Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
File: piqMeh9qTJSeAntTadl9dXbhR_g.mft (raw, json)
Hash identifier: rjEsqym5vC9FqgyQb67GD6oBUUyqxPDXFW5PPsvrVd4=
Subject key identifier: C7:E8:11:4E:8B:67:14:FA:6C:99:2D:93:8B:B2:D6:44:A5:23:8B:00
Authority key identifier: A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
Certificate issuer: /CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Certificate serial: 019D3866453A8E26D85C72039255CB402B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
Manifest number: 0CD3
Signing time: Sun 29 Mar 2026 07:01:59 +0000
Manifest this update: Sun 29 Mar 2026 07:01:59 +0000
Manifest next update: Mon 30 Mar 2026 07:01:59 +0000
Files and hashes: 1: Sr6zqiJ99FeqwYQ28f19iLqoqDg.roa (hash: TL3BARSlFoDZ5ZNhUOEZiPZ9fIVbuOQ2POjRAByuFjI=)
2: TGeDIFBGIW5eczvcX5q3jNyzVtA.roa (hash: DgUdGVPI56iMDORgQFEHjPBMjjgqkbyYMnQ4bBFfVcc=)
3: piqMeh9qTJSeAntTadl9dXbhR_g.crl (hash: 8PYIe3jKrTx+FMDWWNh2k4lK8fa4hktsfmyQj19NjE0=)
4: tVbgzppTtTNiiJtIVClKJaUjV5Q.roa (hash: +w5E9Iu1vewLPX6wA/Khvas6REQH1AClWY9b6rdLWo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:45:3a:8e:26:d8:5c:72:03:92:55:cb:40:2b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Validity
Not Before: Mar 29 07:01:59 2026 GMT
Not After : Mar 30 07:01:59 2026 GMT
Subject: CN=c7e8114e8b6714fa6c992d938bb2d644a5238b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ff:c7:5d:f4:11:1d:97:58:bb:13:e4:ab:86:
53:b6:13:21:aa:bd:c1:ad:67:5f:68:35:d5:08:94:
3c:e6:71:53:b9:78:ff:49:5b:7d:d1:3f:94:ea:9b:
af:f9:11:c1:05:76:4f:0a:38:36:74:75:a0:c8:09:
5c:8c:d0:ce:97:19:89:4c:35:59:f6:a8:a8:68:5b:
42:e7:2a:61:2e:83:f5:fe:c0:97:5f:2c:e2:99:f3:
2e:d5:14:4a:93:1a:62:6e:aa:a2:df:a5:73:82:3e:
5f:a2:f0:ce:a3:10:3c:4c:57:70:64:af:51:39:a5:
67:65:22:89:b9:95:6b:4c:82:a2:86:9c:cf:40:bb:
ea:bd:b7:ec:ca:1f:c5:46:64:de:73:1c:02:3c:10:
0c:13:1b:a4:86:d4:31:06:64:87:f8:e0:ed:6b:d2:
7c:63:26:78:b7:a4:8f:f9:14:bd:bd:02:20:c0:f4:
8b:11:07:d0:1f:17:d1:5b:40:17:f0:12:de:6e:d9:
46:46:18:5e:5e:e1:c6:df:03:d1:10:03:e7:02:06:
7f:da:87:f0:ee:40:2c:42:cd:d5:01:15:4e:4a:a7:
1d:b6:03:77:4f:4f:64:f7:f5:47:f3:17:14:17:d5:
3c:20:6e:ba:29:c7:7f:27:b0:07:bb:63:44:b8:fa:
a2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E8:11:4E:8B:67:14:FA:6C:99:2D:93:8B:B2:D6:44:A5:23:8B:00
X509v3 Authority Key Identifier:
keyid:A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:8d:64:0c:7f:ac:d6:a9:8f:97:01:25:4d:cf:a8:c4:4e:77:
86:d1:bf:37:1e:5d:b0:fb:0b:48:4b:86:b5:19:a6:b4:0d:91:
5e:b5:ca:13:50:5c:26:7c:27:08:b4:4f:3d:0b:f7:c2:73:78:
3b:7f:6e:2f:2d:44:1a:c2:0a:ee:b3:fb:e2:91:b6:7d:89:9b:
63:d5:87:b6:92:7b:d1:48:ec:11:96:a8:db:b1:b4:c3:ac:ca:
c9:d5:8c:78:ae:c1:ea:a2:18:0b:ad:30:b0:eb:81:2d:96:88:
50:af:c1:0e:31:ac:40:58:e0:6c:c2:31:46:76:22:82:2c:82:
95:02:4d:ee:d5:90:31:03:92:c1:ea:02:bd:df:6b:99:73:63:
77:e5:3f:87:0c:8e:07:df:62:f9:44:d5:86:60:76:e8:b0:a7:
6f:28:f7:18:4b:56:e8:c1:3f:95:ab:b5:8c:7a:b4:e8:3c:91:
9a:05:b4:37:3b:bb:3c:46:cf:46:7d:60:1f:77:5b:f0:e8:49:
a3:d3:8e:09:e2:23:46:d1:8a:66:dd:1a:ef:d5:b9:a0:6f:c5:
c4:b7:a0:67:93:e1:f7:42:59:15:ec:bc:b8:d8:3a:11:be:09:
5f:7a:90:af:55:8e:e9:33:d1:a0:23:de:a1:96:5c:cc:18:5c:
00:9e:5d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:44 2026 by rpki-client