Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
File: pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft (raw, json)
Hash identifier: 1NC2SiGFPcVEprQsFdlLmnsL9eXqdLaFfhaHEyIZpaE=
Subject key identifier: E5:A1:E2:CE:B7:1E:A6:52:C5:04:A7:02:8A:05:83:D1:22:BC:03:60
Authority key identifier: A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C
Certificate issuer: /CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c
Certificate serial: 019D262860DFDA475C37858F2682E393A312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 18:01:13 +0000
Manifest this update: Wed 25 Mar 2026 18:01:13 +0000
Manifest next update: Thu 26 Mar 2026 18:01:13 +0000
Files and hashes: 1: 5Gr2q7ZQUry_6juJo6TbPmIZ_GI.roa (hash: CLid1uYJD/tWmQGqtEiBJvjm9/bPdenK+e3VYv871Vk=)
2: pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl (hash: IBP6zy1UNUsvUWJHRtR+lZFEBx1XRJfECSm28W7eKAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:60:df:da:47:5c:37:85:8f:26:82:e3:93:a3:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c
Validity
Not Before: Mar 25 18:01:13 2026 GMT
Not After : Mar 26 18:01:13 2026 GMT
Subject: CN=e5a1e2ceb71ea652c504a7028a0583d122bc0360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a5:4d:2c:ce:86:de:55:45:1f:36:f2:f0:7f:
f0:16:23:3d:5e:05:3c:1b:5c:a8:23:b2:a9:af:f7:
df:7a:97:35:be:ab:e1:02:26:74:79:17:75:79:6e:
9e:87:fc:d4:79:93:a6:7a:f4:2b:25:a4:07:b0:ab:
8a:f7:e1:2f:7b:0f:6c:02:45:5c:bb:4b:18:de:b3:
ef:ac:45:e6:b6:ef:1f:85:01:cf:d1:a6:8b:3b:66:
9b:a5:4f:02:e1:1c:bb:66:83:3b:ed:f3:1b:19:b6:
07:a9:31:60:0f:93:e3:11:cc:ef:04:e6:79:93:42:
14:31:eb:63:d9:55:5e:ab:75:3b:64:30:f7:a1:4d:
4c:f9:0f:89:a4:24:10:88:ea:96:87:05:7c:aa:51:
6d:37:26:8d:e6:8b:d0:17:9c:a4:b8:e2:02:79:c1:
38:71:20:0f:cf:68:fd:cd:13:b4:28:e9:23:78:c2:
7c:31:ba:ef:dc:58:e9:6f:49:8f:04:bd:80:1a:64:
b9:f8:10:e0:af:57:9f:7f:67:f5:ca:20:24:0c:d0:
bf:20:ab:d7:16:86:33:67:75:2b:dc:80:8d:f2:f9:
7a:20:97:78:27:6e:b2:6e:c0:c0:1c:9e:c3:53:e7:
04:8d:aa:5c:f3:25:64:f9:d8:56:02:6a:3f:2e:3c:
c2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A1:E2:CE:B7:1E:A6:52:C5:04:A7:02:8A:05:83:D1:22:BC:03:60
X509v3 Authority Key Identifier:
keyid:A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:45:2b:92:78:0a:75:17:79:91:0c:43:7b:22:79:59:1e:23:
72:2e:ac:b7:b7:4b:87:99:16:98:97:6e:80:df:7d:cf:08:2e:
22:dc:6a:0d:27:fc:7f:4e:67:85:97:3b:2e:ae:31:ba:34:1c:
06:ce:44:d7:f7:1e:b4:97:ae:66:89:c0:53:24:7a:2e:0e:e3:
a4:86:e1:c9:26:4b:ae:d0:3b:b5:12:6a:88:54:ce:5f:aa:13:
a8:3e:a5:d5:68:e9:38:85:85:b2:d8:e4:e0:fd:37:a4:92:99:
79:77:f3:cf:20:c1:b6:24:09:80:87:1a:eb:cb:ca:38:2c:bb:
3a:40:aa:a6:1e:bd:cd:5c:3c:74:b6:3e:22:ec:bd:8c:e0:7b:
c5:60:c6:a3:cc:ae:9d:3e:bd:b0:7d:95:15:1b:64:64:af:34:
1e:ff:27:78:52:40:b4:d3:6d:c8:22:fa:09:03:a8:65:07:0b:
87:3d:3d:3c:e0:4d:00:6d:5b:0f:7e:57:65:d4:1f:e7:25:2d:
b9:2d:e8:39:6c:b4:ae:f6:c8:44:29:3a:17:39:0c:db:7e:89:
f2:80:0c:a5:5c:9b:e3:cb:84:b2:fe:53:b2:91:67:4d:76:5a:
ff:dd:33:75:fe:e8:49:09:65:a0:12:52:5c:d3:14:b3:ed:90:
9d:49:6e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:46 2026 by rpki-client