Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
File: p0msqF3GbIPOVezcBFyWB1yn3rw.mft (raw, json)
Hash identifier: VIfZWjLbMXSOk/2aM9xugPheWQukGSMrJDa48oLRHMM=
Subject key identifier: 50:82:60:1B:96:4E:B3:ED:0A:3E:9A:81:56:7F:4C:CF:B8:26:A1:C2
Authority key identifier: A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC
Certificate issuer: /CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
Certificate serial: 019DED11C21B85BD94D98D44FC24A0915212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
Manifest number: 18EE
Signing time: Sun 03 May 2026 09:00:57 +0000
Manifest this update: Sun 03 May 2026 09:00:57 +0000
Manifest next update: Mon 04 May 2026 09:00:57 +0000
Files and hashes: 1: 4g2KoICvRhAlF5rUzbxNV7SMp8U.roa (hash: Ctanikf8U9Sdy0xnpwf0T9RlsG+za8SDalPfgQYX/Y4=)
2: Ff-FE_841YKkM3pTxc9IBAIW24Y.roa (hash: DJoJ2bsSXRYjcv8lRsV6GjC25VZGryCw4Oz9ykQkgwc=)
3: p0msqF3GbIPOVezcBFyWB1yn3rw.crl (hash: Yq5nUAxbioOjyQ2toKpgkw9R9QM+ckBAY8URvf44rE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:11:c2:1b:85:bd:94:d9:8d:44:fc:24:a0:91:52:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
Validity
Not Before: May 3 09:00:57 2026 GMT
Not After : May 4 09:00:57 2026 GMT
Subject: CN=5082601b964eb3ed0a3e9a81567f4ccfb826a1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:83:6b:d1:fb:6b:2b:56:c1:df:79:6c:8c:3e:
02:57:28:9c:2b:c6:0c:b2:7a:61:9f:ca:d0:4f:d6:
5c:77:1d:21:40:a6:b0:cd:4e:56:de:0a:9c:31:00:
7d:26:d5:fc:64:84:ca:1e:f6:ee:0b:3e:f3:6a:7c:
cb:21:e2:32:21:f8:c2:24:da:04:e9:99:a8:8d:14:
6e:c2:b5:51:1e:45:ce:ed:cd:af:8d:31:5a:04:dc:
b0:b3:32:2d:f0:c3:b4:83:6c:b7:07:34:ca:82:51:
82:36:95:ae:da:f3:ef:b9:42:1e:8b:d3:81:2a:9c:
72:03:e4:92:81:72:8a:f5:f8:4d:5a:63:f2:42:4e:
28:e0:5a:ec:42:32:6c:39:37:bc:2d:87:be:b6:7c:
63:d7:ef:3b:63:01:c1:52:38:3e:68:17:b4:73:f7:
62:75:1b:e3:7c:1a:83:7c:c6:1d:13:f8:cb:fe:69:
87:a9:ca:25:b3:e3:fc:df:00:46:e8:2a:c7:c0:79:
09:47:ea:7a:e6:b8:8c:13:6a:0f:85:96:76:fe:9d:
e9:04:29:76:54:5a:32:36:4c:dc:08:ea:26:85:08:
8b:fd:00:5e:6f:ac:f9:c5:62:02:4f:e1:bc:ba:59:
2e:a0:4e:83:f5:05:43:51:cc:c5:ba:dc:b1:b1:54:
0c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:82:60:1B:96:4E:B3:ED:0A:3E:9A:81:56:7F:4C:CF:B8:26:A1:C2
X509v3 Authority Key Identifier:
keyid:A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:44:e6:11:49:e6:22:e5:32:b1:40:c5:4d:b3:20:e6:f7:d1:
5c:9f:8f:45:86:e8:46:29:aa:1f:59:a8:2f:2a:c0:ff:54:72:
8f:3e:a9:bb:8e:a6:f5:ae:21:08:95:09:44:7f:41:00:a4:70:
10:49:ee:ba:9a:1d:0a:30:14:29:db:98:4a:55:38:9c:0c:fc:
10:e3:04:f0:b2:b1:c7:d5:1c:8d:8f:96:e9:26:ea:a9:0c:64:
5f:a4:a3:e1:39:cc:17:4d:f9:6d:90:fc:32:17:e7:bd:14:aa:
09:b0:84:ab:48:10:63:f0:ef:7b:21:cf:f1:3e:5f:b8:90:63:
32:d1:1f:2d:73:bc:21:6a:d4:e3:e2:18:06:d5:a1:6a:18:83:
1a:ea:e4:0d:8a:11:b9:18:38:d3:5f:33:17:e0:4a:5e:e8:3b:
c4:ae:b7:e9:fe:5b:44:62:9c:07:36:9a:d3:91:c0:b5:60:3b:
5c:f9:7b:e2:6b:5c:39:df:59:24:b9:9b:4e:c7:44:d6:df:a5:
90:f0:ac:55:cc:2d:65:d8:62:a0:b8:56:cc:ff:e1:fc:29:77:
79:c0:dc:88:c7:d6:4a:74:7d:c9:2c:11:e3:dd:b1:cd:f5:90:
a6:04:e7:05:d4:43:ae:ee:7f:5c:3c:b6:e8:2b:06:71:c2:26:
93:6c:66:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 18:46:13 2026 by rpki-client