Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
File: p0NjdfsDInVrVdr_ZOJl73LA2lI.mft (raw, json)
Hash identifier: 3xfW97kECIvPnVg2YE4As4o4Q5lRiI1+4Zjf0jJrLrs=
Subject key identifier: 02:C7:94:DF:82:6D:90:69:2D:71:E3:56:48:C4:55:F0:C1:86:CD:69
Authority key identifier: A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
Certificate issuer: /CN=a7436375fb0322756b55daff64e265ef72c0da52
Certificate serial: 019D38D317AA7E7621B7EE23899745063629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
Manifest number: 1898
Signing time: Sun 29 Mar 2026 09:00:51 +0000
Manifest this update: Sun 29 Mar 2026 09:00:51 +0000
Manifest next update: Mon 30 Mar 2026 09:00:51 +0000
Files and hashes: 1: 9JSd5mLZQxTENPBnyy1O2LgxykM.roa (hash: P3ZS+YpFvi1dhS7gQBkLkLcByo9/L4kNrUtrMJzqYV8=)
2: A9RfQpBK4Lmi6Tmx0CejQJ3i_6g.roa (hash: /ml6WX65AwyNhLXMSn8MV5ORhWu+aykCZ+qTwwwxX9g=)
3: p0NjdfsDInVrVdr_ZOJl73LA2lI.crl (hash: 55KNMyn5G0Uq6mbqc/dtLoE1CxXhURQFznoGMbnQUgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:17:aa:7e:76:21:b7:ee:23:89:97:45:06:36:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7436375fb0322756b55daff64e265ef72c0da52
Validity
Not Before: Mar 29 09:00:51 2026 GMT
Not After : Mar 30 09:00:51 2026 GMT
Subject: CN=02c794df826d90692d71e35648c455f0c186cd69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e6:62:73:f1:ea:2f:93:ef:ba:40:83:21:d1:
11:68:d9:94:5e:b1:cd:77:e3:8f:db:dd:59:ea:35:
ce:18:25:08:91:4e:ca:43:b0:cf:f2:70:ae:a1:d8:
f0:77:29:20:97:0b:1b:29:9d:28:31:10:1e:85:94:
c1:48:8a:87:03:46:da:ef:4a:8a:d2:91:01:b7:9d:
f8:74:02:e3:f7:19:e7:03:03:0b:af:82:7c:48:41:
ec:f9:41:fc:ca:35:fb:16:05:b3:89:3e:59:e1:aa:
a1:c4:d8:a4:bc:69:ff:9e:5f:58:f9:98:39:f3:f6:
d5:33:c0:d8:bb:de:f6:3b:3b:61:d4:87:04:96:11:
28:b8:13:e6:a2:19:e4:a0:35:9f:9f:af:09:fa:96:
f2:3c:f5:d0:1f:71:c8:07:2c:ce:d2:d2:34:f2:ff:
70:05:c1:ad:8a:f6:73:42:1e:fe:10:64:b5:20:32:
b6:c7:4f:5e:d3:10:b5:8b:89:3a:ba:02:57:1f:45:
79:46:ed:77:96:d3:31:7d:1d:c9:f6:c8:f3:9e:32:
5d:bb:6b:2e:a9:10:87:98:fc:e7:89:99:be:e4:ff:
3b:71:10:b8:d9:1b:55:d4:30:95:c1:4e:08:a9:61:
22:da:9e:1b:f9:f5:db:fe:46:41:c1:b4:53:76:02:
a6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C7:94:DF:82:6D:90:69:2D:71:E3:56:48:C4:55:F0:C1:86:CD:69
X509v3 Authority Key Identifier:
keyid:A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:d1:5d:2b:38:47:b1:00:11:e3:48:05:7d:46:ab:ed:60:d3:
62:5e:31:f8:21:66:8f:0d:da:1f:90:6e:8f:c4:2a:2f:9a:c5:
48:78:9c:15:5c:96:a2:5e:e7:a7:12:38:ad:08:05:5d:8d:d5:
c5:80:60:6c:1e:9c:24:43:a3:75:67:b7:1b:2b:72:7c:8d:04:
4d:b0:dc:50:81:3e:c7:be:a4:90:53:ea:c1:f6:ac:d2:84:5e:
71:a6:81:99:b8:60:ac:00:3f:6e:11:4e:25:06:99:db:b6:b7:
a7:a9:46:b8:8c:c2:ee:7d:15:c9:07:1c:34:6e:d5:5e:ee:e1:
0c:eb:64:b5:f8:e4:29:cf:52:e7:86:aa:f2:39:cb:d0:c8:74:
43:67:1a:96:db:06:59:2e:26:21:2c:71:6a:88:fa:7e:29:4f:
1f:5b:40:d5:81:7f:f5:d4:3c:b2:aa:3b:f1:11:b8:79:cc:fe:
83:c9:67:89:ac:65:d2:e7:6f:53:31:43:a4:35:ca:79:4b:19:
75:ca:d2:d5:c1:05:1f:4b:c6:56:87:3e:a3:ae:0a:70:21:dc:
62:bd:65:a2:47:86:bf:83:c5:6b:8b:65:bd:0c:2d:c8:cc:59:
03:81:9b:8c:81:b3:6b:45:dd:aa:8b:fc:08:8c:65:de:b2:c7:
70:18:92:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:12 2026 by rpki-client