0e0e5af8a864498a135
Certificate serial: 019D26CCE47205A3C315773556F8B5000937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNMiaTAuHLzLqsDg5a-KhkSYoTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
Manifest number: 116C
Signing time: Wed 25 Mar 2026 21:00:55 +0000
Manifest this update: Wed 25 Mar 2026 21:00:55 +0000
Manifest next update: Thu 26 Mar 2026 21:00:55 +0000
Files and hashes: 1: LlCo-cr1TvaGSEsvi_aeztFDrsY.roa (hash: ONGlxNxuG7wwvZScxkyZsCMFDhxVuAnR+LQnLfg7tcI=)
2: pNMiaTAuHLzLqsDg5a-KhkSYoTU.crl (hash: UtqHhVazo3VeUlaKE7/WkCyS+9RsPSlXMbc+e+akRVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNMiaTAuHLzLqsDg5a-KhkSYoTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:e4:72:05:a3:c3:15:77:35:56:f8:b5:00:09:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d32269302e1cbccbaac0e0e5af8a864498a135
Validity
Not Before: Mar 25 21:00:55 2026 GMT
Not After : Mar 26 21:00:55 2026 GMT
Subject: CN=4e1cf5292f1b3f4ec1cd95a4c969abf0a9fc3412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:dc:ac:e6:c2:57:d6:17:c6:4b:55:da:3b:dd:
b6:12:62:72:ee:2b:2e:c4:8c:df:ce:64:46:e7:fb:
e9:8f:c3:b7:8c:a4:e5:7b:ed:13:63:8e:cf:20:68:
a9:5b:26:11:32:4a:05:98:e6:b9:f9:90:7e:42:7c:
d7:b4:9b:e9:53:58:9a:32:d9:d8:c6:89:55:67:77:
b7:85:3e:d4:aa:1a:31:7c:64:c4:cc:ba:56:19:d0:
d9:ef:16:85:03:36:98:00:42:f9:3d:28:cf:d5:fd:
bd:e1:5d:82:0b:de:45:d6:e5:af:fd:d3:a2:9e:8d:
07:83:eb:fc:f0:31:57:43:89:4c:2f:9d:54:d5:c1:
07:97:05:f2:6c:74:30:59:70:24:7f:3d:8f:7a:b0:
30:6e:b9:e9:cb:06:57:55:47:1f:5f:96:80:04:63:
d0:1e:24:d3:81:00:2c:47:07:27:5b:0c:6b:d3:dd:
d4:5f:85:9b:d0:dc:c8:7e:da:bf:4d:e1:11:c6:73:
77:7d:44:ee:1c:1e:f9:2c:ef:c5:8a:b1:22:cd:e2:
a6:02:6b:bc:c9:a1:79:a4:1f:f0:8e:74:9d:46:1b:
e6:f4:e7:d4:67:31:7b:d7:d8:30:8f:d4:2c:4c:3a:
d6:c5:61:41:c9:1d:e2:10:28:09:f9:2c:a9:91:b8:
9a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1C:F5:29:2F:1B:3F:4E:C1:CD:95:A4:C9:69:AB:F0:A9:FC:34:12
X509v3 Authority Key Identifier:
keyid:A4:D3:22:69:30:2E:1C:BC:CB:AA:C0:E0:E5:AF:8A:86:44:98:A1:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNMiaTAuHLzLqsDg5a-KhkSYoTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:9f:d1:da:98:3a:1b:38:f8:f3:a2:e0:a7:ad:1e:02:d0:16:
d3:aa:fe:25:fb:18:fe:23:52:31:45:71:d4:cd:7d:89:a4:3c:
e1:8a:39:48:7d:7a:ca:be:34:4f:87:1f:11:9f:49:79:24:85:
d9:09:27:83:d5:b2:75:ce:73:cc:35:92:14:d5:04:f0:5a:9f:
48:ca:65:b1:ee:56:bf:2b:05:9a:95:bc:b4:d4:a3:0c:fd:5b:
ab:f7:a1:44:c5:c4:c6:50:0d:9f:1f:49:aa:fd:05:ee:80:c7:
9e:06:ee:9b:b2:1e:a7:51:64:59:93:67:42:86:79:33:e6:57:
d4:2d:a4:92:3a:f3:be:6d:ff:50:63:66:26:c0:c8:b9:50:27:
ae:9d:67:d7:14:17:99:44:b4:69:4e:43:8c:bf:59:6e:cc:f9:
e6:42:e7:a2:e5:9b:0c:4c:54:2c:d2:d3:a4:4c:13:08:c0:ad:
2f:a9:77:31:ef:ea:bb:82:70:30:55:8d:ee:6e:c6:5e:10:74:
e2:06:3f:39:62:bc:a2:af:89:14:0c:6c:2a:50:cf:7f:0d:b4:
24:74:d2:60:c7:3e:fe:bf:11:c6:64:7f:ac:e4:1a:cc:66:d8:
42:92:3e:28:48:9a:8c:5f:90:14:31:b6:bc:f2:85:b2:45:b1:
cf:23:ce:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:15 2026 by rpki-client