Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
File: piEYZBO7394g5ZL75VU95_lOWYc.mft (raw, json)
Hash identifier: E+EGrFtQyK2P/D8dZWgA2QOfEfcW5cqz6La2M9Zns1Q=
Subject key identifier: BC:7A:A1:A7:C9:08:4F:AC:69:11:FF:59:88:BA:94:19:9D:4D:B9:28
Authority key identifier: A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
Certificate issuer: /CN=a621186413bbdfde20e592fbe5553de7f94e5987
Certificate serial: 019D3866425D63B0B3AAB518DA9DF4DAA1F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
Manifest number: 0765
Signing time: Sun 29 Mar 2026 07:01:58 +0000
Manifest this update: Sun 29 Mar 2026 07:01:58 +0000
Manifest next update: Mon 30 Mar 2026 07:01:58 +0000
Files and hashes: 1: 1FR5ZpZwPSxvOqUqxpmnyVdoI2Y.roa (hash: Uc2np6So5kLYsA5QE2lGHUyNPrOYT/fABQqkzzDnXDo=)
2: Z48YcacIdaFOrbU7hl0nBrBdOnE.roa (hash: mNCCj8yHct24e5aYcSn4spJlToJ33LdwEpzI7Aa7J4o=)
3: piEYZBO7394g5ZL75VU95_lOWYc.crl (hash: HLWp1k6N5ft1lAvsAn630TKoCNdgTIUlJs1cbCTRluQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:42:5d:63:b0:b3:aa:b5:18:da:9d:f4:da:a1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a621186413bbdfde20e592fbe5553de7f94e5987
Validity
Not Before: Mar 29 07:01:58 2026 GMT
Not After : Mar 30 07:01:58 2026 GMT
Subject: CN=bc7aa1a7c9084fac6911ff5988ba94199d4db928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:65:59:6c:9d:f6:dc:75:ed:3e:34:f8:3d:bb:
5f:59:f0:e2:85:83:cc:aa:85:a6:18:42:c7:bd:87:
61:1b:42:0d:68:5a:64:e6:b0:a0:7d:06:67:13:9f:
9b:03:18:f8:70:94:39:2f:b9:f7:7c:eb:36:e5:eb:
0f:7f:a4:cb:57:4e:a6:bf:13:6b:dd:89:af:c1:61:
a5:65:4b:0d:de:e3:96:ac:b2:5c:32:7e:d1:3c:cd:
73:ef:f6:0d:29:2d:dc:3b:1b:d4:8a:75:77:c1:24:
17:a5:cc:79:b9:c9:26:8a:ee:4c:77:9e:d5:50:8b:
ba:71:f0:1b:d8:e5:c9:3a:67:ea:be:9c:27:56:4d:
fc:23:43:78:5a:22:a5:b0:0f:af:58:86:73:ad:7d:
21:9e:8e:cb:b6:a0:3f:df:00:d3:cc:29:e7:b5:9b:
d9:ca:47:52:8f:47:bf:3b:b5:ac:9e:a0:35:0c:5c:
ed:28:ef:75:7d:67:80:0f:76:0c:2d:d1:b3:49:dc:
ef:68:fa:60:bb:a6:a7:10:e7:39:e4:54:6e:f8:6e:
44:0e:a1:d9:da:4f:60:0f:a1:9f:85:9c:27:b9:a2:
d9:46:ce:1f:4c:77:bf:e3:45:43:d1:0f:63:4d:26:
72:b5:4d:b1:71:e3:a7:ae:bb:a6:fe:b8:05:b5:b5:
70:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7A:A1:A7:C9:08:4F:AC:69:11:FF:59:88:BA:94:19:9D:4D:B9:28
X509v3 Authority Key Identifier:
keyid:A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:09:b6:44:e4:b0:8e:65:b0:6f:8c:6f:bf:2f:18:39:41:26:
e4:a3:f3:ca:bc:a2:0e:59:9a:70:93:90:8e:d9:c1:3d:6d:73:
02:17:c7:14:5e:04:75:fa:ab:98:2c:a1:2e:3f:dd:99:19:a5:
97:84:70:09:64:78:0a:27:18:aa:7f:6d:20:15:bf:74:2b:f9:
1d:ed:f9:5b:f2:84:b6:2e:f9:f3:6b:a2:be:71:d0:9d:ea:6a:
d8:6a:50:ce:49:74:6a:47:c9:74:e9:8b:2d:97:2b:a5:a4:68:
26:18:83:8b:0d:b5:e1:77:c1:dd:39:a3:9e:67:01:c0:e7:1d:
2f:f1:d3:a9:3e:14:42:27:d1:7d:1e:5c:be:8c:e6:e5:9f:5a:
de:e2:fa:94:1e:a3:cb:3c:de:22:51:99:da:32:95:ac:70:bf:
48:d6:ac:76:a9:6e:5f:f9:6b:45:12:a2:54:60:62:b6:bb:d3:
6b:88:37:f4:a3:36:b0:29:26:da:da:47:7b:e5:e5:eb:59:b1:
f1:d7:fe:37:fc:45:19:4e:55:f9:00:d0:97:7f:a5:d3:ef:bb:
7d:0d:4e:a7:9f:a5:c1:60:28:f6:c6:23:fc:e8:a9:7c:14:2c:
6b:79:15:6b:7f:6e:69:37:7f:83:6f:f2:ae:47:b1:d6:23:1c:
fb:ad:af:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:05:31 2026 by rpki-client