Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
File: pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft (raw, json)
Hash identifier: 2sdmy0iKj0AXRxrKZZAKTO4NNflM8r7QHDgB9u+lDDY=
Subject key identifier: F5:1A:94:E0:27:80:0D:56:25:93:61:D0:A3:20:5C:23:13:17:80:C2
Authority key identifier: A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9
Certificate issuer: /CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9
Certificate serial: 019DA830D4F14E9F12A2A8328B9FA46DB932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
Manifest number: 185A
Signing time: Mon 20 Apr 2026 00:01:05 +0000
Manifest this update: Mon 20 Apr 2026 00:01:05 +0000
Manifest next update: Tue 21 Apr 2026 00:01:05 +0000
Files and hashes: 1: RI1PUJj0Q_MD3P8uweukuXuYhlU.roa (hash: Udb4Yel6QV6x+EojTVD0SPU2vkANJh/DkSOzlaEFuOQ=)
2: pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl (hash: hc8H/jeX9PguEKWAGCLkj0iljgT0DThlVII6a40/cSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a8:30:d4:f1:4e:9f:12:a2:a8:32:8b:9f:a4:6d:b9:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9
Validity
Not Before: Apr 20 00:01:05 2026 GMT
Not After : Apr 21 00:01:05 2026 GMT
Subject: CN=f51a94e027800d56259361d0a3205c23131780c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:07:33:7f:8a:e3:b0:98:f6:a0:73:57:15:c0:
02:19:f6:96:0c:1d:94:70:b2:13:d0:28:f0:8b:40:
43:ee:af:5c:5f:e8:d9:d2:ef:67:4a:f5:54:e1:98:
8e:f8:dd:cc:6e:c6:d2:37:54:6f:8f:72:06:55:cc:
d9:10:50:44:70:9c:39:d3:b6:17:33:b0:50:71:9c:
db:28:25:23:fe:45:ab:66:96:f3:a6:20:36:35:5b:
2f:56:bf:1c:da:35:6d:b8:c3:a8:e7:aa:06:a0:3d:
7c:ca:9a:71:87:6c:ef:72:ee:a1:c2:47:4b:c6:2b:
b5:b1:ff:82:c3:72:d4:40:24:ee:38:fd:79:74:b1:
a5:62:ce:ad:57:06:11:eb:d3:fd:c0:09:2f:c4:73:
8d:f5:e6:49:b8:bd:94:27:38:3e:f3:dc:ea:13:3d:
06:b8:6b:06:73:da:b1:9d:ad:56:37:f3:0c:98:8c:
e8:a7:67:dd:18:c0:81:54:86:9f:4b:a0:c4:61:65:
a3:a1:49:30:50:b1:73:99:d0:e9:d0:4d:af:24:b1:
3b:b4:cb:6e:5e:8d:e8:12:96:63:c6:1d:3b:70:70:
8a:68:e2:18:2a:e9:e3:f1:cd:a5:9c:0c:f9:5a:59:
8f:f5:eb:40:0c:fc:e4:97:06:12:d1:dc:ee:70:6c:
46:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1A:94:E0:27:80:0D:56:25:93:61:D0:A3:20:5C:23:13:17:80:C2
X509v3 Authority Key Identifier:
keyid:A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:4d:36:11:fe:c8:75:fc:b6:27:22:1f:96:60:aa:1b:10:1d:
7a:ab:7e:b4:c3:03:0d:6d:39:08:4d:63:53:3a:b0:c1:5f:41:
26:75:41:a9:af:7a:9c:21:36:fc:a6:42:43:c1:52:89:62:b6:
60:d0:e2:6d:5f:09:e6:4f:d9:87:68:cf:77:cb:3a:7e:db:5d:
39:69:1b:98:ac:89:9e:f9:b9:ea:11:42:c6:79:ab:7e:56:d4:
04:80:46:b1:60:9b:9f:ce:9f:db:96:a2:4e:af:85:cd:03:e6:
58:61:d1:b7:81:ca:d2:44:7a:fd:a0:8f:06:be:6e:c0:cd:5b:
7d:31:75:ab:ee:a2:70:2a:ba:99:cc:5c:14:50:2f:3f:04:3c:
7b:f7:30:e0:57:52:97:d2:b0:85:f7:2d:76:c9:1a:7c:56:a3:
7d:2a:7d:1c:59:d3:ac:ea:68:0f:a9:43:ce:a9:97:9e:e9:7c:
5f:45:75:b8:f1:23:b7:f5:43:15:63:0e:2f:4c:8a:7e:47:4c:
e0:0d:3f:22:79:72:85:ac:fd:5e:b6:55:e4:1a:28:65:73:6d:
c1:9a:9c:b0:d8:5e:8c:c2:a4:ae:d8:05:ea:68:40:68:28:6c:
ff:87:67:e3:c7:69:b4:73:48:60:e2:d2:f1:99:73:17:14:9c:
21:9b:80:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 03:26:11 2026 by rpki-client