Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
File: k47pUc2rw86AXsjfC_NAO9-pxlc.mft (raw, json)
Hash identifier: FgdhBK7uBUH6cUNVp3zdWQ3K6RPWDC+lyz2AkyIu5qA=
Subject key identifier: E2:26:BE:80:C2:8F:6A:19:D9:EC:F4:29:4C:08:4A:B6:28:47:7D:90
Authority key identifier: 93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
Certificate issuer: /CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Certificate serial: 019D2816576CEBF7C71EEBC61FCFC8A229A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 03:00:45 +0000
Manifest this update: Thu 26 Mar 2026 03:00:45 +0000
Manifest next update: Fri 27 Mar 2026 03:00:45 +0000
Files and hashes: 1: Q_ee8py1cZcXFZRaXUkP3TowZDc.roa (hash: w/aCOcSaWrdKUscNCfCU/09gr8uTxVVmhx8jtZuT2dI=)
2: ReMMCAErUt1VBD8DVEIFL-Hpask.roa (hash: wWfg4EEHh6Y+sLSB59zGm12sGRwnX3Xts8Wy3xO33k0=)
3: k47pUc2rw86AXsjfC_NAO9-pxlc.crl (hash: eE3LTQjJ7Gt2ZVdESbpg6Rq7pCddke9C26vOBpcw1vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:57:6c:eb:f7:c7:1e:eb:c6:1f:cf:c8:a2:29:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Validity
Not Before: Mar 26 03:00:45 2026 GMT
Not After : Mar 27 03:00:45 2026 GMT
Subject: CN=e226be80c28f6a19d9ecf4294c084ab628477d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b0:e0:b7:6b:bc:d4:75:5e:15:fa:df:f1:cb:
6d:95:6a:5e:bb:61:8c:d8:75:d8:b0:d8:30:b9:da:
86:32:41:c8:b7:2d:59:7b:7a:8c:3e:71:42:6d:f7:
b1:de:3a:f0:2e:0f:19:14:c3:ea:73:d5:84:32:c0:
ca:db:d4:99:40:63:0d:eb:ec:f4:e5:da:fb:59:97:
01:4f:11:85:82:5b:95:be:fa:f2:52:a9:03:67:f8:
80:bd:a8:1b:66:c3:61:65:6f:52:ba:0d:f8:71:9b:
a4:17:17:bd:08:ff:3b:28:b3:a3:4a:43:19:73:ea:
27:8a:b2:7f:e0:fe:90:90:0d:a9:3b:20:1b:f5:40:
eb:06:c7:19:3e:ec:f7:84:c4:a6:0e:9f:8b:20:91:
8e:51:91:f1:a2:2c:63:72:72:f5:37:a7:26:cd:5f:
a9:07:d2:ba:7a:7b:4c:10:55:6e:f2:c2:ca:a4:a1:
3e:43:cc:5a:fa:1e:d1:86:c1:70:28:3c:da:2f:d0:
08:18:e7:df:0d:dc:f5:0c:03:dc:80:b2:6a:7e:f3:
53:fe:01:49:fb:97:06:13:c6:30:db:9e:cf:d4:0d:
8f:50:2a:d4:69:9d:e7:46:c5:35:d9:c1:07:a9:dd:
b3:c5:8d:32:f6:ef:ef:30:d0:a3:97:c5:5a:5c:7d:
cc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:26:BE:80:C2:8F:6A:19:D9:EC:F4:29:4C:08:4A:B6:28:47:7D:90
X509v3 Authority Key Identifier:
keyid:93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:51:c0:62:96:22:63:3e:e9:62:44:68:03:04:58:ea:09:54:
f2:19:34:d3:15:66:93:0a:60:31:dd:23:d7:68:fd:8b:42:39:
02:30:3d:9f:82:00:a1:1b:f8:4b:e1:9b:06:ea:21:89:9c:f0:
c4:e1:61:66:12:72:88:13:0b:98:20:67:47:54:ba:80:d3:7a:
58:2c:d2:b1:82:6a:c2:63:8c:17:c6:c6:2e:ec:54:cf:64:0f:
b6:56:ca:66:87:c9:3b:64:60:1d:21:60:b0:56:ad:a1:95:21:
7c:20:9b:7d:1d:33:9a:3c:61:37:95:b7:20:ef:41:1e:fa:48:
26:db:89:43:88:36:b4:c9:45:a7:79:ed:88:de:42:99:a1:a8:
69:c5:90:90:b4:25:32:05:e8:a7:ff:4a:e7:83:f0:86:74:57:
f2:55:49:d1:78:01:78:a9:01:0e:8c:a0:9a:98:da:46:44:c5:
09:e9:1e:dd:09:f6:57:66:da:ba:74:5a:89:23:23:63:6c:8b:
3f:30:00:e1:ee:57:97:c7:a4:05:c0:3f:2e:ae:6e:d0:c7:c4:
94:a5:c5:d8:79:7a:65:36:5f:f9:68:b9:71:48:c8:8d:d1:c2:
1c:36:ad:2a:98:c8:56:eb:e6:b5:9f:a1:70:23:7d:21:8c:e9:
37:cc:68:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:11:43 2026 by rpki-client