Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
File: pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft (raw, json)
Hash identifier: mnTiJY6/BiBSjYnCmDJr0O3Wea7bwucmvH3opyvECDw=
Subject key identifier: 4F:7C:7B:D4:16:2D:EC:FD:DF:BA:20:07:C9:71:CD:2B:B5:A1:80:46
Authority key identifier: A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9
Certificate issuer: /CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9
Certificate serial: 019CBE83C7CD68C84898B20D1B73115250CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
Manifest number: 17E1
Signing time: Thu 05 Mar 2026 15:00:33 +0000
Manifest this update: Thu 05 Mar 2026 15:00:33 +0000
Manifest next update: Fri 06 Mar 2026 15:00:33 +0000
Files and hashes: 1: RI1PUJj0Q_MD3P8uweukuXuYhlU.roa (hash: Udb4Yel6QV6x+EojTVD0SPU2vkANJh/DkSOzlaEFuOQ=)
2: pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl (hash: 6i2W7nki3/BGw2JxrLSWam4tHDAaotzx7YPriaRyObc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 15:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:be:83:c7:cd:68:c8:48:98:b2:0d:1b:73:11:52:50:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9
Validity
Not Before: Mar 5 15:00:33 2026 GMT
Not After : Mar 6 15:00:33 2026 GMT
Subject: CN=4f7c7bd4162decfddfba2007c971cd2bb5a18046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:68:c4:a0:5e:bc:50:24:56:fb:5e:cc:e4:13:
09:3e:42:da:98:15:05:a9:a0:1f:53:7c:07:0a:2d:
e3:3e:aa:ba:26:f7:99:04:d8:22:a7:6d:16:c3:eb:
fc:c7:89:41:03:d4:f7:de:ba:68:24:41:5b:42:f6:
0a:d1:b7:12:d2:0b:19:53:5b:c2:f5:af:1d:7f:7e:
41:79:ee:1e:15:98:8f:16:21:d7:60:ff:25:c5:65:
b9:f2:0d:c2:7b:fe:47:99:21:06:1e:55:bd:8d:da:
03:19:69:94:16:63:b8:e9:b2:5a:29:32:38:a0:c6:
1a:c8:4e:11:52:95:26:64:44:85:4e:c3:f8:fd:3b:
d5:eb:64:10:66:07:ce:7e:86:e7:7e:53:4e:62:3d:
cc:f1:d3:f8:c4:c7:60:89:78:7c:8f:59:63:ff:12:
c8:e1:d7:a0:57:82:a2:fd:ca:e2:b9:f0:dc:78:0c:
d2:24:fb:d8:98:1a:a9:0f:be:e0:38:1f:2f:81:30:
93:72:0c:2f:c9:57:22:57:c6:a8:cc:8b:d5:6c:51:
f5:bd:03:e8:e8:97:c0:3f:a2:4f:3d:3f:86:99:d3:
9b:07:27:ff:27:0a:81:84:4c:94:3c:c4:b0:d7:e4:
5c:69:bd:12:7f:5c:8c:3d:0f:cb:e4:5e:85:c7:6e:
67:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7C:7B:D4:16:2D:EC:FD:DF:BA:20:07:C9:71:CD:2B:B5:A1:80:46
X509v3 Authority Key Identifier:
keyid:A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ff:1e:dd:cd:5d:b7:3c:3b:40:ad:c2:5e:73:6d:c5:cb:b1:
be:29:5f:44:6d:77:a4:02:0b:a7:5f:f0:9d:78:a9:3c:5c:74:
22:0f:c5:ec:81:54:96:39:5e:53:42:49:76:73:7a:f9:f5:a0:
db:47:cf:19:d4:33:71:74:b7:42:d4:ef:06:a7:a0:2d:b8:05:
00:f8:7b:77:58:de:07:98:f8:f4:25:2a:26:b3:c9:8b:c5:4e:
f6:b1:3a:24:7f:d9:94:35:74:13:46:3b:af:5c:67:1b:3b:ee:
68:6e:89:e8:2f:26:e5:cf:4b:44:ec:ba:b5:4b:12:d2:04:c8:
ce:db:49:af:96:b9:57:b7:58:fc:da:36:5a:1b:4d:ff:b2:5d:
96:e4:0a:72:98:76:3b:25:9e:66:2c:e3:39:df:c2:6b:48:93:
d6:a3:58:60:0f:95:af:03:0a:0a:e9:ff:6b:b9:18:b9:c6:01:
2c:2c:dc:00:09:aa:9d:c6:98:c9:c3:16:83:6c:5e:c7:56:5e:
39:ef:d5:fa:9f:e5:bb:24:0b:48:f6:fe:cf:dc:2c:fe:65:b1:
1e:8c:5e:bf:66:14:a6:a7:0f:6d:9e:b3:f0:6e:0f:9d:ee:04:
b8:98:a8:aa:d0:90:3f:00:cb:10:e3:7a:fb:98:2e:43:42:7d:
cd:4d:36:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 23:41:14 2026 by rpki-client