Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.mft
File: pAusZvv-zOXuLKjNiVZoRxCG7Zw.mft (raw, json)
Hash identifier: 61QCcDDbiX59yROrIiUrhiHw4iLur/BPpatm9VfbzZg=
Subject key identifier: 21:22:6F:52:FE:A5:F0:F6:F2:A3:05:5B:87:C7:94:90:31:F5:92:E6
Authority key identifier: A4:0B:AC:66:FB:FE:CC:E5:EE:2C:A8:CD:89:56:68:47:10:86:ED:9C
Certificate issuer: /CN=a40bac66fbfecce5ee2ca8cd895668471086ed9c
Certificate serial: 019D37C06A1C64B73B42579E6A322CB45D5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAusZvv-zOXuLKjNiVZoRxCG7Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.mft
Manifest number: F1
Signing time: Sun 29 Mar 2026 04:00:50 +0000
Manifest this update: Sun 29 Mar 2026 04:00:50 +0000
Manifest next update: Mon 30 Mar 2026 04:00:50 +0000
Files and hashes: 1: WlMbZGmn7ELXlYYDe9GRZvGgMVU.roa (hash: YxkhfO0kcIItDFF9reiDtyKSrNleRYkzff6/T+LQRME=)
2: pAusZvv-zOXuLKjNiVZoRxCG7Zw.crl (hash: bEnQ08+vNIq350SkllJKNyNo2dPywRek7Xu7zOYthnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAusZvv-zOXuLKjNiVZoRxCG7Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:6a:1c:64:b7:3b:42:57:9e:6a:32:2c:b4:5d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a40bac66fbfecce5ee2ca8cd895668471086ed9c
Validity
Not Before: Mar 29 04:00:50 2026 GMT
Not After : Mar 30 04:00:50 2026 GMT
Subject: CN=21226f52fea5f0f6f2a3055b87c7949031f592e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:06:df:69:d2:b1:f8:d7:55:e1:8b:3e:5a:de:
22:dc:c9:f1:f2:d3:da:fb:67:52:fd:ad:d8:a6:72:
96:62:b4:7c:4e:2e:c9:0d:d8:e9:54:db:40:31:fd:
36:ec:81:7e:33:08:2e:ff:df:6e:22:f5:73:9e:f7:
99:14:bd:1b:fc:ba:76:0e:eb:2e:ce:3f:5b:47:34:
82:63:92:8b:54:af:ec:e9:75:c2:e2:45:0e:8d:5e:
93:35:dc:16:a0:8f:53:42:d8:49:6a:c7:44:29:4d:
12:f5:69:7f:b8:15:24:25:db:2d:33:58:25:82:e5:
72:a3:be:52:b7:58:28:95:14:be:96:3b:fc:0d:f9:
77:ea:2e:33:39:e2:d0:b3:0e:26:29:7c:d3:95:ff:
bf:74:52:ce:80:2d:bd:a8:6b:60:c6:41:ee:5e:1d:
f6:e3:8e:8b:55:ad:14:88:d8:4f:49:06:ac:46:dc:
9e:29:35:81:fd:5e:18:00:3a:57:57:a8:3d:9e:15:
21:20:b6:82:b0:28:06:47:9a:eb:32:0f:e6:ba:55:
31:7f:b0:35:07:61:2f:d8:fc:ea:6f:6a:08:1d:5f:
2b:c5:e7:3e:c6:82:d2:61:a9:33:a5:c7:04:42:10:
0d:81:80:6a:a1:6f:98:5b:b3:96:6b:dc:8c:14:11:
50:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:22:6F:52:FE:A5:F0:F6:F2:A3:05:5B:87:C7:94:90:31:F5:92:E6
X509v3 Authority Key Identifier:
keyid:A4:0B:AC:66:FB:FE:CC:E5:EE:2C:A8:CD:89:56:68:47:10:86:ED:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAusZvv-zOXuLKjNiVZoRxCG7Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:2a:74:4a:32:e7:0c:b5:cb:f2:07:fc:be:48:74:dd:0b:8d:
48:b8:03:c8:38:38:2c:23:d7:98:84:2b:19:49:fc:4f:84:4c:
b0:f2:96:d6:d4:60:69:64:a5:47:b0:0f:6d:03:db:f3:7f:c7:
d8:ff:16:42:bb:ba:0d:9f:b0:86:e5:c2:0b:64:cd:84:4f:e7:
02:91:a0:19:98:ec:8e:20:8a:98:c2:9f:96:73:61:27:6b:d9:
2d:84:cc:b8:9e:f1:7e:e8:24:04:91:ec:95:7c:fb:d0:a8:f0:
81:14:89:b6:19:47:ca:5e:ad:08:01:0b:17:60:c8:97:ba:01:
bb:65:6d:d2:9e:1b:54:d3:eb:e7:aa:0f:45:3e:3d:d4:e2:9c:
c8:5a:2f:6f:49:a0:7c:f6:a2:1c:d9:42:4a:de:ea:8c:24:96:
f5:8c:d0:72:cc:4b:45:b9:82:fe:ec:c7:ad:2d:f7:97:85:5f:
a2:6a:ca:79:d4:a1:4a:bd:d5:80:48:db:26:07:5c:01:d7:54:
fe:10:d3:7f:9e:f0:7e:f1:a6:91:7d:83:f1:73:2c:db:8f:0c:
6a:5a:36:2f:4b:ce:d7:9f:37:f9:22:e3:55:f5:c7:34:8b:99:
f7:5c:39:49:92:2a:b8:86:6e:7d:ce:ff:da:29:eb:00:ed:08:
d0:8b:98:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:40 2026 by rpki-client