Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
File: pDtTIrjqOKegRNywZxp126EEPX4.mft (raw, json)
Hash identifier: bTcI6UJZhIIombBEnl+kxCb1Vzc1qoy6cBGTr/plmqY=
Subject key identifier: D0:B5:DB:1F:B5:98:E7:78:F2:BF:DF:C7:ED:64:F6:63:9E:02:28:C2
Authority key identifier: A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
Certificate issuer: /CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Certificate serial: 019D2771ED0097AF82CF936E6213A0D7D7EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
Manifest number: 188F
Signing time: Thu 26 Mar 2026 00:01:10 +0000
Manifest this update: Thu 26 Mar 2026 00:01:10 +0000
Manifest next update: Fri 27 Mar 2026 00:01:10 +0000
Files and hashes: 1: AREZ7-I4dY-lVbG1KNvmj3abde0.roa (hash: 5iBy3FivOVWf36BTRuKIxy1pHWbIkHkYDe7qIgLbr7U=)
2: pDtTIrjqOKegRNywZxp126EEPX4.crl (hash: M+ORErx9NUHzqfYdx5UiatwYQ1ZlHuWT/NTbM49G5X4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:ed:00:97:af:82:cf:93:6e:62:13:a0:d7:d7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Validity
Not Before: Mar 26 00:01:10 2026 GMT
Not After : Mar 27 00:01:10 2026 GMT
Subject: CN=d0b5db1fb598e778f2bfdfc7ed64f6639e0228c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:30:bc:c4:78:8f:98:ee:42:8e:eb:ce:22:c0:
e3:9d:2f:c2:79:ee:53:ac:31:6f:48:59:ca:d0:8f:
ff:93:80:1c:b0:55:6b:d2:88:f7:04:fe:14:a5:33:
66:f5:c4:da:ca:73:45:bf:f2:93:8f:ec:ce:c0:ed:
75:ba:7b:c6:b0:1a:85:3d:bc:e9:8e:ac:a8:82:01:
cc:10:1d:d1:c7:0d:a0:ca:f2:ed:21:f1:84:ac:31:
95:ce:b0:8d:70:48:4d:e3:c8:e2:0e:37:82:04:c3:
6f:7f:3b:58:90:5e:81:ec:74:e4:80:55:e6:18:b8:
ab:9b:84:4d:1a:d1:23:dc:bb:53:10:b4:6e:75:26:
4b:e2:d4:96:6d:bd:e9:82:eb:d6:a4:fe:1b:6b:59:
52:d1:20:b6:29:ec:fe:4a:cd:ce:bd:78:80:87:cc:
4e:f7:06:e6:4f:03:cc:0a:69:6e:12:1e:38:df:3b:
56:0b:cd:b8:70:85:8d:60:87:83:f1:59:94:2d:e0:
c9:a7:2a:d2:b8:7d:99:8d:bb:26:83:94:ed:0b:9b:
0f:3a:e0:51:df:98:b4:9c:3e:39:0d:bf:90:04:f0:
3b:50:e4:5c:c1:19:09:6f:b5:b7:51:48:f4:1e:81:
58:9b:70:ea:43:83:a0:ae:2d:d3:6e:7c:b7:6b:0f:
a9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B5:DB:1F:B5:98:E7:78:F2:BF:DF:C7:ED:64:F6:63:9E:02:28:C2
X509v3 Authority Key Identifier:
keyid:A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d3:7c:7c:ea:b5:16:19:eb:fa:de:7d:0e:b7:c1:4c:ad:bc:
eb:20:be:c0:0e:77:d5:40:9a:84:1e:fd:14:6e:e3:d3:24:ea:
19:f7:39:43:00:6a:fa:4b:9e:56:ce:86:bf:f0:90:35:9e:3b:
37:f5:ae:d5:1f:3c:28:41:7c:a4:93:06:98:11:f5:1b:be:4c:
91:c8:70:d1:e4:88:f5:c1:5c:c4:8e:1b:b8:19:f6:e1:a8:b4:
7a:26:48:9d:30:8b:4c:80:c9:f7:ac:ed:9a:e7:ad:af:f8:7c:
ee:b2:28:7e:10:02:7c:b1:7b:e8:8f:4f:28:fd:3f:c5:eb:1b:
cd:9b:62:f8:2e:e8:bb:ff:56:b7:7b:f3:64:cc:c2:87:7b:c1:
a4:76:69:9e:32:96:ec:97:d4:c0:34:ab:d1:1c:c3:87:39:08:
1b:ff:16:95:03:d7:9c:b5:8a:50:e7:b9:db:3b:85:60:5d:34:
c4:12:6d:1a:db:ac:96:a7:34:7f:0a:0b:5c:14:68:1e:b2:96:
85:0e:a9:ba:da:a5:a4:cd:74:c4:03:30:7f:d2:e0:ee:ef:c4:
bb:ae:72:3e:e1:cc:67:e3:a4:1d:1d:28:86:4c:d6:36:c6:ba:
b6:18:48:7e:a3:11:17:a4:52:2b:19:31:a1:30:a1:66:dd:a6:
c0:38:8e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:38 2026 by rpki-client