Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
File: p9ha3isNTsHKCSqOJwPBkgDHLzI.mft (raw, json)
Hash identifier: v/cnehDHuKCAyeryrThgbgFlQHWVsvaRUjWln3mFQoY=
Subject key identifier: 2D:F6:DE:A5:24:24:12:A1:B5:AE:38:99:AD:1B:0E:7F:C2:49:8A:99
Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Certificate serial: 019D378955FE2C9C38079B452755E4E89FC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
Manifest number: 1105
Signing time: Sun 29 Mar 2026 03:00:40 +0000
Manifest this update: Sun 29 Mar 2026 03:00:40 +0000
Manifest next update: Mon 30 Mar 2026 03:00:40 +0000
Files and hashes: 1: SvxwS_lV784DW9bPgSuJYXAnLY4.roa (hash: cRLgycuUHIOemfVnKATCpToT+Luf3V15E0LKGchaIIs=)
2: TfDpwnkDY9DTlAsJc9Iqnduzj8A.roa (hash: XbrnUGWje15/NR9HfumBox3YZkdHMNSMKy7Az9ObxUM=)
3: p9ha3isNTsHKCSqOJwPBkgDHLzI.crl (hash: 9DKqvvqjhqiyYJ6pSuy6DcCO0kUQUk8kyWOHdbwnwU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:55:fe:2c:9c:38:07:9b:45:27:55:e4:e8:9f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Validity
Not Before: Mar 29 03:00:40 2026 GMT
Not After : Mar 30 03:00:40 2026 GMT
Subject: CN=2df6dea5242412a1b5ae3899ad1b0e7fc2498a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:00:2f:7a:c5:7d:96:28:ce:eb:0a:c3:08:17:
f1:8e:c3:91:bc:59:e0:70:72:14:51:62:4a:70:69:
6d:19:a7:4e:2f:89:57:10:ab:5d:76:0a:af:97:1f:
02:54:d4:b2:f7:6c:6a:d8:3d:9c:9c:9c:9b:f6:f7:
5c:2c:79:7a:ec:33:a0:b1:3c:ab:cf:50:00:a9:ef:
16:e4:a4:5f:79:3c:2b:d3:ec:9b:0c:e8:57:05:55:
99:49:f4:4f:24:f8:f4:49:19:eb:50:31:f7:c5:57:
45:19:4b:63:e6:a9:ee:53:26:e7:35:f7:b4:54:48:
40:d1:ec:04:1b:64:1a:bb:0e:dd:8b:cf:11:80:0a:
52:d7:3c:9b:1a:7d:6b:15:59:72:94:09:87:35:7a:
4e:ec:60:72:76:26:59:80:b9:07:65:f4:c3:93:5b:
b3:bc:e8:4d:50:e5:fb:da:36:15:b0:0b:29:17:6d:
fe:af:bb:67:ed:70:9f:05:6b:60:a5:95:92:0d:30:
6b:c1:ce:7a:fe:b7:7f:cb:2f:e8:b3:5e:04:83:42:
56:f1:51:5b:c9:8f:01:02:8a:f3:c2:1b:c4:40:4a:
9d:d8:e0:57:11:c0:06:fe:14:b2:01:7e:c4:f6:92:
84:bf:6a:de:90:6b:e0:3c:ac:66:ad:9f:ca:da:1b:
e3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F6:DE:A5:24:24:12:A1:B5:AE:38:99:AD:1B:0E:7F:C2:49:8A:99
X509v3 Authority Key Identifier:
keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ea:1d:1c:45:01:c4:de:cb:bd:53:81:93:fa:65:b7:6e:09:
46:a3:0a:dd:4f:c2:91:1b:87:7e:95:7a:57:42:b6:c4:09:59:
fa:32:33:95:ad:f7:f6:d1:67:67:2c:f4:9a:a7:e3:f1:61:f4:
bd:71:76:37:53:16:8c:e8:fe:a7:dc:71:ba:9e:3f:a2:25:30:
d3:a4:ec:98:fd:3e:96:96:e6:1d:d6:a4:1a:8f:a9:ca:0c:31:
f3:c8:a9:80:95:8b:db:a1:23:59:83:50:b1:2e:9c:37:de:40:
1b:b7:04:66:f3:69:30:f5:24:8a:c6:1d:e3:b0:70:5a:7b:2e:
93:86:c4:2f:13:9d:81:cb:92:84:6b:a5:67:93:71:6a:0c:0a:
b7:7a:bf:59:60:f9:4c:85:8c:ec:bf:47:c1:bc:82:8a:7b:c2:
5f:80:99:98:7d:77:b1:fe:7e:1a:b4:2e:76:7c:6d:4f:dd:23:
cc:f6:38:65:1e:5c:94:24:ff:8f:de:53:81:79:97:b7:06:2a:
8c:12:d2:3e:f2:2a:46:d5:8e:42:7b:ae:ad:70:14:2e:89:29:
e7:0d:d9:7c:65:6c:5a:e3:fd:a2:c7:a2:27:77:9f:a4:7e:26:
90:c6:ae:68:d7:3d:94:97:97:05:bd:84:be:89:58:8a:b1:07:
28:c2:9c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:44 2026 by rpki-client