Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
File: p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft (raw, json)
Hash identifier: lzq45qU/8ZpaQ49ksmiFD+PJdv/XSVBcxN7hVsTEHxw=
Subject key identifier: BD:D2:6A:04:08:0F:78:F9:DC:C4:F7:4A:C3:E1:A7:95:E2:47:8B:98
Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Certificate serial: 019CE0D972BA164A3C28580DC569A3423D06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
Manifest number: 1869
Signing time: Thu 12 Mar 2026 07:01:12 +0000
Manifest this update: Thu 12 Mar 2026 07:01:12 +0000
Manifest next update: Fri 13 Mar 2026 07:01:12 +0000
Files and hashes: 1: 1pNjMggR1gYBaftihFMx8w1rMhE.roa (hash: PULZtkL3C3zDaM8kMCwf21Yb0UEXTXjrHY8fh/1iHFc=)
2: BH6ERj2EK1Gwrfo5u9qhco6CgYM.roa (hash: HBZO37pz26No65orIL67yFB8MvBngZCIHxDCzlTkjJc=)
3: C-hiHL_GzbD5a_s8Sar_hmP-Vyw.roa (hash: hyN/ftVawg2QF6kkYn1VlnFyi9JVIm7PN5l5sJloEAU=)
4: Wc1vP6_SY_r3YRWRNCEYvgmMIEU.roa (hash: DTSBhlEZWBIgKWeFJQfKtS9sYqKdFbuY0AXldEHxAZ4=)
5: eo5H4o3ZZ3iXbDapo6cBEE7NS6M.roa (hash: X2Eq1j8xxP8127RbRQQH82ZQaRO794u+GIRwZ/G/1eM=)
6: mK3OtIQBuc5E_Igw6gzRMSv2d3c.roa (hash: DMwAvTUmsGM0zrMHUTJobXjFU2+cLUzH4tvhaMwkiwc=)
7: nUVyELULlyE5fyAdMqySIUcD1Kg.roa (hash: 7IAppAs9x9RzUF7a3+rIPbPjrq3AFXyVcrF/g7C0QPU=)
8: p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl (hash: vBd4IgMR85+6KCDQxxOr0N3G0RkcgKg53jqP5Xz3afk=)
9: taXjOwEPFjUj9cMa7Gq70xb_Xw8.roa (hash: amO1PgtWxEDUcYd/ZIcEzv+wLt54N13hJwoq+TKEsJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e0:d9:72:ba:16:4a:3c:28:58:0d:c5:69:a3:42:3d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Validity
Not Before: Mar 12 07:01:12 2026 GMT
Not After : Mar 13 07:01:12 2026 GMT
Subject: CN=bdd26a04080f78f9dcc4f74ac3e1a795e2478b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2f:ce:d2:88:b4:0b:2d:b3:6a:bf:51:4f:65:
c0:f5:3f:38:c8:08:25:16:cb:bc:6a:c0:95:8d:e3:
ca:68:dc:1c:9b:f6:e4:24:a1:f4:ae:49:56:a0:ec:
52:b9:83:ec:f1:df:83:ea:b6:ea:d5:ec:11:f1:81:
1c:53:13:13:f5:59:d2:40:5a:a6:ff:0c:91:e4:47:
11:3d:2a:75:61:2a:9e:c0:aa:58:74:57:e3:ae:7f:
a3:7e:8f:35:f5:75:be:e9:ef:5a:a5:37:18:08:e1:
6d:97:3f:6e:ea:a6:1e:38:dd:dd:cd:5a:72:f7:5c:
aa:f2:0f:e6:8b:d2:ea:ee:bd:eb:4d:f1:80:32:ce:
88:f5:94:6d:45:c1:69:98:8d:6c:c5:76:30:85:db:
dd:ce:fd:cb:53:31:a3:a9:cf:6b:f3:b0:eb:a4:0d:
76:46:2f:d8:07:f6:19:50:7b:87:22:1b:62:f8:de:
a2:07:cf:dc:8d:b2:37:93:77:ac:0b:4c:2a:9c:11:
76:78:ec:9b:86:00:da:2b:a7:20:e0:f7:ae:bd:9f:
bc:80:28:45:a8:36:48:d4:71:b0:64:4a:10:6d:1f:
5f:84:a0:4b:1b:42:69:39:48:ad:1f:02:76:ec:f2:
ea:19:29:35:24:ea:e4:3a:28:66:eb:83:55:ad:c2:
28:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D2:6A:04:08:0F:78:F9:DC:C4:F7:4A:C3:E1:A7:95:E2:47:8B:98
X509v3 Authority Key Identifier:
keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:06:21:b6:71:b5:b6:52:c7:5c:56:34:b5:ba:7c:ee:cf:16:
2f:7d:53:52:d4:f9:ab:24:ed:86:f3:e8:7b:5d:3a:53:f8:77:
03:ce:73:a5:f1:82:65:1b:a9:22:5c:b3:6f:5f:5f:4f:f7:a6:
f6:72:4b:cc:f1:e4:49:35:0f:f4:5d:15:0a:09:05:b9:ba:97:
0d:31:1e:77:37:d0:13:e0:f4:24:9c:73:a3:99:5e:8a:d4:97:
55:f6:10:b0:32:c0:00:f1:d4:b7:dd:4e:d1:5f:d9:73:79:07:
6a:44:79:cc:0e:78:fd:c4:85:0b:1a:84:9e:9a:71:0e:bf:fe:
be:12:90:b7:55:56:6e:c3:a0:8d:3b:34:96:13:f9:84:de:ec:
80:6f:a6:3d:a2:c9:fc:52:64:52:a3:c0:88:26:13:a4:21:10:
23:85:1b:d6:7d:0f:07:06:08:fa:78:13:90:00:ce:18:bf:d9:
5a:84:40:6d:0c:fc:fe:d4:8a:6b:33:ea:36:d3:06:99:93:31:
10:3b:d1:8d:f2:d6:91:39:81:66:00:e8:df:0c:95:65:97:7b:
fc:e0:bc:7b:41:74:33:4c:27:51:e2:ff:df:a8:17:d9:26:e4:
16:1a:fa:ed:51:cf:3e:3a:2e:4e:86:25:5b:dc:b0:b7:18:dd:
6b:0b:9e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 17:09:32 2026 by rpki-client