Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
File: pT2P6iKY_zVCptwIkLEIySIYNjU.mft (raw, json)
Hash identifier: v4muNoKqZOFiSO4cf1gKcMf69Je9w4leq+BM0VmlwB4=
Subject key identifier: 87:DF:89:6A:18:9C:48:0A:0F:59:BD:44:54:48:4E:17:A2:AD:C7:8C
Authority key identifier: A5:3D:8F:EA:22:98:FF:35:42:A6:DC:08:90:B1:08:C9:22:18:36:35
Certificate issuer: /CN=a53d8fea2298ff3542a6dc0890b108c922183635
Certificate serial: 019D2771FA488FD8B7B8BE9894EB3C78760B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
Manifest number: 10D0
Signing time: Thu 26 Mar 2026 00:01:14 +0000
Manifest this update: Thu 26 Mar 2026 00:01:14 +0000
Manifest next update: Fri 27 Mar 2026 00:01:14 +0000
Files and hashes: 1: pT2P6iKY_zVCptwIkLEIySIYNjU.crl (hash: 9cTOPW+08c2tsrFx5fLP/m8jJx7YltGoV8OGvLk4m7Q=)
2: zkRoAk-heecQlcDd4NYa_uCW1tw.roa (hash: MyMSVr8o6OsojK7lNBDhOIJstHWvuZ78LlSiWHryefQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:fa:48:8f:d8:b7:b8:be:98:94:eb:3c:78:76:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53d8fea2298ff3542a6dc0890b108c922183635
Validity
Not Before: Mar 26 00:01:14 2026 GMT
Not After : Mar 27 00:01:14 2026 GMT
Subject: CN=87df896a189c480a0f59bd4454484e17a2adc78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c2:6f:2b:cf:b1:6c:78:67:f9:fb:b2:ba:6a:
a4:44:2c:37:37:a7:02:68:da:20:02:f8:c3:71:9d:
98:21:61:ea:fc:d9:88:7a:9f:40:33:98:ba:d8:6d:
4f:46:38:fc:a7:fc:63:aa:2e:4d:f9:97:91:99:2e:
be:c9:bc:a7:db:8e:1e:ba:2f:a9:50:f8:7c:de:a6:
f7:cb:1d:03:d7:2b:3c:09:2a:a8:22:1e:f0:7b:7a:
68:20:a1:c7:00:11:41:84:48:07:f0:84:4c:48:c8:
c2:44:f4:77:bb:23:61:fe:1c:94:38:48:41:7d:cd:
89:9a:d5:82:4c:b0:8f:60:ee:18:16:0a:4d:9f:96:
e1:1d:56:97:fe:54:f1:63:86:0f:8d:e7:ce:f2:61:
f1:c9:93:24:82:a4:b2:e4:c0:b7:24:ce:80:84:ca:
ec:84:f4:ee:fa:f2:8c:40:80:12:64:11:3c:67:c9:
36:f0:f2:34:e1:38:2c:2b:cf:ea:b5:48:d4:66:ab:
4c:a7:a1:2e:f6:cd:dc:22:02:26:6c:32:23:4d:29:
39:58:72:c5:19:a9:ed:6e:db:46:35:53:37:50:9e:
41:80:d7:8e:f5:e1:f3:4e:58:4f:0d:32:2d:06:74:
d2:33:11:c9:39:54:f2:f0:c9:5d:ca:c6:e0:29:b2:
1a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:DF:89:6A:18:9C:48:0A:0F:59:BD:44:54:48:4E:17:A2:AD:C7:8C
X509v3 Authority Key Identifier:
keyid:A5:3D:8F:EA:22:98:FF:35:42:A6:DC:08:90:B1:08:C9:22:18:36:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:96:1a:25:cc:95:5c:96:6f:e4:3a:f6:fc:36:c1:07:63:91:
9e:3f:50:d6:5a:28:06:6e:ba:40:ca:0e:0a:20:a3:51:ad:e9:
d4:b9:9f:c0:08:a5:32:69:e8:80:47:3b:e2:9c:1e:7e:18:d1:
93:9e:67:62:3e:2b:a8:08:72:8a:8f:64:36:8e:79:d0:c8:3c:
b1:a0:39:7a:73:59:17:35:95:30:e1:63:68:18:b5:fd:c8:df:
6a:8b:40:64:6b:e8:61:68:cc:c5:20:bc:9d:0d:c9:93:ed:f4:
6b:70:bb:59:ba:a9:18:b1:06:63:d8:54:32:c0:c4:f6:12:d9:
b9:ea:f2:22:8c:e2:34:8d:1e:1d:6e:24:e9:a7:26:c4:d3:fb:
70:8e:65:2d:43:88:91:bc:7c:63:b0:d5:d0:3b:56:c0:62:21:
cf:ae:cd:d0:07:66:7e:32:ec:6f:21:62:7e:d5:ad:06:bc:31:
e3:44:f5:84:2b:33:32:e8:5e:fd:07:3f:28:f8:63:7b:15:50:
ba:3f:72:3b:cb:ef:ce:3e:88:5b:79:d8:7b:87:f5:ae:ab:c7:
47:5b:28:23:91:07:00:ce:4c:1b:c6:b6:94:1e:f3:93:df:7d:
c6:9e:6d:dd:44:81:6d:bb:2b:69:51:d1:f1:82:cd:47:4f:15:
49:25:c5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:48 2026 by rpki-client