Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
File: pK0j9tzk2Wg8KklDvTfBczXHYYo.mft (raw, json)
Hash identifier: DvguO1i1E7sWavIcIHCIID5bZKVzBEY2DN0W7XJ6WWI=
Subject key identifier: ED:2D:9C:CC:A5:21:FB:FD:C9:D7:3C:85:8B:2F:7A:7D:DA:23:F7:3D
Authority key identifier: A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
Certificate issuer: /CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Certificate serial: 019D258323D14332252BBD53CC25AC7E191B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 15:00:44 +0000
Manifest this update: Wed 25 Mar 2026 15:00:44 +0000
Manifest next update: Thu 26 Mar 2026 15:00:44 +0000
Files and hashes: 1: FQ8IH5cBqg-duSc2imKOt1dr3gc.roa (hash: zLx5O2JcZIf3WeCO72jwVB0rL1h+cp1I4W0w1x3rEC8=)
2: pK0j9tzk2Wg8KklDvTfBczXHYYo.crl (hash: mmBpOTTDHeP/W9m899KVprxZBh9GlNkFczbZiAABKwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:23:d1:43:32:25:2b:bd:53:cc:25:ac:7e:19:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Validity
Not Before: Mar 25 15:00:44 2026 GMT
Not After : Mar 26 15:00:44 2026 GMT
Subject: CN=ed2d9ccca521fbfdc9d73c858b2f7a7dda23f73d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:19:06:06:82:cd:65:e6:eb:6b:bf:a0:6a:89:
f7:1d:da:54:9f:60:47:42:2c:fe:75:ab:9f:5a:d2:
cd:98:e6:83:83:d8:66:b5:44:d0:b7:03:a4:25:b3:
cd:bf:37:bd:f7:8e:59:94:34:51:b9:dc:16:3e:3c:
8b:bc:a7:09:71:3f:8a:ca:96:52:88:df:c2:2b:7e:
5d:f1:78:b7:2d:32:e3:95:22:5a:b8:91:fb:88:46:
48:7c:ba:25:dd:6e:24:13:7d:98:45:31:88:60:13:
d5:85:3b:a3:85:45:8e:cf:e7:c7:aa:9f:60:e6:f4:
9d:7e:8e:61:8b:87:11:f1:d0:54:13:87:8e:8d:f5:
99:63:25:ef:3b:ff:4f:25:ec:bb:e2:eb:56:d7:c3:
95:01:27:19:c8:47:39:30:5f:a8:f8:54:84:57:56:
35:61:e0:0d:57:3f:5f:b2:5c:a4:0b:53:76:cd:6a:
46:ea:d5:bd:9f:55:c6:bf:24:b3:f0:2d:44:ce:59:
80:e6:89:b5:27:e6:28:3c:a7:57:1c:ef:f6:24:58:
fd:f1:65:ec:cc:b5:36:63:18:54:53:8f:4a:d1:3b:
73:99:62:d8:36:3b:1b:e7:d8:b1:25:18:22:e4:8c:
45:3a:fc:b1:6c:c2:ba:87:fb:1c:66:ad:a8:b4:65:
be:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:2D:9C:CC:A5:21:FB:FD:C9:D7:3C:85:8B:2F:7A:7D:DA:23:F7:3D
X509v3 Authority Key Identifier:
keyid:A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:8e:79:e7:dc:8f:03:98:37:43:15:53:34:d4:ea:e3:9e:7b:
b7:a2:d3:69:a1:c2:ed:be:e9:22:36:6d:47:2f:f0:32:e0:3c:
76:5c:6c:58:24:8c:4a:ce:b2:22:a1:ca:40:68:dd:c4:3d:04:
95:a1:21:08:94:51:17:dd:65:77:00:8a:6d:c1:45:94:b3:c4:
ad:76:69:67:4e:6b:55:86:a2:c6:a0:a2:f3:78:47:09:ed:72:
2b:f1:84:f6:f6:df:70:99:ea:eb:fa:67:cb:4f:0d:34:55:11:
f4:76:25:ae:81:7f:47:d3:aa:10:61:78:de:19:60:b2:c3:72:
00:4d:fc:78:ed:26:3b:6e:ba:cd:a1:4f:28:0f:f8:e8:e0:57:
77:ce:fa:a6:b0:50:ca:d8:6a:5f:5a:f4:3f:ba:02:b5:80:df:
84:ec:a8:73:78:f8:47:66:eb:3f:8a:e3:2f:cb:13:9a:46:dd:
2f:79:71:3c:ed:a1:a2:58:81:4c:f3:94:58:cd:6c:26:8d:f0:
da:47:5b:4b:88:46:5f:72:ad:60:f0:c3:9d:e4:e6:51:5a:3c:
a0:85:8b:7d:a2:3e:89:cc:5d:f4:fd:83:29:fe:55:26:b6:d9:
78:48:fe:4d:f7:4d:5c:86:60:63:30:6f:7f:2c:8d:c2:15:80:
8a:c1:4b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:21 2026 by rpki-client