Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
File: pDtTIrjqOKegRNywZxp126EEPX4.mft (raw, json)
Hash identifier: u8igbBcS6UWlLU3LQV8vrGpJLQefFMvUbSgq3cFsRYM=
Subject key identifier: 50:B2:87:75:3A:86:75:5E:F6:A2:89:EC:09:DE:E4:4F:AC:DA:B3:37
Authority key identifier: A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
Certificate issuer: /CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Certificate serial: 019DD91D780B6F370CAEDA778BE4C009F26E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
Manifest number: 18EB
Signing time: Wed 29 Apr 2026 12:01:20 +0000
Manifest this update: Wed 29 Apr 2026 12:01:20 +0000
Manifest next update: Thu 30 Apr 2026 12:01:20 +0000
Files and hashes: 1: AREZ7-I4dY-lVbG1KNvmj3abde0.roa (hash: 5iBy3FivOVWf36BTRuKIxy1pHWbIkHkYDe7qIgLbr7U=)
2: pDtTIrjqOKegRNywZxp126EEPX4.crl (hash: ENWVsgHScQs4NM+x3O5Hb30UFctRtCXc+iPhwHFQrKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 12:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d9:1d:78:0b:6f:37:0c:ae:da:77:8b:e4:c0:09:f2:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Validity
Not Before: Apr 29 12:01:20 2026 GMT
Not After : Apr 30 12:01:20 2026 GMT
Subject: CN=50b287753a86755ef6a289ec09dee44facdab337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b3:2e:e9:69:e8:23:90:2c:b4:d8:ec:06:26:
bd:48:6c:64:54:13:2c:60:08:d8:b5:84:43:70:bd:
b4:73:b8:1c:08:e1:39:cd:c4:55:30:75:6c:63:27:
fb:86:b4:26:3b:3a:d8:66:55:5e:7b:ad:33:45:74:
f5:c5:40:03:bd:92:c1:1a:4b:85:5b:78:75:3c:b0:
0f:bd:e1:20:fa:d2:43:88:25:81:f5:c2:fc:5c:5a:
a7:a8:c3:36:53:f2:74:83:5e:e8:59:02:2b:ac:e2:
9a:56:38:ee:cb:80:35:22:c5:a5:a8:c7:3c:ea:45:
03:53:10:91:7f:2c:87:3c:8a:a8:f0:6c:81:8c:d5:
23:12:1b:24:41:b3:4f:2e:20:4f:4e:e8:47:b3:26:
02:c1:41:ee:40:8b:47:46:85:71:9c:a7:b4:b0:d8:
d0:80:a4:e5:14:f6:5e:7a:b7:37:e2:b3:b0:8f:ed:
07:8c:6a:e4:80:2d:72:d7:d4:58:d5:78:20:58:4c:
14:ce:6f:ea:e2:90:e1:40:8c:1f:1e:db:db:04:f5:
90:fe:c1:d5:56:60:3c:a6:e7:25:0a:75:29:d6:70:
9a:96:35:98:7c:d6:e8:2a:36:0c:a4:86:93:ba:80:
f3:09:54:0d:11:89:44:d6:96:87:5f:91:6d:ad:75:
60:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B2:87:75:3A:86:75:5E:F6:A2:89:EC:09:DE:E4:4F:AC:DA:B3:37
X509v3 Authority Key Identifier:
keyid:A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:eb:94:94:aa:4b:c1:c9:31:ce:81:33:55:c4:64:b4:30:23:
a8:36:8f:0b:38:09:1c:94:c1:ce:e8:cd:f1:39:9e:cf:ce:08:
55:6d:e6:ef:72:92:60:ff:b0:47:cd:c8:e6:06:fe:4a:88:cc:
75:95:04:3c:7f:84:28:e0:a2:95:c6:22:4d:3c:4e:e5:f3:25:
ec:93:09:4a:1e:df:b2:cd:6f:b5:cf:b8:e0:bf:a7:37:03:f8:
c2:32:54:bd:79:4c:4f:f4:a3:d6:76:bb:7e:9c:58:cc:2f:e0:
03:c7:f5:fe:ea:b8:1f:c4:82:3e:ed:ec:ad:56:75:a4:63:98:
ab:71:e1:f9:83:dd:25:fd:4a:a3:ab:42:f8:ba:fe:8c:21:23:
f7:f0:11:a1:4a:69:1c:3d:71:01:2a:c7:28:2f:b2:3c:62:9d:
5f:4b:10:e0:21:d8:10:e7:00:47:62:78:9d:27:a9:18:5b:f0:
ae:f9:21:48:e3:85:6a:4d:7d:89:de:30:4f:c6:41:f9:63:9f:
ca:e7:84:7b:0a:39:19:25:b3:32:70:8d:ab:a7:f9:5a:a8:7e:
95:fd:e7:2a:da:7b:e0:8c:73:c7:86:3a:e2:a9:11:15:60:0c:
bc:a2:02:9b:dd:5a:67:f4:70:a3:24:4d:05:5c:25:8e:76:f9:
07:93:c2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 17:59:41 2026 by rpki-client