Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
File: pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft (raw, json)
Hash identifier: EQYL88ZDJYgYtw/Iai4h32OPpM/9WJuSrxxep93d/PQ=
Subject key identifier: 4C:EC:33:79:0D:40:26:88:9F:CE:82:F2:E6:4E:E8:D4:F7:67:7E:E5
Authority key identifier: A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37
Certificate issuer: /CN=a67f1cf27426070aeda7b26053453c283fdf7537
Certificate serial: 019D38657594C1EA93F47DA47E61A248E3CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
Manifest number: 0B1C
Signing time: Sun 29 Mar 2026 07:01:06 +0000
Manifest this update: Sun 29 Mar 2026 07:01:06 +0000
Manifest next update: Mon 30 Mar 2026 07:01:06 +0000
Files and hashes: 1: XxeNNCKdsKtsWJE0Iy3TYGX5MOE.roa (hash: wAuwL6Iz2Pwm9WGIInMjcsxZMvhkc1vHutS+nMnQpa8=)
2: pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl (hash: hql+VnrsJhhHIjrylNHS/ClvGNMNZgUuJ777bILoHCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:75:94:c1:ea:93:f4:7d:a4:7e:61:a2:48:e3:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a67f1cf27426070aeda7b26053453c283fdf7537
Validity
Not Before: Mar 29 07:01:06 2026 GMT
Not After : Mar 30 07:01:06 2026 GMT
Subject: CN=4cec33790d4026889fce82f2e64ee8d4f7677ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:66:4e:df:f4:2c:aa:4b:02:b5:40:7a:28:7e:
46:5c:1c:69:e2:a7:2f:de:e2:7f:1a:87:62:aa:67:
68:ac:a4:bb:41:5a:bb:50:a1:28:45:3d:33:e1:db:
0b:ab:63:37:bf:5e:5f:11:b9:be:f8:43:59:29:5e:
7c:46:6b:4d:29:02:81:73:c7:b5:56:b0:16:dd:c7:
86:a4:74:8f:e5:c3:5c:9f:27:b8:1f:2d:ed:8c:b2:
9f:e0:53:e0:7d:ce:04:41:4b:7d:1a:49:2e:41:85:
8b:a5:42:45:2f:c4:ed:c4:3e:b6:c9:77:7b:59:3d:
c2:34:67:a1:89:bb:41:f3:78:05:48:de:c3:6f:64:
17:f2:0e:60:38:71:f3:04:90:c3:f5:4c:b4:be:6b:
b9:ce:f6:d7:f8:22:7d:1f:f1:eb:d7:99:62:cc:0b:
aa:5b:3f:09:b4:fa:de:6c:b6:00:8e:ef:24:93:33:
03:fe:57:3b:56:fb:b9:cd:b2:c9:96:10:1a:7e:0b:
8c:14:26:63:5d:0c:a1:3c:f7:d6:93:30:eb:09:58:
1c:d9:2e:73:3e:75:2b:d4:d9:63:5e:b1:c7:5d:64:
3e:dc:ea:cd:0f:48:54:1d:fd:e1:2c:a2:06:9c:b9:
4a:42:7a:2c:3d:73:29:a7:60:a0:44:5a:62:d8:57:
75:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EC:33:79:0D:40:26:88:9F:CE:82:F2:E6:4E:E8:D4:F7:67:7E:E5
X509v3 Authority Key Identifier:
keyid:A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:52:7d:3a:55:f0:ab:eb:40:7f:63:c4:b2:68:e6:42:31:ee:
4d:93:53:dd:39:9a:0a:b9:15:31:97:52:a4:90:a1:a9:f9:cb:
7c:d7:43:7b:27:37:33:86:f1:6c:5e:15:b1:40:6e:3b:c4:b5:
5a:2b:1f:c8:21:61:4a:cb:95:0b:91:51:67:c5:e1:9e:55:81:
35:7f:61:15:d3:1b:0e:d5:ff:2b:15:4f:6f:0c:d4:36:6e:b0:
b8:8a:77:0f:ac:36:3a:a9:01:fc:18:82:bf:f2:69:82:c5:db:
04:69:28:f6:9d:1c:fd:93:32:6b:bb:fe:ce:14:f4:52:f3:3c:
b0:16:88:62:fe:78:3a:9e:d5:8f:22:9f:3d:8b:7a:ac:ec:29:
af:e9:fd:96:ed:91:58:a7:63:4c:ee:e2:00:4a:b4:4a:f0:32:
f0:d0:13:80:65:e5:ab:a2:82:9a:c5:5b:f0:57:83:e9:1d:38:
f0:6d:4a:c0:ec:59:3a:72:74:93:b3:2b:bb:de:f9:14:ae:fc:
39:3c:f8:25:5d:37:f8:bb:6b:67:d3:05:3e:af:9c:19:5d:01:
f4:85:4f:0f:c9:36:00:2c:db:93:61:86:1f:6a:be:81:bf:97:
75:0b:57:09:9a:94:5b:81:1a:14:02:09:69:21:10:ab:ea:08:
65:3e:af:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:37 2026 by rpki-client