Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
File: p4kEQNrxw6w4dz6FIVES90twYjI.mft (raw, json)
Hash identifier: rA5yIt0/hzqlRHdHH4mQrasVmczRpDoGi3t/BEe/DRA=
Subject key identifier: C9:60:A1:0E:D3:0E:2E:27:A4:50:24:00:13:F1:3E:3B:BC:6D:B2:B1
Authority key identifier: A7:89:04:40:DA:F1:C3:AC:38:77:3E:85:21:51:12:F7:4B:70:62:32
Certificate issuer: /CN=a7890440daf1c3ac38773e85215112f74b706232
Certificate serial: 019CE6A4CCB887A7686BF72CE65954A27F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
Manifest number: 1C
Signing time: Fri 13 Mar 2026 10:01:25 +0000
Manifest this update: Fri 13 Mar 2026 10:01:25 +0000
Manifest next update: Sat 14 Mar 2026 10:01:25 +0000
Files and hashes: 1: U3lhosWDCWkOpFdsH0InZo3L2So.roa (hash: cA9YSxfYf8puSlmrAh+xgnlh5hfoxYmLxjTNe6lxvv0=)
2: p4kEQNrxw6w4dz6FIVES90twYjI.crl (hash: +jBk5oimbDOT0KlpE1f2k4dT2b/I31cfDLXFHvSvV0s=)
3: rbySto4bwasyCSyfLG3tTaOVj_s.roa (hash: wd1Ap/uduw/P7yoJlzMsKGRJqc4D/dsTIBcvCHP1qZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a4:cc:b8:87:a7:68:6b:f7:2c:e6:59:54:a2:7f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7890440daf1c3ac38773e85215112f74b706232
Validity
Not Before: Mar 13 10:01:25 2026 GMT
Not After : Mar 14 10:01:25 2026 GMT
Subject: CN=c960a10ed30e2e27a450240013f13e3bbc6db2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:be:e8:5f:90:68:a5:e1:49:3e:6a:13:93:ba:
fe:cf:b7:89:b8:c3:78:85:19:d1:f4:f6:a0:59:da:
da:94:28:45:70:ba:9d:14:4e:25:7e:2f:bd:8c:ef:
32:c5:f7:48:9f:3d:18:78:8d:54:8b:be:b9:98:22:
fd:9a:2c:80:45:73:07:46:78:62:d5:33:b2:07:cd:
02:51:1d:45:23:1b:c3:6f:bf:cd:64:91:ea:ca:47:
2a:99:c9:a2:93:54:34:85:dc:0b:e3:03:4f:15:3e:
f3:91:9a:2c:6d:d3:c7:29:2f:5c:78:2d:c4:b6:24:
73:ce:b2:7e:3a:f8:0f:00:83:4e:02:ba:e4:10:b2:
3f:a7:ea:72:11:24:15:ff:0f:a4:4a:2e:ca:72:22:
cc:66:de:ab:aa:c5:d8:95:5c:22:76:ff:74:cd:c3:
50:14:4c:db:33:f8:65:c8:6f:2b:29:c9:88:05:e4:
44:bc:10:ea:40:25:fa:63:18:bc:e7:52:46:4d:8b:
82:73:e5:69:cd:43:00:62:f2:8c:af:25:1f:b6:48:
a1:a8:38:4e:4c:ba:e7:98:c3:d2:7b:15:ad:7a:fc:
cd:02:e9:6a:4d:71:96:43:18:7a:10:3d:f7:2c:4e:
ee:45:ee:ba:9f:1d:f5:3e:c9:3a:1e:36:28:c4:a7:
0c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:60:A1:0E:D3:0E:2E:27:A4:50:24:00:13:F1:3E:3B:BC:6D:B2:B1
X509v3 Authority Key Identifier:
keyid:A7:89:04:40:DA:F1:C3:AC:38:77:3E:85:21:51:12:F7:4B:70:62:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:fc:8d:4c:89:34:6c:2e:2e:0c:ad:40:7f:ed:4e:c2:15:d4:
41:b6:87:ed:1c:f7:7d:00:04:f2:6c:40:c4:22:71:e2:55:19:
01:66:79:7d:18:67:83:cd:73:1e:9c:3c:e0:cc:30:59:49:5f:
c3:1f:19:db:4e:55:9b:68:84:ab:6f:37:df:ca:ac:7a:c1:f1:
5d:cf:b5:a5:14:e8:16:5c:95:17:b6:12:07:a7:55:cd:d3:d6:
32:5f:b4:f2:96:3c:ee:57:85:b8:e6:6c:23:e8:c1:78:12:51:
2e:32:4b:1e:b5:16:75:77:5a:35:73:ca:9f:a8:2d:04:14:e8:
db:5b:4f:66:64:6d:7a:4c:97:b2:26:16:9b:dd:d1:cc:9d:a3:
c7:fa:e3:c9:d3:6b:a4:fb:e7:55:2b:8c:91:f1:0d:38:39:cf:
19:6e:06:2c:cb:a6:0a:4a:7a:7d:12:91:13:73:fb:c6:b9:ce:
b6:e1:fd:68:51:f7:e0:20:c5:04:df:10:fd:53:ed:95:bc:a7:
d2:12:15:2e:17:13:57:23:84:0f:30:17:8d:fc:94:a9:47:be:
a0:4e:11:a7:32:23:8e:9e:55:2e:dc:b5:91:c5:a4:f8:bc:14:
f9:3a:d7:25:0c:6d:04:e0:6c:a5:75:be:9d:59:74:d6:e5:3a:
df:2c:f4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:44:25 2026 by rpki-client