Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
File: pP14NtcTCMQtD50Wj_1MWBZxRFk.mft (raw, json)
Hash identifier: hAoLuzdRj1FCt2ZPwKX1twUnNP1HQEROc5TjdxbFFao=
Subject key identifier: 2B:20:41:6B:94:8A:E6:99:79:91:16:F0:84:C9:D6:E5:2A:E6:FA:8F
Authority key identifier: A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59
Certificate issuer: /CN=a4fd7836d71308c42d0f9d168ffd4c5816714459
Certificate serial: 019D29CE198853FAB47AF214E02148EDB887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
Manifest number: 13B1
Signing time: Thu 26 Mar 2026 11:01:05 +0000
Manifest this update: Thu 26 Mar 2026 11:01:05 +0000
Manifest next update: Fri 27 Mar 2026 11:01:05 +0000
Files and hashes: 1: ojC0sB05EcDCgctQ9dDCJxZPOP0.roa (hash: 1kAvCSrjpKtG/wqX4+TjXTfOsHQ+c83C0DRspLJabKQ=)
2: pP14NtcTCMQtD50Wj_1MWBZxRFk.crl (hash: s4ih+pQfvLtD+i0kGo0BsOdwVZrTzepUTNxFXagw/xM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:19:88:53:fa:b4:7a:f2:14:e0:21:48:ed:b8:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4fd7836d71308c42d0f9d168ffd4c5816714459
Validity
Not Before: Mar 26 11:01:05 2026 GMT
Not After : Mar 27 11:01:05 2026 GMT
Subject: CN=2b20416b948ae699799116f084c9d6e52ae6fa8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ec:ce:09:72:88:83:2a:4c:0c:f9:7a:cf:26:
f1:0d:69:8b:8d:61:a1:f0:d5:50:fd:17:9d:c3:a8:
41:e4:13:92:e3:0b:f1:3b:1c:9a:ef:c4:2b:d3:be:
a3:9d:ea:e7:b3:1c:36:b9:d6:c3:59:3a:5b:07:c5:
c1:10:32:3d:b0:cb:d7:d5:63:18:38:ab:06:43:02:
23:1d:84:48:17:71:73:8f:aa:f0:1e:5a:be:f4:f1:
7f:e9:8e:3d:c5:10:70:e9:96:99:33:52:86:09:42:
4b:8c:8a:ef:f3:ed:ca:a5:78:d0:c4:1a:02:b8:ba:
97:41:a8:a8:23:93:8c:ed:d2:f1:12:f6:e7:3b:32:
27:c4:25:90:f5:f1:b3:1e:6e:6e:dd:4a:a8:a8:7a:
24:9c:a6:81:9c:e0:49:ae:96:41:d3:90:79:0b:43:
1a:c1:97:9a:b6:62:22:00:c0:17:0d:5c:81:77:6f:
b8:5a:e6:8a:1a:35:1d:d9:bd:6f:3d:c9:22:67:5b:
38:90:ec:80:5c:6d:b2:29:59:2b:f6:e9:d7:93:3a:
f7:1d:3d:95:19:99:97:b0:4e:0d:ec:4c:80:2e:b5:
aa:b2:9e:14:96:f3:bd:b7:1f:db:06:e3:91:a4:bb:
6d:89:0d:56:99:0a:3d:e1:22:5b:ee:a7:57:2c:50:
f1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:20:41:6B:94:8A:E6:99:79:91:16:F0:84:C9:D6:E5:2A:E6:FA:8F
X509v3 Authority Key Identifier:
keyid:A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:3c:3f:5a:85:26:3a:7b:05:40:2f:c3:7a:8a:b4:c8:06:72:
19:80:f1:bd:ac:94:1e:c1:c6:02:6d:76:45:ca:40:98:5a:df:
06:7e:cb:5c:dc:3c:8c:49:ef:60:e0:f3:53:d6:af:48:f6:6a:
d5:08:f4:2a:92:bb:77:0c:f6:00:68:b1:f4:00:e5:17:43:99:
0b:b2:5e:26:83:54:68:1d:0c:b2:a3:6d:43:3b:f1:d3:2c:dc:
32:c5:bc:f4:cf:46:2e:5e:27:58:48:23:fd:71:b3:d7:c7:3b:
7c:94:f6:f5:73:7b:a3:25:5b:26:85:e9:90:0f:e8:fe:6a:b9:
fc:c0:03:f7:2f:a3:43:01:03:9a:e6:d2:dd:04:9e:35:7c:98:
58:c0:d3:72:3a:43:80:3c:b9:de:2d:c0:9a:cd:59:c4:93:a5:
96:39:fe:8e:3f:af:27:dc:0d:ef:d2:82:80:8e:2d:22:62:15:
69:b0:95:3f:2d:0f:ef:83:94:c8:16:97:45:1c:6b:89:4f:be:
8f:f6:b6:5c:13:b0:b9:d0:23:6e:33:dc:86:cb:f4:45:6a:9f:
f0:cc:63:f2:9b:cf:5e:c3:4d:18:ca:48:fa:39:e4:8e:40:0c:
5f:97:ee:32:fb:dd:28:df:27:c7:e7:72:a0:83:1d:cb:62:18:
94:bc:3f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:14:58 2026 by rpki-client