Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
File: pDtTIrjqOKegRNywZxp126EEPX4.mft (raw, json)
Hash identifier: 9t+2hNrnVo6fgeSD5NWtpjI4ZErBT12wSOuS/kgG8Rw=
Subject key identifier: 3A:A1:E8:A0:93:76:84:48:44:BC:86:3E:E5:42:BE:BA:0B:C1:4C:7C
Authority key identifier: A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
Certificate issuer: /CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Certificate serial: 019CCABF0DABEC7B24F7CCA1D20C66F0F4B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
Manifest number: 185E
Signing time: Sun 08 Mar 2026 00:00:44 +0000
Manifest this update: Sun 08 Mar 2026 00:00:44 +0000
Manifest next update: Mon 09 Mar 2026 00:00:44 +0000
Files and hashes: 1: AREZ7-I4dY-lVbG1KNvmj3abde0.roa (hash: 5iBy3FivOVWf36BTRuKIxy1pHWbIkHkYDe7qIgLbr7U=)
2: mMsPrtRi4JJovpyGYjWOc4wt2Ac.roa (hash: NZ9c/htksySRie6h0nflWnbh4o9NACM0t9JzBFsPMrg=)
3: pDtTIrjqOKegRNywZxp126EEPX4.crl (hash: xh0ivytzf4TNzZEh1fZSKnwe6Vz1Xn8mDRNUea2/bEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 20:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ca:bf:0d:ab:ec:7b:24:f7:cc:a1:d2:0c:66:f0:f4:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Validity
Not Before: Mar 8 00:00:44 2026 GMT
Not After : Mar 9 00:00:44 2026 GMT
Subject: CN=3aa1e8a09376844844bc863ee542beba0bc14c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d7:f0:ec:a4:da:4c:6b:62:15:0d:7e:66:4f:
37:35:1c:46:b5:99:d0:d0:bf:7b:bc:94:af:99:39:
68:8e:4d:45:1a:84:43:8b:7a:df:f1:05:4a:5a:61:
0c:b0:64:96:2c:30:e6:71:c5:94:ff:56:c7:68:52:
5e:59:1b:75:e8:cd:68:57:ce:ca:15:d8:a0:ad:74:
08:b3:ba:f2:f9:64:76:0c:8c:49:8b:1f:fa:a3:0a:
c5:6d:62:57:fd:40:5a:3f:91:93:09:9d:b9:46:7d:
e5:05:56:3a:74:80:e0:3a:03:74:8c:fc:1b:36:57:
89:02:c2:d3:3a:f5:e1:e2:14:ea:cb:af:c0:6c:c4:
8d:4c:17:7f:09:ef:49:83:f2:24:ab:42:8c:de:d2:
68:e9:19:6a:d3:16:db:82:c9:2f:47:0a:e4:89:47:
3c:24:75:b6:ac:69:f5:bd:54:b2:82:00:bf:18:3c:
7e:a8:a1:6e:ee:ef:c8:7b:22:a8:54:c3:86:75:8a:
87:58:99:91:7a:80:fb:2e:59:cc:64:a6:44:0f:08:
37:5b:7f:4d:68:fe:0a:ea:3d:f5:34:1f:74:22:2d:
99:a8:e6:9b:f7:da:eb:b5:9f:ec:c2:4e:bd:13:50:
dc:01:8a:37:c9:a3:13:42:4a:c8:8b:1d:ad:52:9b:
11:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A1:E8:A0:93:76:84:48:44:BC:86:3E:E5:42:BE:BA:0B:C1:4C:7C
X509v3 Authority Key Identifier:
keyid:A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:4e:61:f8:e4:74:21:60:05:b2:d9:b4:a7:e5:05:a1:5a:47:
68:f9:60:f3:c7:d2:de:3a:43:6c:60:49:e4:d5:d1:04:97:0a:
ee:c4:a8:5c:83:4f:e6:12:19:cb:c5:5e:9d:56:fe:62:56:1e:
bd:19:51:18:88:c9:5e:dc:04:11:c1:44:3e:5c:59:c2:5c:a7:
1c:b4:f7:c4:a7:13:ac:c7:30:ad:73:9e:4d:25:6c:88:db:0f:
e5:e1:df:6d:d8:1c:30:64:dc:b3:f4:c1:77:fc:33:5d:08:e8:
cf:5b:27:ee:1f:27:36:60:ec:d7:42:88:a7:35:91:79:b2:03:
2b:d3:17:96:79:de:17:24:32:d9:5a:e2:09:87:29:49:ea:ee:
93:19:ff:06:57:9e:c5:f7:ee:e3:6b:91:05:ba:0a:b9:bf:f9:
b1:3f:78:96:c7:fd:da:0f:79:de:c2:2e:3d:8d:a9:e9:f1:12:
46:f0:92:c6:be:89:be:ba:ac:0d:9f:f1:8f:02:5d:bb:fa:86:
ba:f1:13:9e:69:6d:e5:ab:ca:05:57:e5:9a:42:9a:c5:6b:fe:
7a:df:89:3c:1a:1c:3c:62:ca:19:b9:10:5b:72:81:76:c9:cb:
7e:10:ab:c9:51:a0:1c:e2:d9:c6:3b:c9:00:ba:41:60:90:34:
a8:7a:db:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 05:11:08 2026 by rpki-client