Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
File: pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft (raw, json)
Hash identifier: 82qv1fmVWnJYUCgyKVj0zfqCBSZELznGx0eA4r8aRJ8=
Subject key identifier: 55:BB:9D:8C:66:A2:D8:E0:71:86:47:67:15:9C:2D:F6:F3:3A:1C:60
Authority key identifier: A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37
Certificate issuer: /CN=a67f1cf27426070aeda7b26053453c283fdf7537
Certificate serial: 019D2704A3B34381501C1273BA4CC8EAC00C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
Manifest number: 0B13
Signing time: Wed 25 Mar 2026 22:01:48 +0000
Manifest this update: Wed 25 Mar 2026 22:01:48 +0000
Manifest next update: Thu 26 Mar 2026 22:01:48 +0000
Files and hashes: 1: XxeNNCKdsKtsWJE0Iy3TYGX5MOE.roa (hash: wAuwL6Iz2Pwm9WGIInMjcsxZMvhkc1vHutS+nMnQpa8=)
2: pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl (hash: 7mqI7Fa6uyOG5PgsZQqcoOqtsLXS7l/0mQKxYTCiVGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:a3:b3:43:81:50:1c:12:73:ba:4c:c8:ea:c0:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a67f1cf27426070aeda7b26053453c283fdf7537
Validity
Not Before: Mar 25 22:01:48 2026 GMT
Not After : Mar 26 22:01:48 2026 GMT
Subject: CN=55bb9d8c66a2d8e071864767159c2df6f33a1c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7a:44:ce:53:7d:e8:32:a4:4b:b2:19:ed:b8:
d5:80:5a:92:ca:ca:d7:dd:0a:31:7c:de:96:92:57:
78:47:f0:af:ea:fa:a1:25:3c:59:93:f6:80:11:26:
c7:f6:27:13:0f:67:1d:a3:64:b8:c8:fb:57:7c:ac:
8d:13:5e:b1:22:30:cc:d7:5d:c7:1f:bb:80:7c:05:
34:ed:64:13:0b:bc:40:17:55:af:53:af:2d:ff:60:
10:c8:8e:4e:22:fa:21:29:3a:b8:9a:c1:19:de:f0:
00:28:0a:ec:65:f8:48:4f:d2:05:8b:b4:22:4f:65:
e3:15:df:46:85:05:79:43:e4:17:92:a1:cf:73:8e:
7f:9b:56:db:83:a1:40:b5:84:c4:f5:c1:b0:d8:f8:
4d:a0:44:b0:08:f2:02:56:90:b5:82:6f:66:31:52:
72:b5:5c:3f:e1:97:0c:72:45:ac:94:07:32:08:d7:
67:c6:21:14:1c:5e:20:4b:87:ba:78:05:13:24:e1:
79:3b:9d:86:00:c0:fb:f1:e8:80:45:09:d4:39:66:
f1:19:f4:b9:5d:bd:44:b4:33:4e:05:c8:d8:62:30:
f5:cd:65:d3:be:06:c9:c2:ba:1c:63:d3:71:45:d0:
31:98:4d:5e:ec:da:6f:de:67:63:94:42:08:9f:55:
93:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BB:9D:8C:66:A2:D8:E0:71:86:47:67:15:9C:2D:F6:F3:3A:1C:60
X509v3 Authority Key Identifier:
keyid:A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:36:a6:85:0a:ae:f0:1f:7e:34:0f:f7:e7:91:72:23:c1:a5:
7c:c0:ce:c6:67:78:b0:e5:d9:ae:20:a0:a4:ac:63:9e:b2:32:
b8:f2:97:fc:7a:37:2b:1c:d1:f9:5f:48:e9:dd:7e:3c:69:17:
b7:d6:f1:1a:28:5e:a6:f0:cf:ae:79:6c:31:97:9f:33:c4:dc:
94:12:57:a0:a4:bc:67:a0:15:91:99:1a:2d:44:c2:67:02:67:
e1:94:b6:d6:24:fd:2f:f6:21:3d:dd:27:26:7e:44:5d:be:62:
74:ea:3a:53:8a:48:a9:64:28:64:e7:08:49:d4:dd:2b:48:3d:
42:b3:5d:62:b7:8b:28:c4:fb:35:92:04:7d:95:b1:a1:d7:d6:
94:c5:f7:66:4d:9d:f9:31:4a:e2:44:3b:1f:ff:b9:45:49:65:
db:7b:71:6d:aa:d9:ea:a3:dd:7a:77:64:af:ca:9a:96:38:09:
7b:67:5f:e8:a5:a8:84:e0:7c:73:e1:3c:8b:bd:98:20:63:75:
bc:85:1e:c0:7c:ec:11:8f:6d:01:e7:f2:0a:10:4e:30:fc:52:
f0:b1:55:61:85:3b:20:6b:9c:49:0a:a6:7e:42:2f:58:5c:88:
ea:ca:3b:b2:0c:22:28:8d:6b:65:78:7e:00:5d:c9:36:54:04:
25:47:2d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:48 2026 by rpki-client