Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
File: pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft (raw, json)
Hash identifier: LuMAUvS5REICpe+1qDEbPglS2frw8DKmF4HOFmkn7Z0=
Subject key identifier: 9D:A0:47:DD:07:4B:02:F4:4F:35:3E:D9:22:31:67:35:B6:62:44:AF
Authority key identifier: A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37
Certificate issuer: /CN=a67f1cf27426070aeda7b26053453c283fdf7537
Certificate serial: 019D3A53E3EBE99B207D5C3B59447C4E5EA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
Manifest number: 0B1D
Signing time: Sun 29 Mar 2026 16:01:09 +0000
Manifest this update: Sun 29 Mar 2026 16:01:09 +0000
Manifest next update: Mon 30 Mar 2026 16:01:09 +0000
Files and hashes: 1: XxeNNCKdsKtsWJE0Iy3TYGX5MOE.roa (hash: wAuwL6Iz2Pwm9WGIInMjcsxZMvhkc1vHutS+nMnQpa8=)
2: pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl (hash: mTlI6+Ku27ibW/d57VksFKZinvIGx7n7A3p77qEJ3yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:e3:eb:e9:9b:20:7d:5c:3b:59:44:7c:4e:5e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a67f1cf27426070aeda7b26053453c283fdf7537
Validity
Not Before: Mar 29 16:01:09 2026 GMT
Not After : Mar 30 16:01:09 2026 GMT
Subject: CN=9da047dd074b02f44f353ed922316735b66244af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:09:57:e7:e0:cd:56:6e:b4:0d:2a:39:2b:c7:
33:66:9d:b2:f2:36:60:e2:b2:f5:1d:84:f1:3e:e6:
c7:99:76:7b:a8:a7:be:b9:2e:8d:b0:ea:81:44:c3:
2f:2a:65:ea:fe:6e:80:6d:9c:5d:4c:3a:0d:da:d1:
db:97:41:a5:23:4a:4f:b4:ab:74:ee:be:3d:de:03:
b3:65:22:cc:9e:df:a9:0a:c0:03:ab:28:2d:1d:58:
ea:b2:3b:70:82:2e:73:97:38:6a:68:f4:10:30:76:
5a:f1:38:56:43:d7:2b:ba:2a:48:7b:47:f0:b8:6b:
36:76:ad:4c:c9:de:49:dc:a2:9a:4b:d7:7d:0a:a1:
a2:88:9b:ae:91:4d:67:47:42:02:67:09:d8:8f:a9:
15:f2:f9:8a:78:04:80:8e:8d:45:13:1f:ca:70:ea:
94:ce:10:97:65:cc:32:d2:eb:86:c0:91:bd:d0:06:
20:c5:bf:b6:af:e6:b2:76:d0:c7:db:bb:79:c4:0f:
1d:41:93:1b:16:be:68:89:0f:52:36:08:8e:ea:9c:
fc:62:27:42:65:b2:57:fd:d6:40:01:2b:15:bf:23:
96:9b:29:70:93:b4:a8:f1:dc:fa:bc:d2:68:df:fb:
d0:13:da:24:5b:fe:1c:62:de:39:0c:93:e7:6d:e2:
6b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A0:47:DD:07:4B:02:F4:4F:35:3E:D9:22:31:67:35:B6:62:44:AF
X509v3 Authority Key Identifier:
keyid:A6:7F:1C:F2:74:26:07:0A:ED:A7:B2:60:53:45:3C:28:3F:DF:75:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pn8c8nQmBwrtp7JgU0U8KD_fdTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/12e2c4-243d-44df-b0dc-b9d668f051de/1/pn8c8nQmBwrtp7JgU0U8KD_fdTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:71:f9:a7:40:b0:cb:8d:ff:c1:5b:20:9a:31:0b:79:b9:f8:
c4:30:0d:bf:e5:9f:90:90:9d:9e:fd:42:10:fe:d7:d0:d9:3f:
13:e1:64:fa:8b:95:6f:3a:b7:f3:d3:be:42:7b:ba:c8:c2:2f:
30:42:7f:0f:95:0d:2c:fe:5e:5d:70:27:ac:3d:09:26:d5:69:
27:c5:2c:b9:f3:12:a8:88:81:54:9a:42:a8:91:b9:69:f8:65:
eb:30:a5:fd:75:94:fd:21:d4:81:ee:43:43:a2:7b:9e:fe:f0:
74:77:5e:7e:c8:10:9c:b0:80:b6:62:74:ed:9e:48:2e:76:7a:
85:a6:84:17:df:6f:07:54:27:6c:be:c5:32:44:33:d7:ee:c3:
d1:4c:e8:76:94:3d:26:27:f4:87:cd:36:d8:d2:61:0b:64:67:
1a:68:09:0a:22:48:98:68:9f:63:f1:14:6e:6e:17:72:78:c4:
18:8f:51:8a:d5:d8:64:8a:25:12:11:7b:4f:a6:e2:8f:84:a2:
a7:26:2c:71:41:e2:21:02:4f:48:9d:c7:e9:4e:99:42:88:24:
64:8f:b7:dd:e9:5b:01:a7:17:87:09:bd:e5:2c:7f:39:8f:29:
a3:a5:c8:6e:5b:92:b3:c4:09:a7:ca:d8:21:d5:81:98:45:e1:
2b:52:e1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:13:16 2026 by rpki-client