Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
File: pNAp8sMhrbWeyl_KV6Hrm99THWo.mft (raw, json)
Hash identifier: WSGXmLBB9pWvjb9SXoay1Vy+PmgX5cLpPocN85zlyZI=
Subject key identifier: 75:7C:13:2F:5D:C4:E7:18:44:BF:67:F4:65:D8:2B:93:37:B0:B4:08
Authority key identifier: A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
Certificate issuer: /CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Certificate serial: 019D382E34CE45BCFC8C83C9420B6BC8B709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 06:00:45 +0000
Manifest this update: Sun 29 Mar 2026 06:00:45 +0000
Manifest next update: Mon 30 Mar 2026 06:00:45 +0000
Files and hashes: 1: 0-4nqiPOGteiK9VP6x_sLK2mkJo.roa (hash: D/G/NyWtohGa+4A1yzgQpS5Fkg8In30pL4ywg6qyHJ4=)
2: Z3v-SAm3fw6NnIHtD6dU5VOCOP4.roa (hash: v7j7LyN9QjPmbnKNeQyhNxvVR/InX3nLJAUhm3ToZRw=)
3: pNAp8sMhrbWeyl_KV6Hrm99THWo.crl (hash: sX52I0Cl7sOQ7j+tU8a4BBw+4lRyTCNxRVGib576ADY=)
4: rHP4WUAqcSQvgCZtg8_htfcNuko.roa (hash: Mb29TkYRCVH9g/5FuCaCpqq3Nrrav/iSJCN1hGSFHTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:34:ce:45:bc:fc:8c:83:c9:42:0b:6b:c8:b7:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Validity
Not Before: Mar 29 06:00:45 2026 GMT
Not After : Mar 30 06:00:45 2026 GMT
Subject: CN=757c132f5dc4e71844bf67f465d82b9337b0b408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:83:c1:f7:62:42:da:9a:e6:c4:08:0f:47:b7:
64:74:3e:5f:68:5e:40:5b:76:bc:2a:a1:7e:ba:e9:
f6:27:94:bc:a6:7c:ca:e6:a0:10:63:f3:1e:86:69:
fb:cc:48:f9:3c:06:9a:4b:7f:84:3a:ff:29:a4:2f:
5c:1e:c4:5c:cb:58:a9:00:ca:8d:8f:8b:d0:f5:f1:
c6:3d:b3:6f:b5:6e:b5:d5:a1:41:11:ed:03:c1:67:
ec:68:6a:60:e1:5e:9b:2d:5f:76:8a:e7:3a:8c:a8:
6a:42:42:bc:7b:4f:d1:cd:b9:40:ec:fc:65:0f:b0:
15:b2:8e:b5:dd:27:4b:30:0d:79:a2:00:b5:88:bc:
d4:73:e4:45:12:d8:aa:dc:79:51:11:a1:f8:6c:42:
30:91:f1:f9:f7:94:0f:17:d4:e8:13:4c:67:e5:51:
76:76:36:7c:01:e3:dc:74:3f:27:e7:38:72:f1:80:
96:87:fb:f0:88:35:52:c6:62:40:bc:c9:f2:fb:01:
71:3b:75:52:59:65:93:fd:e4:95:1b:a2:4d:71:2a:
d4:72:97:6d:0e:cc:1b:54:6d:5e:db:c0:a0:c6:52:
03:f0:9d:91:f8:59:2b:ed:ab:1f:21:e5:f9:aa:8c:
2e:37:25:67:c3:67:6e:1e:d6:25:ba:4a:8c:75:00:
e6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7C:13:2F:5D:C4:E7:18:44:BF:67:F4:65:D8:2B:93:37:B0:B4:08
X509v3 Authority Key Identifier:
keyid:A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:fd:b3:f0:68:88:53:91:84:99:34:06:13:96:99:0f:05:3a:
1e:e0:f3:97:c0:67:9c:2d:d0:2c:ba:08:4f:6f:74:3d:77:1a:
bd:d7:51:1d:c9:ff:30:60:90:7d:c9:be:92:59:45:ed:d3:6a:
f3:58:92:f3:df:71:2f:37:93:27:7d:07:99:b5:c1:de:f9:44:
c5:07:c2:76:f9:6f:82:18:e4:fe:2b:07:6e:42:92:e1:d6:0d:
cc:c6:e7:2e:59:ed:5f:9a:52:1e:88:f2:4e:91:6f:24:9b:54:
f6:97:64:88:ef:9c:63:c1:04:c0:bb:13:4c:88:e9:51:e6:d7:
09:d0:15:ea:47:70:90:6d:bc:4d:a9:23:79:96:b5:4d:64:6d:
44:e8:a6:b7:14:34:71:37:30:b0:cc:bb:f5:0f:4f:36:b6:bf:
49:75:bf:f7:6c:bd:61:88:bd:8b:5c:d2:2d:73:d9:07:62:96:
53:ce:76:bd:ec:fc:6c:84:ba:c0:f0:a2:36:9b:70:bd:67:9b:
11:6d:d5:40:0d:0f:ee:7e:22:94:8a:0c:25:18:bd:8f:a8:f4:
45:2a:97:32:82:1a:85:d8:59:f0:4f:d8:06:18:4b:8f:94:d2:
14:6c:41:23:d6:a2:77:74:36:e0:c7:07:c8:91:6a:6c:66:32:
f6:48:20:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:17 2026 by rpki-client