Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
File: Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft (raw, json)
Hash identifier: mZbc6jYDmkAg+m8p0zU0MjR88XKk27fna8tSgiupLN0=
Subject key identifier: 73:5D:9B:89:4D:B3:C5:80:9C:04:E3:2D:D1:89:2B:9A:13:0C:68:28
Authority key identifier: 3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27
Certificate issuer: /CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627
Certificate serial: 019D2AA9EA27D8041E49F4217041FF8DE13B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 15:01:11 +0000
Manifest this update: Thu 26 Mar 2026 15:01:11 +0000
Manifest next update: Fri 27 Mar 2026 15:01:11 +0000
Files and hashes: 1: 6LPLfXRjPfIhjODnqMp3dSMQhpE.roa (hash: SwmREtsfcX2USnXEaEXyt246LdWmwOC0/X0ED+RKl5c=)
2: Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl (hash: fDPSERuO6CL1qGRExjk3YDgGXO4dFgmIWHxNHtUeuT4=)
3: kvgue6TS--DcN7HG6o1wL6cSaEs.roa (hash: FoFeIWZgKjpGFpo+unUKSXljq5ce3QE7qtWREotLcT4=)
4: qLhFmr4T7lmhKT8keUmQGB3IPPk.roa (hash: 2UcGL5CSyZb5XFh4zJbKoqd+DUw15c/cw5GBlQgBwdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:ea:27:d8:04:1e:49:f4:21:70:41:ff:8d:e1:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627
Validity
Not Before: Mar 26 15:01:11 2026 GMT
Not After : Mar 27 15:01:11 2026 GMT
Subject: CN=735d9b894db3c5809c04e32dd1892b9a130c6828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:65:08:56:fc:82:3a:a4:fe:ca:9b:9b:26:ca:
2b:29:4f:c2:ea:28:21:76:7c:a6:07:d4:d6:4c:02:
43:cc:47:4d:0f:e8:26:b6:40:dc:05:4b:3a:7a:c2:
f8:38:17:72:b8:8c:e4:9b:71:40:f1:13:43:90:68:
39:c6:52:d9:6f:f6:f1:ab:69:06:18:ba:eb:e6:db:
d4:3f:e3:80:fe:db:0c:18:aa:d2:c9:0e:90:7a:1d:
09:8c:07:7d:f6:22:ff:79:19:47:81:e5:f8:00:8d:
b3:09:bd:97:5f:b3:ca:c0:a6:a4:81:7b:54:5e:ed:
32:d8:1b:a9:9a:85:a6:e0:a6:10:4a:47:01:a9:d3:
5e:ff:6a:7f:a9:70:fa:1d:89:4b:d6:c2:d5:6f:ef:
58:9a:d6:fd:16:9c:fc:d5:53:a6:61:32:75:26:ee:
cd:a2:3d:b7:5b:37:f1:39:23:0c:24:63:19:93:04:
4c:e5:a5:67:e3:87:0c:b1:e2:17:c2:f4:fa:6a:68:
f3:ee:ca:17:5b:7c:ae:15:36:22:01:87:d7:03:c8:
8b:3a:fd:dc:33:49:c1:41:f5:37:c3:7b:9f:83:5b:
f3:88:b0:a6:c6:69:20:41:4b:aa:05:c2:09:df:93:
da:fd:93:4f:83:55:c2:d0:17:c1:aa:5a:c6:57:49:
90:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5D:9B:89:4D:B3:C5:80:9C:04:E3:2D:D1:89:2B:9A:13:0C:68:28
X509v3 Authority Key Identifier:
keyid:3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e9:41:0e:0b:eb:a9:22:92:65:62:05:04:bb:85:63:a1:51:
ee:65:65:57:0c:f8:67:a4:c1:8c:76:39:32:45:06:10:5e:64:
03:fc:a0:78:50:cd:22:4b:09:27:b2:d3:1a:0f:c5:b3:6f:4e:
e9:f5:97:35:aa:d2:83:a4:1f:e6:d4:fd:26:d4:26:ea:46:2e:
3b:29:31:bd:0c:05:ec:4d:df:d9:5a:ea:ac:ab:0a:6e:c7:35:
61:fb:ec:25:21:bc:7f:27:d8:69:93:45:ab:d8:07:dc:be:14:
8f:75:db:69:06:e5:eb:d0:d6:59:e6:5c:d2:41:f2:fd:e4:3a:
3d:0e:95:dc:76:0a:fe:0b:46:40:74:8d:b2:12:7f:e7:f3:29:
cf:67:d0:8b:54:75:83:f5:03:72:cb:e2:15:c1:0d:2e:b1:c8:
e1:f1:5b:ff:f1:a9:31:30:d5:75:98:85:5c:07:e9:85:bf:03:
26:79:a1:aa:fe:68:d5:be:af:fe:03:0f:ca:60:23:37:16:3f:
3b:80:d2:ff:f1:38:33:5d:60:9e:fd:2c:7b:0c:13:b8:ef:84:
b0:a6:e2:cc:65:96:b2:98:92:04:78:18:89:f7:b1:9a:16:df:
04:0c:f1:d8:a7:2f:00:3d:78:07:63:e0:86:9c:19:64:99:3e:
55:e1:5e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:44:06 2026 by rpki-client