Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
File: k47pUc2rw86AXsjfC_NAO9-pxlc.mft (raw, json)
Hash identifier: y/sgmtc6Wrxu0rdPZk6xJt2W3v7HiERTuKC90Fm4j2s=
Subject key identifier: DB:9E:A1:9C:26:64:79:B4:B4:84:C1:14:50:FE:EA:6A:B6:C3:ED:52
Authority key identifier: 93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
Certificate issuer: /CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Certificate serial: 019D2A047F84A8139C17E121B75267707DA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 12:00:30 +0000
Manifest this update: Thu 26 Mar 2026 12:00:30 +0000
Manifest next update: Fri 27 Mar 2026 12:00:30 +0000
Files and hashes: 1: Q_ee8py1cZcXFZRaXUkP3TowZDc.roa (hash: w/aCOcSaWrdKUscNCfCU/09gr8uTxVVmhx8jtZuT2dI=)
2: ReMMCAErUt1VBD8DVEIFL-Hpask.roa (hash: wWfg4EEHh6Y+sLSB59zGm12sGRwnX3Xts8Wy3xO33k0=)
3: k47pUc2rw86AXsjfC_NAO9-pxlc.crl (hash: hbw0LFiD2boxptltG2eFKBM8V0O/M24wUKzMVdSmJMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:7f:84:a8:13:9c:17:e1:21:b7:52:67:70:7d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Validity
Not Before: Mar 26 12:00:30 2026 GMT
Not After : Mar 27 12:00:30 2026 GMT
Subject: CN=db9ea19c266479b4b484c11450feea6ab6c3ed52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fe:d6:14:1d:18:0b:8d:88:eb:41:93:68:31:
83:b0:2c:2e:ab:d2:08:d6:d8:d3:59:a8:0b:70:9e:
f0:16:08:95:b7:0e:e6:ec:3c:2e:23:8d:01:c4:5c:
13:14:ab:7d:0a:ea:7e:40:1c:ce:a1:4e:6a:dc:ee:
c3:ad:d9:cf:2c:0b:3e:eb:83:2b:58:d2:ea:3d:bd:
91:a9:23:78:35:59:59:c3:e2:9c:32:cf:c5:e2:c4:
65:3f:9d:84:09:25:27:94:d7:42:29:73:f4:c9:22:
93:be:6f:f5:5a:d7:1c:7f:4b:44:1f:45:39:2d:a7:
2e:88:bb:2c:c4:3e:ea:ea:c9:38:de:68:77:f8:e8:
ee:67:e6:ca:5a:b0:9e:7d:58:57:7a:78:f1:f7:ba:
3e:cd:0d:87:02:01:f1:c1:cb:f0:c7:a3:85:a4:1c:
1d:53:e2:11:45:ba:3c:65:fb:5c:97:e3:97:73:aa:
03:c4:7c:f4:b4:b2:1d:eb:12:d8:a6:91:f8:7f:29:
7b:bd:00:ba:4d:a6:a3:fb:e4:6d:84:75:79:83:b8:
44:5b:12:59:83:91:6b:23:ee:dd:cb:e2:6e:6b:b7:
d6:36:99:ac:78:27:35:44:8b:a7:d3:8d:b1:3b:74:
21:4f:ac:7c:16:69:58:26:29:7f:a0:cd:67:9b:f5:
d7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9E:A1:9C:26:64:79:B4:B4:84:C1:14:50:FE:EA:6A:B6:C3:ED:52
X509v3 Authority Key Identifier:
keyid:93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:df:46:b3:10:71:aa:f0:fe:9f:a2:4a:f0:ee:04:98:43:ea:
08:47:5e:cb:2d:a1:fb:05:6b:3c:45:e5:f4:73:62:83:64:90:
6b:79:5d:97:5d:cb:67:98:d1:61:8c:de:41:e2:4b:1d:47:00:
f0:55:f4:e4:a1:29:49:36:ed:c1:bb:b8:9b:49:c1:f5:1d:9f:
76:d5:c0:9c:69:75:df:c7:f2:b3:0d:57:28:97:18:d7:f6:4c:
40:6a:f7:d1:3b:4b:ee:a7:18:17:8f:8a:ab:a9:38:1e:ed:77:
ea:8a:b3:e0:07:67:a5:1d:94:72:26:9e:91:37:c1:4b:0b:bf:
b7:af:9d:22:56:88:d5:7a:f0:c7:ef:84:b6:65:c6:42:3b:d6:
73:a6:be:0e:c6:be:6a:1e:98:4b:da:07:00:5f:40:67:9e:fd:
1c:54:e0:0d:14:3a:47:f4:d1:cf:54:e7:a0:78:3f:f4:49:91:
e0:d7:40:3c:67:b3:30:c6:a6:68:c4:e7:36:c7:00:3d:e7:fe:
d0:13:18:4a:37:04:75:c7:44:ea:21:34:8f:af:36:19:3e:5b:
74:00:6d:16:1c:f4:e9:fc:24:fc:75:1a:6d:73:39:d7:1b:8c:
3d:c2:e3:1c:79:55:45:70:b9:c6:c2:b2:ea:b8:30:99:d2:b6:
26:25:88:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:16:09 2026 by rpki-client