Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
File: PiTH7Po30khxUvubu6tQvnneJhk.mft (raw, json)
Hash identifier: mVFOKJpOOAzUXQwhOOoy+QLeakYs5pFr1oAUWLjhvtg=
Subject key identifier: FF:BE:17:DB:A1:EA:2D:8C:0C:D9:0B:DD:8C:DB:F1:3F:8C:3A:5D:DB
Authority key identifier: 3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
Certificate issuer: /CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Certificate serial: 019D6687670EE7947ACDDF2BFB4FD6C482D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
Manifest number: 18B7
Signing time: Tue 07 Apr 2026 06:00:42 +0000
Manifest this update: Tue 07 Apr 2026 06:00:42 +0000
Manifest next update: Wed 08 Apr 2026 06:00:42 +0000
Files and hashes: 1: 5ktFpVoHtcv-4PVj4xQGVTm6rZs.roa (hash: Zqkw6KvI8acX/aUr49KfIKqTAKRlHDvQQG+hF6oNumM=)
2: L1LuXNyLmddWoquATgiWDCkvIvc.roa (hash: 4bMlcyRakC1GsgwgHN92wea/CUU4Dqc8/FL+CIWH9ng=)
3: PiTH7Po30khxUvubu6tQvnneJhk.crl (hash: FynU5dQDWZApIJsgl6yF81wpsAsxpcLIRLWyd9K9ZSU=)
4: buVJFABq-VX2RQkDd31Tz6ZBBxg.roa (hash: 8On1Egu0eUygZ7HokkyA20vdkdxcvN29qQbkjTPI5rE=)
5: o5xjwD3RHYwZb8BGUpI8BsGBfV0.roa (hash: GZFTwMUyNntUts8RndeOn9OC9VYkHxusfe9yub/gTL4=)
6: t48mXkmHCqZPmvOXE_EaAv0d4IU.roa (hash: kn+opPbME6YgDhBuXcQLf7UfJNA4/7anLklPax/nt4w=)
7: tl_q-hSPqgL5VpoDk8C2Ua5xTVc.roa (hash: P7Vo08T4BVo4faac/Yk9jWiigRql2vSCBoh+fxrW89w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:66:87:67:0e:e7:94:7a:cd:df:2b:fb:4f:d6:c4:82:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Validity
Not Before: Apr 7 06:00:42 2026 GMT
Not After : Apr 8 06:00:42 2026 GMT
Subject: CN=ffbe17dba1ea2d8c0cd90bdd8cdbf13f8c3a5ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3f:03:48:64:b5:3a:dc:7a:bc:bf:48:52:8d:
af:4c:39:bf:36:96:8a:ab:15:65:2d:8e:bf:d2:c5:
36:39:ea:df:13:d5:0a:07:01:77:d4:37:3e:06:3a:
e7:22:aa:3e:84:40:63:62:68:e9:0f:85:d7:81:cc:
33:37:82:2d:09:a2:97:35:f3:f4:c6:e0:e6:72:2b:
bb:f7:a2:60:96:a3:2d:c0:42:b1:d5:6c:b7:1b:db:
dd:82:a3:e9:2e:4f:a7:ed:21:73:45:fa:22:67:c2:
ed:8d:ba:d6:78:7a:f7:bb:40:f6:5d:e9:d4:ca:7d:
b1:84:1a:ec:6a:23:ee:aa:da:94:15:08:fe:dd:bb:
ed:69:95:ef:cb:0a:1e:61:7f:d1:67:6a:5b:6c:cc:
01:5f:1e:86:62:e5:86:99:54:f2:0c:88:36:89:f5:
72:11:37:51:98:5b:42:ba:e5:c0:47:b8:b7:61:28:
38:c4:34:4c:98:d9:2e:60:ed:a3:3f:9e:23:39:d8:
d7:49:91:70:a2:06:f7:61:c7:74:98:d0:93:df:1d:
79:40:4d:02:61:8d:a8:65:0c:f3:eb:3e:7e:3b:a6:
97:cc:47:21:b7:7e:e7:d2:d7:f7:ab:03:7c:93:10:
af:5e:82:5e:7b:bd:00:04:4d:90:23:d7:af:7c:30:
9f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BE:17:DB:A1:EA:2D:8C:0C:D9:0B:DD:8C:DB:F1:3F:8C:3A:5D:DB
X509v3 Authority Key Identifier:
keyid:3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:43:96:b1:8d:b9:27:c9:d9:3c:ae:78:c1:36:f5:43:fe:6f:
d1:48:4b:88:80:ec:bf:07:ea:93:c1:ad:7d:0a:53:63:1d:1c:
02:e4:09:13:0f:d7:f8:25:49:13:d6:2b:ea:ed:ab:23:c9:d6:
0e:28:65:60:78:96:76:c8:06:2e:04:ec:33:a9:e2:6c:b1:72:
c5:4f:80:d9:64:f3:cf:d2:7b:e5:52:56:69:c1:0d:15:3f:fc:
62:85:28:0d:cb:12:2e:af:15:08:49:65:c0:2b:af:ba:f7:2a:
6c:57:71:27:6d:ed:5f:e2:cc:67:95:64:0d:f7:9a:cd:f3:e0:
3a:11:68:0f:ae:ba:d4:49:2e:e3:d0:51:8f:7d:5c:28:9f:9e:
2d:38:d2:e6:5d:fe:59:cf:ca:f8:c0:1d:ee:35:1d:cf:4d:8b:
2f:fd:22:c4:2c:a7:86:5e:c3:7e:4f:0b:75:bd:d3:cd:3d:8c:
ab:6d:60:b3:a7:7d:ce:0b:45:d3:76:ea:05:14:69:50:53:d8:
28:21:e9:c7:92:f6:7f:08:7e:b0:9d:e3:cb:0c:45:f8:d6:d1:
49:39:51:dd:5c:9e:64:f4:3d:4c:79:3f:67:54:7e:ec:98:25:
0e:4c:18:14:09:f3:6e:f9:f4:4f:05:6e:4c:9e:8f:0b:7e:b7:
2a:31:66:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 12:04:44 2026 by rpki-client