Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
File: pkDHUev7SAfYRiLoBss9C53YEGk.mft (raw, json)
Hash identifier: WwBjj4c73KYIG/NRo6CUm31S64QjAZYAIdOyQTJ/86s=
Subject key identifier: 35:BD:7B:8F:17:93:8B:20:31:08:F9:FE:52:40:D3:F7:81:DF:09:9C
Authority key identifier: A6:40:C7:51:EB:FB:48:07:D8:46:22:E8:06:CB:3D:0B:9D:D8:10:69
Certificate issuer: /CN=a640c751ebfb4807d84622e806cb3d0b9dd81069
Certificate serial: 019D390A675146223EA5AB0D7C44F67FA024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 10:01:16 +0000
Manifest this update: Sun 29 Mar 2026 10:01:16 +0000
Manifest next update: Mon 30 Mar 2026 10:01:16 +0000
Files and hashes: 1: TEyzbeE0RPVawr5UzZUBwB5xhtc.roa (hash: bkckZhvDpq39zxJxt09vjj1edwBpMlUWDqgAAFwbo24=)
2: Xdnvns2DRqazD189iM-2jNt4vZo.roa (hash: UAbhMlaae4Ik19w+3ZsFKwWR5TNpwZbcrBfdZMwkITk=)
3: pkDHUev7SAfYRiLoBss9C53YEGk.crl (hash: qdMRNVHIP2M4Qw2OIm+V4sqwrzpa865EACJW9/rlrFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:67:51:46:22:3e:a5:ab:0d:7c:44:f6:7f:a0:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a640c751ebfb4807d84622e806cb3d0b9dd81069
Validity
Not Before: Mar 29 10:01:16 2026 GMT
Not After : Mar 30 10:01:16 2026 GMT
Subject: CN=35bd7b8f17938b203108f9fe5240d3f781df099c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e8:2b:45:14:a8:6b:77:3c:e5:3d:62:f8:70:
49:47:1f:94:04:b8:91:08:f3:27:fa:37:02:f2:ed:
ad:36:39:34:00:16:6a:66:59:0a:d3:d1:f9:0f:e8:
97:88:bd:2b:44:f9:3c:cc:78:6b:a0:a3:e7:0d:54:
a9:61:b3:91:68:2c:40:94:d0:be:6b:78:e7:cf:ae:
2f:c2:4b:e2:e1:98:87:14:2f:bf:ed:fa:80:ee:e1:
0c:f2:81:00:ca:21:b1:b4:93:38:ad:66:66:39:14:
58:11:d7:df:21:5c:21:f4:b2:61:dd:bc:e4:5b:42:
99:48:2e:60:b1:31:36:ad:44:84:b2:ad:40:7e:fb:
ce:bd:1d:1d:56:fe:8e:d1:44:5a:55:f3:3d:a8:e1:
eb:87:67:42:c0:8a:04:04:11:b1:cb:32:79:26:2e:
1f:be:24:98:8d:3a:d3:b8:0b:9a:67:24:26:f7:a7:
6c:92:c9:81:ce:f8:09:a9:9f:33:f2:27:0f:a4:2d:
78:ee:e9:c4:00:8f:fb:7d:54:5f:ac:56:9a:10:4f:
0f:d0:4b:c2:5c:f5:59:59:e5:36:06:fa:bf:03:74:
95:84:99:78:2e:81:d6:f8:4f:b2:64:d2:d4:43:49:
1d:09:6a:9b:09:bc:fe:39:73:38:1e:4f:50:9a:cd:
46:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BD:7B:8F:17:93:8B:20:31:08:F9:FE:52:40:D3:F7:81:DF:09:9C
X509v3 Authority Key Identifier:
keyid:A6:40:C7:51:EB:FB:48:07:D8:46:22:E8:06:CB:3D:0B:9D:D8:10:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:8c:d8:ce:ab:27:39:cb:3f:24:50:a8:f6:ee:08:00:1d:fc:
8d:26:6d:f2:a8:a9:b5:e8:f9:da:24:87:1c:32:c6:65:ae:4b:
03:29:66:d6:5f:bc:0e:e5:2a:db:d4:b4:c0:47:21:a6:57:fd:
a7:57:77:8c:ba:f5:46:7e:5a:a3:85:4f:a9:5f:c2:2d:8b:65:
45:90:6d:66:f7:de:86:f1:ef:4b:8a:d4:db:c8:e4:cc:71:b7:
61:f9:62:55:37:4d:d9:bb:7b:54:a5:e3:f6:20:77:3c:17:1a:
b8:73:85:f1:30:68:93:94:79:a8:0a:dd:c3:30:40:1d:4a:0d:
10:74:33:4b:2f:c2:98:8f:72:8b:dd:de:99:cb:e8:45:a7:1d:
34:0b:71:84:92:a6:f5:60:38:4c:18:9f:37:3f:94:09:cf:d0:
33:41:c3:04:2f:63:a8:42:02:78:89:6b:50:ab:30:4f:d4:c9:
32:e0:1e:f9:1c:11:ed:23:3f:bb:b2:e4:ba:ea:0a:41:b9:44:
62:ac:28:fd:e1:95:ed:26:25:6b:ad:06:72:de:59:b0:27:b6:
32:b5:75:c9:06:fe:1b:8b:27:08:bc:b2:82:7f:91:3c:8f:25:
0e:66:62:45:77:c1:43:23:7d:7e:6a:73:e4:e1:0f:d6:b6:e9:
a5:be:63:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:56 2026 by rpki-client