Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
File: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft (raw, json)
Hash identifier: bNHxVMw8pH0Shpbu9pKh+TMM6QjjxPotXICMMmrQ7kY=
Subject key identifier: 8A:B6:61:2A:64:D6:F6:D2:1A:E0:E0:20:0F:50:D9:93:A8:EA:7F:61
Authority key identifier: A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
Certificate issuer: /CN=a57f291818d8719738268d844994a2e10824d4c9
Certificate serial: 019D28BBB7E40EB2082853BB43A65AE28BC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 06:01:24 +0000
Manifest this update: Thu 26 Mar 2026 06:01:24 +0000
Manifest next update: Fri 27 Mar 2026 06:01:24 +0000
Files and hashes: 1: JPBii3Hqcq30q25CjK9-h-C44rw.roa (hash: 0nYkKiEoyllpIK9/qO7+AH5OvjbE8XnCXRin+xPio6U=)
2: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl (hash: bnsdIo7BEkj/LxE4q7QQ19doPwtoEarnSyamuHKUkZo=)
3: qVXn2mio2xGIpazTfAYClCM2JZM.roa (hash: utP7O671cytqXjasGTBwll6HaIxFO1XJW1EluiUhDqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:b7:e4:0e:b2:08:28:53:bb:43:a6:5a:e2:8b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57f291818d8719738268d844994a2e10824d4c9
Validity
Not Before: Mar 26 06:01:24 2026 GMT
Not After : Mar 27 06:01:24 2026 GMT
Subject: CN=8ab6612a64d6f6d21ae0e0200f50d993a8ea7f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:02:6b:da:51:25:c6:80:00:c0:18:50:15:c0:
c9:5c:f1:41:55:b6:91:15:b9:4c:a7:85:ff:18:8c:
97:f7:84:80:ea:ba:3d:25:c5:8d:5c:3d:99:25:18:
3d:6a:7f:98:18:fc:c3:62:e8:8c:98:c1:fc:4a:b6:
bb:2c:15:53:c4:34:65:cd:c5:be:f0:d2:af:13:e9:
a1:be:5c:7c:25:53:13:69:5b:9f:9d:19:0d:3f:af:
c4:d2:02:1e:7a:c7:ea:35:23:b3:61:ab:78:26:08:
51:7e:1f:5a:03:25:5d:0a:62:b1:10:55:b7:12:82:
d1:7f:a2:d0:44:ea:fe:cf:5f:2e:6d:9a:11:48:c9:
fe:c6:de:ab:96:43:21:fc:08:dd:5a:ee:fd:e1:d7:
25:9f:ae:5e:d3:70:60:ca:cb:78:0f:69:13:c9:b2:
72:06:2a:b8:ab:b3:32:05:3c:46:f7:a8:ad:d9:90:
bb:50:2c:f2:87:a9:32:de:9b:d9:0d:71:7c:36:89:
54:d6:39:00:7a:0e:26:80:01:ab:94:0f:39:a5:30:
e4:e6:10:49:bf:75:5f:64:89:e3:e2:a8:21:59:dd:
90:f9:6a:45:01:18:a6:5b:75:5f:fc:94:ac:40:8d:
30:05:fd:54:bc:f7:49:4f:b6:df:6d:88:8d:cd:b6:
7d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B6:61:2A:64:D6:F6:D2:1A:E0:E0:20:0F:50:D9:93:A8:EA:7F:61
X509v3 Authority Key Identifier:
keyid:A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:47:f2:d3:78:f6:0f:c3:68:8e:f9:46:e2:02:cd:a7:cc:99:
63:d8:8b:07:7b:1c:dd:14:17:93:91:41:82:b1:97:23:34:a8:
08:11:a0:6f:a3:e0:39:90:3c:6c:8a:5a:dd:bd:fa:ce:56:9e:
3f:0c:82:45:4c:e5:49:92:7c:52:5f:38:12:3a:57:92:0b:7d:
7f:9c:8f:b3:c9:3a:cb:c1:33:a4:c9:e0:f8:7e:9e:eb:2c:e0:
c6:29:8c:98:89:d4:68:72:16:ae:09:2b:ff:0a:91:36:05:9e:
0e:f4:ff:55:43:f9:11:c6:e5:cb:aa:63:fa:05:d2:9a:cf:56:
a0:6b:73:47:26:28:3b:e9:33:d0:a3:8a:20:ca:24:e5:d9:57:
73:d1:7c:fb:db:29:5e:09:6c:e0:f1:cb:c4:0e:c4:fc:09:c8:
70:90:02:a9:2b:b7:79:c2:03:a7:e0:68:05:12:e8:c4:db:7d:
a5:bf:95:7e:e8:69:72:cf:f9:68:1f:e3:f3:24:a3:cb:19:e9:
42:ac:a6:06:88:ac:12:96:18:ab:66:53:76:70:0d:a6:53:9b:
3f:49:f6:38:c6:91:2d:38:31:d4:12:86:85:ec:a0:94:0e:92:
0c:1b:fc:0f:a3:5d:25:0a:ad:e4:4a:f3:e9:c0:00:e1:45:89:
cc:51:1a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:02:41 2026 by rpki-client