Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
File: 0pigcUzBvyWsfH8c9sKIbIxhkqM.mft (raw, json)
Hash identifier: ImNpYtlvdYDoxjD8xnqOAD2yWxAqv24SCoV5wyhLLR0=
Subject key identifier: 85:37:27:AA:E1:EF:36:76:B6:DA:19:B0:D2:1C:53:7F:0B:F4:0B:6A
Authority key identifier: D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3
Certificate issuer: /CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
Certificate serial: 019D3977A3325A93ED488983EBFB0A53ACED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
Manifest number: 060B
Signing time: Sun 29 Mar 2026 12:00:34 +0000
Manifest this update: Sun 29 Mar 2026 12:00:34 +0000
Manifest next update: Mon 30 Mar 2026 12:00:34 +0000
Files and hashes: 1: 0pigcUzBvyWsfH8c9sKIbIxhkqM.crl (hash: tD1LEK8LkcokNekBXbWRFxOc3FshrzU1E1hTKnVoVZg=)
2: cMXu7WrvsmC-lThLKVR5Js2GYXY.roa (hash: EpVFpanfzZyTV+MCY5Rt4j7mVt0TS3sr2EacwZSVOVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:a3:32:5a:93:ed:48:89:83:eb:fb:0a:53:ac:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
Validity
Not Before: Mar 29 12:00:34 2026 GMT
Not After : Mar 30 12:00:34 2026 GMT
Subject: CN=853727aae1ef3676b6da19b0d21c537f0bf40b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:df:f0:ef:56:28:59:bc:52:4a:96:5a:15:5e:
46:d1:79:c9:8d:f8:cb:97:5b:a3:ec:2d:fb:91:e1:
ae:47:f0:c4:eb:78:f0:1e:79:78:de:71:f8:36:a5:
66:fd:af:40:c5:0b:f5:b1:3e:25:4b:75:a9:76:84:
62:7a:bd:8a:b3:58:35:bc:2b:71:1b:af:17:cf:38:
0c:10:3f:4e:14:ce:41:5d:23:5b:46:77:ea:4a:99:
1c:7f:02:3d:8d:5a:28:8c:d6:c5:67:35:b5:54:fe:
a9:22:88:93:6f:66:f8:c4:4a:43:82:0c:cf:6d:8d:
4a:cf:5c:bb:96:03:43:c3:4f:1b:86:92:97:fd:12:
b8:eb:02:2f:82:2a:52:9e:ae:99:67:19:c1:fb:37:
fc:37:a3:e9:a7:88:40:44:93:cd:df:79:e7:dd:d3:
95:c1:09:93:72:fe:a5:7f:f4:a0:51:b3:a5:f0:31:
35:60:b9:6d:64:ab:e2:2e:fe:3b:f3:c8:da:1e:13:
86:bd:74:5f:72:98:ad:11:c6:f7:02:fd:26:b7:be:
77:dc:cb:2c:3f:4f:22:11:93:8b:ef:96:34:6d:ec:
48:92:d7:da:09:f4:1c:14:d5:b8:34:b5:88:2f:fe:
c9:39:c8:49:f2:58:b3:8d:23:d3:94:ae:55:bb:09:
3a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:37:27:AA:E1:EF:36:76:B6:DA:19:B0:D2:1C:53:7F:0B:F4:0B:6A
X509v3 Authority Key Identifier:
keyid:D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:1a:83:c7:02:6a:98:4e:63:e6:6e:45:02:57:c1:60:83:21:
1c:a3:63:50:34:78:bc:67:f1:b3:5e:83:3c:b6:54:5b:1f:2e:
ac:80:07:ad:8c:29:64:f9:fb:b0:ac:47:e8:61:ca:1d:7f:82:
a5:fd:ab:6c:04:cf:1a:92:7f:44:8b:85:8b:63:4d:8e:ed:32:
6d:23:04:90:75:f5:bf:d3:f5:45:4a:b1:18:9c:b1:b3:ec:52:
af:74:9f:49:5d:f1:6f:13:82:f7:e0:4e:df:33:bb:5a:18:2d:
ee:a7:a2:0e:d6:02:8b:b1:02:e1:d2:3b:9e:cf:7a:ba:4b:07:
f6:53:86:28:eb:6d:b4:10:2b:f1:eb:0d:94:c2:77:61:4a:04:
b5:28:bb:ef:9b:1e:49:69:c6:d6:c5:72:79:c8:17:88:53:bb:
a3:59:75:d8:3d:9d:8f:21:0b:c5:d8:f7:68:79:1d:a5:92:6b:
81:91:53:e0:dc:60:cd:be:aa:79:0e:07:e1:08:07:3b:db:c9:
73:53:ba:14:03:bb:6d:b8:04:25:86:32:28:af:4d:29:4c:8e:
b1:c3:e4:80:45:7e:51:ba:d0:c2:ed:0f:ae:bc:19:6f:b6:48:
dc:22:a2:47:61:e7:44:a5:c6:3f:f1:e8:bd:72:55:57:17:8e:
4a:29:d0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:06 2026 by rpki-client