Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
File: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft (raw, json)
Hash identifier: nwHYGbJgpGPhx1DRdxBnz9ecR7HGntuqM3tk+IdyRrE=
Subject key identifier: 0F:59:E2:BD:18:C8:BE:7C:47:91:EB:FA:5B:AD:F4:84:AF:17:DB:36
Authority key identifier: A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95
Certificate issuer: /CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
Certificate serial: 019D29295F576836A56ACABDD6C330355364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 08:01:10 +0000
Manifest this update: Thu 26 Mar 2026 08:01:10 +0000
Manifest next update: Fri 27 Mar 2026 08:01:10 +0000
Files and hashes: 1: ZMTWhcJ1e7tvXHUUl4ANoGMrIWk.roa (hash: 9yOiqGJYeL5bi8PHF9fNeVVcmhOJdy6bDsiWR0m6Ve0=)
2: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl (hash: 8Ecm3cljRkWrALr1rkQr30ut2Ndqr8M8za815wPIp+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:5f:57:68:36:a5:6a:ca:bd:d6:c3:30:35:53:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
Validity
Not Before: Mar 26 08:01:10 2026 GMT
Not After : Mar 27 08:01:10 2026 GMT
Subject: CN=0f59e2bd18c8be7c4791ebfa5badf484af17db36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:75:f3:6a:a3:dd:6a:fb:c3:40:c4:b5:a1:2a:
ca:86:98:f2:2a:1a:da:d5:58:41:e7:d2:12:5a:93:
ec:c5:cc:9d:65:ea:66:c1:48:7a:79:86:4f:f0:c9:
ec:af:e3:d2:e3:6c:62:85:1e:e6:bc:50:b2:f5:f4:
12:f2:42:20:30:d0:92:cc:94:05:fb:95:86:6c:24:
1a:ab:a0:0d:1a:b4:71:44:73:e5:ff:1f:50:fd:df:
f3:eb:ff:18:09:9f:29:96:17:1b:27:a8:56:8f:da:
19:08:4e:ab:56:79:5b:9f:cd:b4:6e:87:23:19:01:
de:c7:fc:84:b3:95:1c:5e:8d:a1:73:3c:b9:41:f0:
53:b0:d0:5f:67:8f:9a:d7:3d:ad:cf:10:7f:1d:f1:
21:70:c0:8a:87:5b:e8:c3:53:60:77:b4:b0:9f:d3:
77:a0:95:c9:66:12:f8:dd:5d:9f:42:d9:ed:25:dd:
15:fc:28:49:f5:5f:26:1f:3c:17:45:81:44:95:64:
5a:3c:46:09:c4:b2:9a:9b:58:97:22:4a:55:59:10:
cb:f3:ce:02:3f:98:9f:ef:62:e0:ba:3f:82:4f:97:
c0:2a:92:2e:50:b3:d0:8a:1d:b5:cb:b4:9e:33:58:
1b:b5:b4:55:4e:cf:d8:80:a3:31:6c:5d:49:9e:eb:
14:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:59:E2:BD:18:C8:BE:7C:47:91:EB:FA:5B:AD:F4:84:AF:17:DB:36
X509v3 Authority Key Identifier:
keyid:A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:94:b0:69:91:02:39:60:c6:21:11:be:c2:47:94:7b:31:46:
4b:25:56:bc:b3:8c:78:e4:ac:d3:75:41:3a:aa:1d:d6:81:4f:
cf:0c:fc:62:be:75:f4:81:51:74:d9:e8:1d:29:d1:47:a2:ec:
60:d0:d6:d4:13:86:12:aa:0c:50:37:78:73:27:5f:3f:f1:dd:
60:f4:73:17:cb:e5:23:15:13:8e:3c:3e:cd:36:3e:c4:e8:5b:
07:0d:f1:56:73:9d:ff:9c:63:95:66:87:37:ea:c2:8b:df:6d:
a2:1a:24:8c:4c:b1:64:39:fe:db:8d:1f:2e:57:bb:37:35:7e:
6c:1b:69:62:c0:72:9b:2d:c8:5c:ab:83:61:b6:0d:e0:7c:ab:
8d:6f:f3:1b:1d:b2:e5:95:19:05:d4:bc:cc:a9:fa:30:db:fe:
1e:ca:ac:d6:fd:63:85:53:72:d9:0a:23:6d:7e:3f:6d:76:b6:
41:70:ba:e9:f2:86:b3:5c:f3:32:52:d6:38:80:b6:b2:3f:cb:
87:f1:d3:28:76:2e:d2:74:92:e0:ce:0f:6c:ec:a3:c1:43:1a:
e0:47:ef:0b:60:3d:a4:6d:a3:11:a1:5a:ad:a1:78:36:7d:37:
a5:c4:2c:36:73:57:64:b8:3b:f7:bb:2e:66:ee:b0:48:4c:42:
9e:cd:98:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:36:08 2026 by rpki-client