Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.mft
File: pI2lIJvWz5DG321-bWOmOVW61LU.mft (raw, json)
Hash identifier: yQwApYiZR5+KjbX6bP6zZHvVv9+xSuq4MIiebpjlkNY=
Subject key identifier: B1:23:C0:B3:B8:80:28:87:00:0D:33:E3:14:1D:C7:79:CE:93:7C:2A
Authority key identifier: A4:8D:A5:20:9B:D6:CF:90:C6:DF:6D:7E:6D:63:A6:39:55:BA:D4:B5
Certificate issuer: /CN=a48da5209bd6cf90c6df6d7e6d63a63955bad4b5
Certificate serial: 019D265F14F0726F5E58093647D28D018ECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pI2lIJvWz5DG321-bWOmOVW61LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.mft
Manifest number: 090F
Signing time: Wed 25 Mar 2026 19:00:58 +0000
Manifest this update: Wed 25 Mar 2026 19:00:58 +0000
Manifest next update: Thu 26 Mar 2026 19:00:58 +0000
Files and hashes: 1: gvfxgS9VdbGwIqb9SxlXG1MbNbM.roa (hash: JUjuVP1XRuU3MRxww3ep16uVkjCeigeMEzaVCeFSa2A=)
2: pI2lIJvWz5DG321-bWOmOVW61LU.crl (hash: l70D85tWH8VRM6fY3VaOrBjjKhHyDeZBVMUXqUfXsvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pI2lIJvWz5DG321-bWOmOVW61LU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:14:f0:72:6f:5e:58:09:36:47:d2:8d:01:8e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a48da5209bd6cf90c6df6d7e6d63a63955bad4b5
Validity
Not Before: Mar 25 19:00:58 2026 GMT
Not After : Mar 26 19:00:58 2026 GMT
Subject: CN=b123c0b3b8802887000d33e3141dc779ce937c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0b:03:29:cf:4e:4c:18:32:0a:b3:f5:e4:24:
76:f2:4c:a2:49:58:a1:27:78:9b:70:81:2c:1e:62:
bf:ef:cd:12:0d:31:15:ed:bb:69:13:9b:74:64:97:
b8:bf:ec:b2:72:04:d4:ee:73:96:5f:24:5b:13:bc:
43:49:56:26:2a:ef:96:2e:8d:e0:2a:dc:ee:d0:2f:
27:0a:0b:6e:65:da:e4:53:60:a5:d7:b0:7c:1a:c2:
67:48:9f:1f:3d:30:74:ac:61:8f:7f:a3:79:7e:f6:
d8:fc:d9:44:2a:ce:f0:55:ea:c1:fd:a7:bc:62:7d:
24:2b:f8:ce:44:26:ad:9b:d6:23:75:13:05:e4:c7:
0a:0b:a5:bd:d3:cf:c7:bd:d2:91:12:40:9d:7f:30:
54:65:fd:34:6e:d5:2c:cd:47:10:9b:0e:df:d2:c9:
64:e6:08:a1:dd:35:77:d7:43:86:45:06:14:56:fb:
81:97:56:c9:49:12:3b:05:db:c1:a8:7f:63:f5:8c:
5c:fd:86:b2:ab:3e:fd:02:5f:4b:fd:ba:32:17:1f:
e9:8f:94:5b:6d:da:ca:5c:7b:43:16:b3:f0:3d:6a:
b1:f6:f6:b3:76:1e:23:41:5a:38:5d:d6:9b:e2:e2:
b9:3e:b3:2a:4a:98:fc:c2:74:7a:9f:0e:e2:51:d0:
07:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:23:C0:B3:B8:80:28:87:00:0D:33:E3:14:1D:C7:79:CE:93:7C:2A
X509v3 Authority Key Identifier:
keyid:A4:8D:A5:20:9B:D6:CF:90:C6:DF:6D:7E:6D:63:A6:39:55:BA:D4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pI2lIJvWz5DG321-bWOmOVW61LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:03:fd:2a:15:72:c5:a5:11:32:d1:e5:9b:41:ea:6c:43:22:
8a:7f:dc:ce:e7:94:3a:25:ee:0b:50:37:13:99:2a:ea:69:32:
d8:35:87:e5:6c:a4:79:54:53:af:3d:91:0e:28:4e:05:29:40:
cf:8a:71:65:cb:c9:6e:a6:ed:61:90:d9:3f:f0:f3:79:e6:f7:
02:e6:68:a5:c9:86:2b:4e:0f:33:3e:25:0e:72:bb:63:e7:7d:
04:6a:ac:f4:99:ae:91:61:02:bc:67:9f:25:f5:1e:53:52:65:
45:0f:0d:8e:b8:b4:ac:6e:e9:a6:df:22:b7:33:0d:b0:14:b2:
55:e4:8b:e8:83:bc:9d:33:6a:86:6f:a2:90:43:5a:47:dc:1c:
c1:1d:75:d4:0f:6c:6c:07:f3:a9:01:a2:44:ee:10:53:53:92:
41:a1:c5:75:53:f8:9d:df:76:d0:0d:f7:f1:dc:ff:89:f8:c8:
ca:24:80:f6:5d:e8:ce:a8:d1:73:f3:14:11:66:f6:88:d6:7e:
6d:ae:b0:71:47:a3:d9:f6:f1:1f:69:3e:fe:b0:e6:56:ea:2e:
85:e7:ff:3f:b8:cb:38:03:a0:b4:14:a3:5e:0a:5c:06:23:eb:
00:b0:d8:89:98:91:bd:29:b1:15:27:fe:48:29:cf:44:63:59:
55:01:6b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:16 2026 by rpki-client