Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
File: pDOBaM2dWvBgQBP8QnQSb8WB88s.mft (raw, json)
Hash identifier: hYU0FnV8IZQn1x1Ww6z9MnBM2djhMVnmSB1hRhwCc24=
Subject key identifier: 83:07:48:26:ED:67:23:F8:2D:C2:A7:48:D7:7F:55:14:86:3B:D6:ED
Authority key identifier: A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
Certificate issuer: /CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Certificate serial: 019D389C2A843401ABAA59CB87242105C0F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
Manifest number: 0F2C
Signing time: Sun 29 Mar 2026 08:00:51 +0000
Manifest this update: Sun 29 Mar 2026 08:00:51 +0000
Manifest next update: Mon 30 Mar 2026 08:00:51 +0000
Files and hashes: 1: 5t5_5MqWJNollBMPqdFua97XfMM.roa (hash: KTz9ZppQRmMMx9XPLOR36od8YyLkBIE5elG5FeL6i2Y=)
2: FSHrqYhJli1tSVyjlj_58RREeXk.roa (hash: uSCHyOKTAFU7tgMnLJvTfArI/447X68lLDwgFscWtJQ=)
3: pDOBaM2dWvBgQBP8QnQSb8WB88s.crl (hash: S+5rsCudoS0lDFQa5UyTSjzKqop76xkAdNQX8VfXoBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:2a:84:34:01:ab:aa:59:cb:87:24:21:05:c0:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Validity
Not Before: Mar 29 08:00:51 2026 GMT
Not After : Mar 30 08:00:51 2026 GMT
Subject: CN=83074826ed6723f82dc2a748d77f5514863bd6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:08:96:86:74:e4:8e:d3:35:9d:e2:15:e2:1d:
bb:b6:22:63:6f:cb:ec:6b:e1:f0:16:20:fa:de:3a:
1e:53:a3:6a:1e:59:6d:1e:73:4e:e5:90:2d:61:30:
49:a8:9a:31:b0:6c:53:46:6f:1f:ff:0a:cd:5e:63:
ad:56:cc:c4:0b:c5:78:9d:1e:a7:62:0b:31:dd:55:
8c:4f:92:35:43:8f:a3:fa:3b:d4:fe:eb:fe:4b:c0:
29:8a:91:cc:4f:99:21:d3:48:d6:46:84:43:42:ca:
5f:fe:d3:4f:00:85:05:5f:f4:fb:37:94:28:2e:02:
5a:c4:fe:9b:e2:79:dc:d6:bd:78:b6:5f:26:d8:a8:
80:d3:a4:90:a5:be:90:6c:9c:e6:b4:01:c2:e2:23:
a9:a4:76:f9:54:75:0b:38:f7:3a:6b:fa:17:32:46:
6b:89:4b:bd:d6:df:c8:ed:58:0b:b6:14:d2:27:4e:
14:b4:0f:35:91:73:f9:19:c5:c5:0b:d0:dc:d7:4e:
59:3d:d0:0c:0c:40:44:78:3b:7e:64:ca:ba:5c:6f:
5f:ba:af:a7:7c:e5:a8:9b:34:58:e4:8d:64:ca:c1:
a0:c4:9a:da:2b:0e:89:fe:fd:0c:94:79:a8:95:4b:
2b:29:8a:ae:2b:97:f6:f5:e8:39:36:5a:ca:ad:e1:
43:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:07:48:26:ED:67:23:F8:2D:C2:A7:48:D7:7F:55:14:86:3B:D6:ED
X509v3 Authority Key Identifier:
keyid:A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:59:b1:0b:ad:35:7a:6a:de:b1:1f:50:41:64:67:9a:aa:46:
50:93:81:73:73:3c:d0:91:c4:de:6d:b3:e4:ba:61:72:e0:e7:
c6:ae:75:bf:4b:69:77:5c:1f:b2:ad:21:c7:ff:ae:04:00:74:
28:44:b8:07:d4:c9:0f:43:c3:ca:b7:69:fe:b6:45:a0:f7:48:
6a:bb:d8:6e:02:40:af:48:1a:31:5a:c8:48:ab:b6:1e:eb:ef:
f1:f6:bd:27:93:34:ab:46:19:bd:19:53:45:11:47:56:d0:00:
7d:41:df:26:3a:3a:61:45:14:b5:3a:8e:ff:38:89:3b:19:21:
6c:f0:d4:f3:28:c9:a0:8e:5c:e0:09:6e:d6:ba:d2:c2:c9:36:
5e:0e:33:98:d9:27:fa:0c:0d:0e:58:87:f4:6d:0e:3b:cc:d6:
25:37:9b:29:b9:fd:e9:26:b5:ea:24:b2:65:40:de:2d:4d:fd:
d2:d2:5b:a9:d3:8e:cc:0f:03:f5:9d:25:b7:d0:40:81:16:26:
b8:e9:5c:9d:05:a5:2b:32:5d:c8:7a:c6:e1:d4:72:34:34:16:
73:4d:39:13:59:e4:f5:af:d6:11:5e:ea:82:bd:2b:ec:d7:24:
be:6a:01:e9:e6:0d:b1:23:02:32:a9:64:47:fb:95:b1:26:e9:
b3:b4:60:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:50 2026 by rpki-client