Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.mft
File: pNyKTpFqo_eO94BHrCDQ0PipUPk.mft (raw, json)
Hash identifier: b0XLDvRWD4WgCcCCYW3jcFWVO/iN0vicFa+yFIpvSoU=
Subject key identifier: 73:F7:A8:71:AA:28:3B:B0:85:2D:F2:F6:C1:5F:81:B2:39:04:A4:1A
Authority key identifier: A4:DC:8A:4E:91:6A:A3:F7:8E:F7:80:47:AC:20:D0:D0:F8:A9:50:F9
Certificate issuer: /CN=a4dc8a4e916aa3f78ef78047ac20d0d0f8a950f9
Certificate serial: 019D382EAAAB71E528D9B9F22655D528B7F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNyKTpFqo_eO94BHrCDQ0PipUPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.mft
Manifest number: 0F0A
Signing time: Sun 29 Mar 2026 06:01:15 +0000
Manifest this update: Sun 29 Mar 2026 06:01:15 +0000
Manifest next update: Mon 30 Mar 2026 06:01:15 +0000
Files and hashes: 1: jxaZko5-DUfGWgrh0q4qhPMc_r4.roa (hash: +jJtqtjZPbCvFiD2hl2AlvdJqwIiQSOrns0lNgcbcGg=)
2: pNyKTpFqo_eO94BHrCDQ0PipUPk.crl (hash: sUGAQQIqBK6Sdki+EEjC48jk7IAja7URAXfmk4qSvE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNyKTpFqo_eO94BHrCDQ0PipUPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:aa:ab:71:e5:28:d9:b9:f2:26:55:d5:28:b7:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4dc8a4e916aa3f78ef78047ac20d0d0f8a950f9
Validity
Not Before: Mar 29 06:01:15 2026 GMT
Not After : Mar 30 06:01:15 2026 GMT
Subject: CN=73f7a871aa283bb0852df2f6c15f81b23904a41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:71:88:78:f8:7b:ab:06:20:e2:8e:46:95:d4:
28:7e:68:93:e1:98:38:78:02:49:88:00:ec:b2:75:
57:c0:7a:ac:68:2d:98:1f:cd:74:10:f5:3a:80:35:
3e:61:e0:4d:0e:ca:eb:4e:6e:d3:19:a0:94:de:c0:
9e:b2:a0:1a:52:d0:a3:88:6d:61:00:ba:1f:e0:16:
5e:3a:be:f8:11:5f:b3:3c:6d:52:c5:b2:b3:ec:1c:
16:62:ca:2e:02:1e:d0:a0:3c:d4:6d:1f:fa:04:c9:
4b:6e:49:ef:c3:60:10:72:ef:d6:0c:57:a3:af:0d:
61:85:2c:81:c5:f2:0f:3c:f4:9c:d7:dc:be:a4:06:
08:ff:fa:06:62:76:8e:0a:6d:e3:96:88:40:25:bc:
83:4d:32:0d:20:0f:e6:cd:a8:5a:9c:82:f0:51:f0:
f4:da:31:d1:9c:bf:b5:a5:dc:96:5b:98:9c:24:5b:
9d:ba:fc:ae:06:61:49:a7:55:af:c3:a7:2d:d6:1a:
25:58:b0:88:45:93:05:f4:1f:dd:d7:81:d0:73:e6:
45:58:ef:b9:5d:9a:76:99:0e:f3:9d:f4:4c:84:e8:
ee:e4:d4:6a:55:96:cc:51:27:75:e2:b0:22:9b:46:
28:d9:b1:7c:28:ce:07:f9:e2:b0:3c:e3:98:82:03:
bd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F7:A8:71:AA:28:3B:B0:85:2D:F2:F6:C1:5F:81:B2:39:04:A4:1A
X509v3 Authority Key Identifier:
keyid:A4:DC:8A:4E:91:6A:A3:F7:8E:F7:80:47:AC:20:D0:D0:F8:A9:50:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNyKTpFqo_eO94BHrCDQ0PipUPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e2:cc:c9:fe:f4:f5:ab:66:e2:fd:e0:9f:e0:22:36:c5:b9:
df:9b:7b:d7:a0:38:70:3c:a1:f6:78:c6:4f:87:39:41:a2:15:
a4:e1:82:ae:22:5d:c3:65:c6:29:4e:56:27:5c:03:2f:e3:9d:
4f:a9:1f:d7:e4:4c:83:b8:8f:17:4f:e0:f3:1b:01:18:e1:b5:
ff:4b:27:f9:82:ab:70:fc:ec:7e:b3:74:8f:ad:74:da:a6:42:
4f:0c:53:a9:ac:10:c1:36:95:1e:16:d4:8a:b4:5f:e5:7b:c7:
a6:57:5f:21:c3:56:f3:54:b1:9f:d4:03:55:d7:10:be:fe:d7:
56:e3:70:aa:1d:a6:22:40:de:be:23:9a:19:f4:0a:c0:e6:0b:
54:1e:84:a6:6c:f1:80:04:db:61:56:c5:ba:40:51:77:94:cc:
16:be:92:17:f2:06:24:ad:73:15:ec:bd:1e:3e:5b:d2:e0:35:
e8:b9:a1:3f:4a:51:18:1a:13:27:05:dd:74:6a:79:6c:bb:b2:
d7:02:22:8d:4c:04:23:1b:b3:22:8b:e4:bb:9c:c5:85:07:e8:
e7:9a:6b:fc:3c:24:f6:78:b6:d0:5d:de:ca:c2:4e:c0:10:61:
5d:47:87:89:48:13:72:d1:40:c1:0f:54:1b:09:96:e8:21:d3:
e4:ff:ca:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:41 2026 by rpki-client