Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
File: pX1M_mD4owpND_lLlOut_IjJrBE.mft (raw, json)
Hash identifier: IyeivYJqN7DARFEkII1PfKhQ3Y+HwlQzt0g1yw+mQ9k=
Subject key identifier: 82:FA:12:D8:9C:9C:17:C5:36:2B:DF:AF:58:82:28:0B:44:E9:26:85
Authority key identifier: A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11
Certificate issuer: /CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11
Certificate serial: 019D37F737D2DF430B828E27B502FFF1DF20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
Manifest number: 0F60
Signing time: Sun 29 Mar 2026 05:00:41 +0000
Manifest this update: Sun 29 Mar 2026 05:00:41 +0000
Manifest next update: Mon 30 Mar 2026 05:00:41 +0000
Files and hashes: 1: 1y-vwZVrMYSQ5PEHPoi2QvehQzI.roa (hash: cYggAnbxJcT3dfayKBFM1pT3DCCSeOQKuJH//n4lQos=)
2: pX1M_mD4owpND_lLlOut_IjJrBE.crl (hash: SLJX7x+y0MQa6ceeTt8JoCWG8dnJmLZFuEZGAAvJXxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:37:d2:df:43:0b:82:8e:27:b5:02:ff:f1:df:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11
Validity
Not Before: Mar 29 05:00:41 2026 GMT
Not After : Mar 30 05:00:41 2026 GMT
Subject: CN=82fa12d89c9c17c5362bdfaf5882280b44e92685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:df:60:53:bf:13:b7:e3:89:28:f7:5f:40:57:
1a:58:d2:a8:80:05:ae:1f:75:85:be:6b:80:2f:2b:
36:9b:12:c4:39:ac:b5:26:19:9e:1e:3b:15:59:c3:
4a:a0:56:6e:da:73:f4:ba:e3:1e:d6:22:12:23:5c:
d4:58:4f:73:72:cf:a8:be:fb:1c:0a:3c:1d:c3:dd:
1f:da:17:39:33:d1:df:54:05:1f:0b:8c:ff:33:00:
41:d5:52:54:43:96:ed:bb:0a:f9:91:43:96:7f:2d:
1f:d8:45:85:60:18:4d:55:b6:4c:2a:85:7d:af:93:
2e:5f:06:4e:6c:22:c5:3d:ff:e3:d2:09:90:f8:81:
33:8e:36:3c:73:8a:87:2e:e4:79:b6:dc:15:63:3d:
29:59:18:f1:b2:c3:7d:a6:5c:4b:86:ea:cb:f1:88:
5c:99:61:88:8a:0d:66:2c:c4:95:0e:24:e9:e6:16:
ed:e8:ca:6c:86:45:6e:62:e1:12:f9:20:15:6b:81:
71:a5:9a:37:b6:09:a0:42:6f:0e:dd:16:fc:25:5a:
94:5d:86:1a:6c:b8:9c:92:b9:ba:f9:20:37:21:de:
4d:85:61:f8:32:64:58:25:09:bb:51:5f:82:df:5b:
71:8d:fd:b1:58:7b:34:6b:a3:a4:79:3e:00:f0:1b:
2c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:FA:12:D8:9C:9C:17:C5:36:2B:DF:AF:58:82:28:0B:44:E9:26:85
X509v3 Authority Key Identifier:
keyid:A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:4a:e1:66:4a:3c:ed:33:10:ea:da:a4:ba:20:62:4d:a8:8d:
89:88:ea:a7:01:f1:d3:62:9f:2a:c2:da:20:f1:13:bf:a6:47:
1a:92:ab:ae:d6:a3:56:e3:85:9a:7d:58:0a:71:6f:6c:1d:b5:
0e:59:92:f5:1f:54:83:a5:ab:ac:e2:75:3c:44:2c:64:04:b4:
2c:bb:09:45:87:f6:40:76:78:f8:bd:4a:3c:ba:b3:ab:18:f0:
4a:d5:d4:38:d4:28:c2:a4:b4:a4:e9:33:e9:5c:e4:64:c5:cc:
af:99:da:a1:27:b2:34:e7:33:46:cf:f8:f6:87:24:80:f7:8a:
5f:24:b1:9d:0a:17:9d:af:ee:ed:d1:0e:58:f2:05:ea:09:70:
aa:1c:25:3f:f5:8c:87:b1:c1:4b:3d:f5:4f:35:aa:3a:a3:57:
42:ab:36:e6:aa:24:93:7d:9f:32:f0:55:08:ee:55:a8:22:58:
ea:f1:c1:2d:c9:75:66:e7:3a:7b:cc:fb:51:0d:ca:0f:bf:2c:
a8:ab:f8:13:03:ef:34:a2:f6:09:42:ea:07:5d:a1:b1:80:d3:
dc:47:fc:b2:42:dd:f9:be:4f:bf:a2:ca:b3:f8:a3:21:27:43:
80:df:e1:4c:ec:54:1b:d3:46:13:12:25:38:f1:b8:af:db:af:
aa:b5:60:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:49 2026 by rpki-client