Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
File: pZp4qFEvkJzm1HMlLwTPGenmiio.mft (raw, json)
Hash identifier: 3gPL2GAw1YjTBLOOxofh/roQgdHCj88qoD5528VIZR0=
Subject key identifier: 36:80:FD:FD:D7:0A:7B:90:D8:BD:DD:66:9B:0F:8E:1D:B6:98:F3:F7
Authority key identifier: A5:9A:78:A8:51:2F:90:9C:E6:D4:73:25:2F:04:CF:19:E9:E6:8A:2A
Certificate issuer: /CN=a59a78a8512f909ce6d473252f04cf19e9e68a2a
Certificate serial: 019D382E26A0EBF4C661E4064EA3BAEC169A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
Manifest number: 0F1A
Signing time: Sun 29 Mar 2026 06:00:41 +0000
Manifest this update: Sun 29 Mar 2026 06:00:41 +0000
Manifest next update: Mon 30 Mar 2026 06:00:41 +0000
Files and hashes: 1: lgjWE5f6FBur4txLoui9WQ1m0Wg.roa (hash: Nc9dyrcUa1QHYvN/T1aLg2QBZKFaf7gWSdVmcW5gdec=)
2: pZp4qFEvkJzm1HMlLwTPGenmiio.crl (hash: 2YrDy2awbtkd/mZ1kV1euQ2d2JN/WxmisJgoEqIKZoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:26:a0:eb:f4:c6:61:e4:06:4e:a3:ba:ec:16:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59a78a8512f909ce6d473252f04cf19e9e68a2a
Validity
Not Before: Mar 29 06:00:41 2026 GMT
Not After : Mar 30 06:00:41 2026 GMT
Subject: CN=3680fdfdd70a7b90d8bddd669b0f8e1db698f3f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:af:26:c2:ef:52:41:89:01:97:eb:df:21:35:
3c:8a:89:8f:c6:3f:41:68:5d:6c:11:3a:1b:61:f6:
3c:88:8e:1d:1d:b6:96:40:d5:5d:39:27:a4:50:2c:
c4:9e:df:ef:f9:80:5a:db:dc:5e:6c:40:27:6b:c9:
0f:b0:41:a1:fc:ca:d8:81:dc:fd:79:59:40:85:09:
08:9f:37:89:5e:84:a3:6a:09:8a:de:65:9a:db:c9:
88:4b:99:7d:55:c2:77:25:ab:0d:13:6a:d8:c9:df:
e1:7e:cb:44:70:67:19:98:d3:5e:cb:1b:ea:90:ba:
1c:41:57:d3:03:07:61:6b:7e:44:f5:fb:17:da:18:
4d:e2:16:01:1c:1e:cb:24:6c:d5:64:3a:62:48:54:
00:e3:8d:99:61:5f:1c:4c:56:30:24:10:58:23:0d:
fc:95:76:0e:5f:3b:6d:21:46:3e:b7:51:c5:9a:74:
d7:cf:bd:91:cb:68:50:27:d7:84:7c:76:4c:e1:d4:
35:11:61:19:a2:e2:0d:19:a1:98:0f:37:f7:06:a1:
5f:14:b3:e9:c6:78:3d:52:85:b5:6f:f9:c9:38:08:
c0:fb:ad:b3:16:85:1a:b3:31:ac:a9:51:09:0d:35:
6b:43:fd:e1:41:70:a1:ad:e9:39:a4:0e:52:e6:a2:
ab:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:80:FD:FD:D7:0A:7B:90:D8:BD:DD:66:9B:0F:8E:1D:B6:98:F3:F7
X509v3 Authority Key Identifier:
keyid:A5:9A:78:A8:51:2F:90:9C:E6:D4:73:25:2F:04:CF:19:E9:E6:8A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:86:43:95:c3:88:65:79:46:60:ef:88:5a:fb:f0:e8:12:7d:
29:92:0c:d9:5f:e4:64:ba:23:8a:12:86:dc:51:20:ac:cf:56:
5d:cd:23:84:aa:e5:38:59:07:85:90:a7:40:9f:28:ae:71:1d:
41:47:b7:fd:ac:04:24:30:85:6e:6a:e8:84:32:ed:53:54:a1:
b7:36:ed:16:fa:9a:c3:cf:92:7f:18:e3:40:bf:8d:b5:cd:9d:
50:93:6d:e4:5f:d1:a0:ed:cc:80:20:ed:7d:ea:a2:83:96:b6:
70:af:03:dd:a3:46:c7:23:90:bf:9b:ec:df:7c:df:6c:bb:49:
49:84:e1:24:c9:e1:a3:0d:72:a9:32:2c:e1:d9:f0:1c:98:38:
c0:da:4e:9e:25:5c:d0:42:83:0c:63:d3:6a:9b:1f:89:15:40:
5b:31:19:71:98:33:81:e8:8a:56:ac:6e:8a:15:af:58:e0:95:
1f:bc:e5:e2:aa:5f:94:bb:35:03:5f:fb:2f:96:b7:e9:93:4b:
56:fb:ab:6d:9f:e2:64:91:8d:13:a6:d1:25:59:79:df:9a:58:
9c:cf:b2:6e:c4:96:9d:34:c6:25:1c:59:39:00:36:0d:7d:a5:
d5:66:6e:fa:62:ac:b6:70:50:97:57:d6:5f:cf:41:94:99:17:
4e:c7:fc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:09 2026 by rpki-client