Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
File: PiDHANmNdqnGQBc4ifk2faneiZc.mft (raw, json)
Hash identifier: QaXzTZYuGNJCem7Gl8KN9ziIVUjODYNzVXT8gQY+dgQ=
Subject key identifier: 51:49:97:1E:59:4C:55:1C:5B:71:2A:D6:8C:45:F7:43:C3:95:65:1C
Authority key identifier: 3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97
Certificate issuer: /CN=3e20c700d98d76a9c640173889f9367da9de8997
Certificate serial: 019D31F4F8DF3D38112DCB271C549105760B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
Manifest number: 1896
Signing time: Sat 28 Mar 2026 01:00:31 +0000
Manifest this update: Sat 28 Mar 2026 01:00:31 +0000
Manifest next update: Sun 29 Mar 2026 01:00:31 +0000
Files and hashes: 1: 3Y2bsvd6Ko2TakhACGAC13OxWgg.roa (hash: hop+YCd6wtmHiz87UpYcHYekpewszM4DMDY6Yajc55g=)
2: DEt4Y-_VZKpKHUQGndzBwGKa-hI.roa (hash: Pn+dJyctNTmeoTcdBPCYjrOipk+Ikj5vYjRfpzr/AfY=)
3: Fd0my4VD8yFhFNY23xVFQ5bNE7o.roa (hash: Xq0TLzzFqkURQ7QOU8lzKIy+PNOHeKXumeKowKwhe0E=)
4: PiDHANmNdqnGQBc4ifk2faneiZc.crl (hash: oQ7fclwONSFyQDPYsbmq5F1tg4wj8LJvIAJD0ONVfDA=)
5: XfL7J3_lKAhMT6FV_AAy67CADLI.roa (hash: Cja0K8hb1CFlq8SDbTIyn6C1tgY/4LTLk6lQT4K0o4Q=)
6: uekau7rSPung7Kbe6f858ZuB0t8.roa (hash: M2Y/E4DYJ0oSGWPcmXmrI0IqZMHXZ+8X2D2MD5VVJU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:f4:f8:df:3d:38:11:2d:cb:27:1c:54:91:05:76:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e20c700d98d76a9c640173889f9367da9de8997
Validity
Not Before: Mar 28 01:00:31 2026 GMT
Not After : Mar 29 01:00:31 2026 GMT
Subject: CN=5149971e594c551c5b712ad68c45f743c395651c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e1:22:d2:b3:5f:c5:04:dd:7f:41:97:25:7c:
16:89:bd:af:5d:84:83:ea:c6:f7:9d:4b:bf:1f:78:
48:68:1d:7c:29:b7:39:06:93:1d:21:08:b0:8d:a6:
a7:49:c9:d2:a7:71:ee:73:20:ec:b6:de:1d:09:f6:
a9:43:93:95:bf:a8:83:61:d2:47:ac:5b:d1:45:1f:
2c:9e:0d:6a:4c:99:38:35:2a:9a:f8:48:05:9a:59:
c8:7a:bc:67:92:2b:ff:9d:09:a5:05:fd:fd:68:7d:
70:46:e3:d7:fd:02:78:ee:00:53:0a:12:eb:e4:cc:
7a:67:2b:99:c2:c6:47:e1:e1:2c:de:be:c8:64:cd:
9a:1a:e1:b4:c0:04:0c:b6:4e:dc:ab:ae:99:2f:3a:
69:7f:44:19:c1:33:b3:13:49:c5:97:cf:13:79:a4:
17:e4:bc:1f:25:67:03:84:32:da:64:61:b7:b8:74:
90:d7:de:39:80:b5:62:71:a7:09:20:81:27:bf:c2:
fa:5e:eb:8e:43:92:e4:22:80:74:87:27:c4:c0:44:
8b:4f:e8:0f:9b:cd:c9:5d:ce:c1:d4:f5:e5:e2:08:
48:a8:25:68:3b:a9:fb:5f:43:76:25:74:84:27:8a:
bb:89:58:85:7e:03:4e:70:ae:9e:32:ef:06:b2:f4:
dc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:49:97:1E:59:4C:55:1C:5B:71:2A:D6:8C:45:F7:43:C3:95:65:1C
X509v3 Authority Key Identifier:
keyid:3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:57:b7:75:68:68:cc:c4:38:94:4d:b9:01:25:64:3e:98:e8:
6e:ed:47:e4:d0:b5:97:f2:d7:98:fc:69:5b:8d:64:25:fe:04:
3b:7b:83:f8:e4:23:4f:85:69:6a:2d:aa:f5:5a:04:0e:f3:7d:
d7:be:fe:5d:62:b4:f8:5d:31:17:36:dc:0c:3d:c4:b6:28:8f:
7c:02:ec:fb:92:e0:a3:49:ac:92:7c:03:87:73:a1:b7:78:de:
1c:f5:93:59:5b:94:f2:76:30:c7:7a:f1:41:4f:f7:d9:2a:75:
08:3a:8b:83:28:1a:1d:7a:13:c4:ca:77:f8:cb:f9:b2:ac:bc:
9a:4c:d7:26:a1:3e:5a:f4:fb:04:98:12:1f:f8:fb:97:a1:47:
58:94:1a:9d:5d:34:5c:80:04:0c:e9:d3:43:b9:e3:0e:fe:96:
0d:55:71:0f:22:14:02:e0:51:c7:cc:89:87:34:d6:3b:b1:7d:
f1:3d:21:68:7f:fb:a2:f6:f5:02:a2:12:77:39:21:97:7a:4d:
4f:d3:0d:4c:a3:3c:96:ff:50:50:41:43:ee:67:04:7c:6e:3e:
8b:18:38:5d:8e:f4:6a:fa:30:f0:2e:bd:56:8a:ab:15:cd:11:
53:49:ed:be:de:e1:11:79:bb:72:22:77:58:5c:52:3d:5e:87:
70:4e:4e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:51:36 2026 by rpki-client