Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
File: pByW6THu5BuJnWLH24NjNEajxCs.mft (raw, json)
Hash identifier: CGcqK8RQXGTTfIlCSE//Uw+g1Pfp9aLQgYIngLdCQl8=
Subject key identifier: AE:8A:12:B5:91:EE:8E:75:6D:2E:40:5F:7C:A3:01:2E:73:5E:D5:70
Authority key identifier: A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B
Certificate issuer: /CN=a41c96e931eee41b899d62c7db83633446a3c42b
Certificate serial: 019D25F1397EDA9373CE76A4F4D0AAEE7DC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 17:00:58 +0000
Manifest this update: Wed 25 Mar 2026 17:00:58 +0000
Manifest next update: Thu 26 Mar 2026 17:00:58 +0000
Files and hashes: 1: 08erSysabwz5oeBdP8PLy755AHA.asa (hash: RIOLOsPK24oYYh42JNS8I14+Rr+oEV6iLUu+Usr4/PY=)
2: Ug2vF1vgPHmEqRhi6uOzDzFa8k4.roa (hash: J3X4+yL+W+OJhZWrAFHs4AhqGxikLkSzill4Qp4q87Q=)
3: pByW6THu5BuJnWLH24NjNEajxCs.crl (hash: te46/8nbRIb/cxLAi6OW0qUSLKtUsQHGHaphgI3ugDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:39:7e:da:93:73:ce:76:a4:f4:d0:aa:ee:7d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41c96e931eee41b899d62c7db83633446a3c42b
Validity
Not Before: Mar 25 17:00:58 2026 GMT
Not After : Mar 26 17:00:58 2026 GMT
Subject: CN=ae8a12b591ee8e756d2e405f7ca3012e735ed570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5f:fb:ae:c2:8d:9b:7c:ee:9d:8c:5c:33:7b:
84:aa:bc:f1:1b:54:91:05:c9:f6:c4:fc:7e:c9:2b:
de:2e:6b:18:78:98:f7:8d:ec:e0:a7:7f:2b:1e:bb:
29:ae:15:44:b3:c2:ae:ef:c7:3a:95:4d:39:7f:80:
18:31:db:28:b2:05:1f:24:d9:87:a4:13:01:62:0d:
9b:e7:9e:c8:3e:41:47:ed:4c:40:92:88:cd:b4:e5:
48:35:ab:a6:76:18:7f:12:65:a5:56:00:86:55:8f:
4c:a2:4e:dc:35:61:a6:25:6c:c6:27:53:00:42:4f:
75:4f:c8:47:ab:d0:5e:ef:a0:4e:ad:89:c4:06:f2:
64:02:7b:f9:e0:21:1a:95:83:cd:e8:c3:78:4c:ea:
c0:ee:1b:57:32:ad:7d:39:7d:eb:87:a2:1f:66:82:
ff:3e:6c:10:df:9d:25:24:f0:80:25:df:82:9b:6f:
92:b2:e3:3c:6b:17:c6:5a:e3:ab:89:47:33:57:04:
c9:aa:83:fc:2d:6f:13:39:a5:ac:63:20:f9:48:17:
9e:a2:c8:4c:dc:dc:f7:3f:43:aa:ba:57:52:ac:21:
dc:88:1b:9b:85:56:d4:bb:ba:ec:7e:80:e7:68:8d:
5b:c3:e6:69:14:6c:a1:34:fe:ce:5b:c3:d9:5a:d5:
13:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8A:12:B5:91:EE:8E:75:6D:2E:40:5F:7C:A3:01:2E:73:5E:D5:70
X509v3 Authority Key Identifier:
keyid:A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:54:91:d4:74:88:16:82:b9:38:ce:fb:a9:0e:c0:9a:dc:45:
92:ae:24:42:96:e0:73:19:c4:e1:32:99:e7:23:ac:b4:98:4f:
b8:9c:21:b5:51:36:39:81:53:57:50:0a:60:e0:2d:2c:71:b7:
3b:c2:90:1b:85:3d:dc:3d:71:cc:95:68:02:3e:ca:4d:05:3f:
93:a3:a9:83:03:d2:56:c9:e9:05:39:0c:1e:7c:47:cf:10:76:
6f:37:fb:56:2f:9f:b9:ab:7d:76:f3:3a:8d:9f:10:03:c9:9f:
41:6d:bd:b4:33:39:f9:d3:98:a9:7d:da:cc:ed:18:fc:a4:94:
ba:f6:f3:8a:59:a5:7e:0b:1d:d7:5a:f9:a9:8a:8a:5a:95:10:
d3:00:50:56:24:dd:66:41:ca:e5:f5:73:0b:4c:4a:92:d6:15:
39:15:41:62:f9:49:9c:6c:8e:4f:e3:90:f8:df:47:b5:94:db:
0e:58:f9:ca:97:b2:f5:08:a8:57:2b:ec:d6:70:2f:45:e0:4d:
d6:a5:f5:d9:bf:df:ff:ea:34:28:aa:5f:05:a8:61:2b:3b:9a:
82:c6:15:19:8e:0d:db:3b:38:db:ae:10:90:8a:4a:8c:48:a6:
28:e8:08:73:1a:91:4a:26:7d:b2:6e:b2:15:cc:36:a5:fd:48:
a9:c7:95:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:39:35 2026 by rpki-client