Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
File: pZrIMj67a-IPronQmMokE4-MkAU.mft (raw, json)
Hash identifier: 8daPVFYhDs+5eiOOx90VO+Je4BNjFKl7FOaekRj5i4Y=
Subject key identifier: 72:65:EB:DD:43:AE:0E:7D:89:54:39:FE:6D:FB:F0:6B:A1:C8:5D:A2
Authority key identifier: A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
Certificate issuer: /CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Certificate serial: 019D3789975F7CD03B0A082D3D8D3A4420A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 03:00:57 +0000
Manifest this update: Sun 29 Mar 2026 03:00:57 +0000
Manifest next update: Mon 30 Mar 2026 03:00:57 +0000
Files and hashes: 1: QPbL87CmRT1ll0u9cNfWuv1QlyA.roa (hash: 8Z1WQs/0Meh/R2Q6A9r9cYWb2lmAvHlCtOd8UxHsBvk=)
2: pZrIMj67a-IPronQmMokE4-MkAU.crl (hash: Zpvc7cRugOAbtTXND6tBPLuxAAMfDaEUGwX1GLL6ouE=)
3: zA-JAsK-5Dim3-SrX670VbjLnXQ.roa (hash: 8KB8obCvtfReso5cwgxqXrjE6TJfCW9MSYEyqCiQ9Zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:97:5f:7c:d0:3b:0a:08:2d:3d:8d:3a:44:20:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Validity
Not Before: Mar 29 03:00:57 2026 GMT
Not After : Mar 30 03:00:57 2026 GMT
Subject: CN=7265ebdd43ae0e7d895439fe6dfbf06ba1c85da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a6:89:95:50:c4:d1:11:bd:94:25:8b:92:e9:
40:a7:ae:fe:f6:ba:4b:0b:03:62:3a:86:19:b1:b5:
f1:d6:e5:7d:8f:0a:4c:c2:9d:6d:fe:e7:f6:24:e5:
da:1d:cf:15:69:3d:7f:4c:82:ff:9a:e3:cc:f0:17:
a4:25:01:80:4d:0b:4e:03:38:28:b2:5b:55:f9:ba:
8f:a1:4a:ce:29:7a:cc:65:eb:ec:4d:f5:1b:95:36:
1c:e7:db:a6:13:9f:c7:35:51:f1:09:b2:e5:1a:c2:
89:7b:5e:9c:35:fb:53:8d:bf:eb:88:25:62:ec:b4:
a5:98:7a:b2:e7:e3:be:d6:7e:fa:19:5c:c6:34:19:
ac:e3:f4:0b:f3:dc:f4:9f:3e:8f:47:97:94:80:7e:
b2:87:56:53:1d:0e:4d:32:57:35:1a:12:d4:33:00:
ad:7c:b1:23:1d:8b:f0:22:b9:8f:40:73:fa:c6:b1:
c4:68:8d:a2:33:3b:8f:cc:e2:48:29:61:0c:fa:8a:
2e:31:09:0a:bb:c7:cc:9a:67:70:0d:1e:58:be:8a:
80:d7:a2:65:95:7d:09:52:b5:7c:9b:0f:4b:e1:77:
4a:06:ac:ae:8b:c3:6d:af:43:16:0e:03:e6:80:ee:
1e:a4:69:24:3d:93:d2:10:41:04:38:01:77:82:13:
68:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:65:EB:DD:43:AE:0E:7D:89:54:39:FE:6D:FB:F0:6B:A1:C8:5D:A2
X509v3 Authority Key Identifier:
keyid:A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:5c:e3:9d:45:0c:b0:3a:b4:d1:24:01:6d:f1:19:93:27:2c:
7a:1b:ae:b1:ee:55:b1:51:01:27:31:3f:93:5f:a8:15:d3:3d:
d3:61:3c:97:16:18:d2:be:76:a1:2b:65:c4:13:7c:03:7f:ee:
fd:7e:a4:b8:86:b1:6c:25:ad:75:a0:5d:73:6f:83:8f:d0:8d:
21:d7:5f:8d:19:a3:b5:09:a6:7d:66:0c:74:66:b1:48:b4:89:
c6:ba:ce:d4:60:cf:b9:a7:96:4a:f4:22:04:0c:8a:18:6e:89:
13:8c:f5:cb:97:4f:70:1d:52:88:97:0d:7b:ba:a9:84:ad:0c:
fa:09:08:79:24:50:b6:fc:07:b1:b2:76:68:14:93:5c:57:61:
ae:19:31:a2:79:ac:27:26:85:a1:31:9e:e9:1b:2e:c5:9c:1b:
a0:c5:ea:40:30:e7:a3:d5:3a:89:12:22:61:fb:36:bd:9c:8a:
49:96:41:6c:0d:ee:3e:23:b7:a6:c3:e0:1b:d0:f0:93:75:c9:
cf:53:8d:df:1d:76:1a:17:49:47:b1:11:b5:da:72:fd:40:b4:
27:c9:fc:d3:61:bb:60:65:56:ec:7c:98:bc:5e:ba:c0:c3:ae:
fd:34:9e:64:12:91:fa:01:0f:21:d5:64:4b:72:a6:08:e9:ab:
b1:8a:3f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:01 2026 by rpki-client