Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
File: pTi7DCtB76jDsCBk68UvupLCNiY.mft (raw, json)
Hash identifier: VVI4X5sA5Bs6G8FlnLAnKfWycxuBItElACkbGNdLHZQ=
Subject key identifier: 27:BD:80:DE:E6:23:70:7B:E4:50:C4:A3:44:32:6B:C9:75:3F:5A:3B
Authority key identifier: A5:38:BB:0C:2B:41:EF:A8:C3:B0:20:64:EB:C5:2F:BA:92:C2:36:26
Certificate issuer: /CN=a538bb0c2b41efa8c3b02064ebc52fba92c23626
Certificate serial: 019D3AF7FAC8595B916F91A5CD16812B9E6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
Manifest number: 147B
Signing time: Sun 29 Mar 2026 19:00:23 +0000
Manifest this update: Sun 29 Mar 2026 19:00:23 +0000
Manifest next update: Mon 30 Mar 2026 19:00:23 +0000
Files and hashes: 1: CPVxDc_aZPt8p2hD-fQ5EY3ek5w.roa (hash: YSCCvnapCyu6BSWmfyyXkWgH96EnMt+2gyVUr+pHUOM=)
2: cxSAbl9AGDjuAytpRHVKIsDfitI.roa (hash: 6VeXR5AotX5hFxSi1IUjWsyHhQBxezCmfN4HLADcz8c=)
3: pTi7DCtB76jDsCBk68UvupLCNiY.crl (hash: 2oMYCLcoPH+R4oGuIw12cXn7OCn6klFTdaQdaIumQEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:f7:fa:c8:59:5b:91:6f:91:a5:cd:16:81:2b:9e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a538bb0c2b41efa8c3b02064ebc52fba92c23626
Validity
Not Before: Mar 29 19:00:23 2026 GMT
Not After : Mar 30 19:00:23 2026 GMT
Subject: CN=27bd80dee623707be450c4a344326bc9753f5a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:37:21:a1:4f:ef:7d:72:b0:3b:f4:a6:85:81:
a6:8d:04:65:d8:88:87:92:24:85:20:dd:2a:97:ba:
ef:98:59:3b:a5:81:b6:f9:9b:7c:0b:ae:1e:40:79:
c5:c1:b7:f8:f1:94:51:52:f1:1a:60:71:5b:12:23:
c9:65:a1:d9:fa:65:65:05:95:fd:e4:ae:12:b6:a7:
6b:6f:98:8c:62:de:b4:5d:b9:41:3b:40:fa:b2:33:
fc:41:58:f4:d2:22:98:13:c9:9e:04:ec:22:89:a1:
8b:c1:d7:8f:68:63:e7:ae:42:88:dc:7b:94:0e:ed:
10:1e:7e:16:d5:52:3f:78:d9:e6:6a:ef:f1:3d:8f:
f6:21:f0:3e:f3:4a:9a:4b:70:54:f2:0a:b6:83:cd:
29:91:62:5d:35:db:ee:dd:de:e5:46:46:91:0b:e8:
3c:86:8c:8a:4b:52:86:a5:79:93:d1:fd:ee:99:8c:
ed:ae:c1:24:f1:9b:ba:dc:69:ad:9e:d8:5a:82:d7:
a1:32:3d:f2:03:9d:f6:23:5e:59:42:86:84:f3:26:
89:0a:db:d9:bd:a0:bc:37:7a:4e:e7:95:a5:a0:89:
a0:6e:e9:df:cc:b3:6c:21:2a:8e:0f:d9:ca:ab:b5:
64:13:59:b0:d9:36:f6:5c:e1:d6:e0:57:52:13:d5:
10:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BD:80:DE:E6:23:70:7B:E4:50:C4:A3:44:32:6B:C9:75:3F:5A:3B
X509v3 Authority Key Identifier:
keyid:A5:38:BB:0C:2B:41:EF:A8:C3:B0:20:64:EB:C5:2F:BA:92:C2:36:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d0:37:fd:a2:5a:dc:b4:01:38:45:41:85:d2:2c:50:29:e2:
ac:22:29:27:86:67:19:a1:af:24:c8:0c:d8:ce:8b:cf:9a:17:
48:3f:b6:ba:d4:c6:a5:18:2f:37:52:fb:9b:ef:68:0c:30:3b:
21:d8:94:1b:04:59:97:65:5f:fb:6d:83:88:18:48:a5:10:c7:
75:6b:8e:45:b6:57:68:e5:2a:e0:d2:e2:79:56:a9:43:08:4f:
fa:39:19:4b:09:6f:90:2e:22:5b:e6:c5:93:b6:76:41:83:26:
f2:6d:fe:c9:7d:05:ef:e5:09:07:24:96:dd:c2:72:29:3b:7c:
85:81:d7:41:8d:ca:71:fa:bd:e2:0d:66:37:1d:08:ee:1e:9f:
7e:f9:a4:86:d1:0c:ea:b5:18:6e:10:d1:d0:54:18:b3:7b:b4:
ca:fd:25:bf:73:25:ab:bb:80:4a:2f:55:3c:01:35:f8:15:32:
5c:3b:12:a1:c6:28:d6:6a:17:55:41:6b:94:7a:06:a1:ce:94:
87:ba:ef:35:f9:83:57:77:7b:f7:43:ed:96:ed:b7:8d:c3:91:
cb:c9:90:06:f2:cd:2a:88:ac:76:35:f6:ca:57:b6:a7:b5:b5:
c4:0c:0c:dc:e5:5d:d9:f0:1b:de:f5:f6:f6:bc:8f:01:5e:ea:
47:d5:28:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:50:17 2026 by rpki-client