Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
File: peC5TwtOTIRu-c8nzciBEIdrHPM.mft (raw, json)
Hash identifier: 5kJ/9UBGvXNnc/dK5Yf859uxlW/ZFZYj3OouCnnZNl8=
Subject key identifier: DC:79:F0:10:74:BA:79:F3:71:6D:EE:48:8A:3D:87:18:AD:74:24:4C
Authority key identifier: A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3
Certificate issuer: /CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3
Certificate serial: 019CE635D0B7DC715132FA7643F5DE23BAAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
Manifest number: 1867
Signing time: Fri 13 Mar 2026 08:00:12 +0000
Manifest this update: Fri 13 Mar 2026 08:00:12 +0000
Manifest next update: Sat 14 Mar 2026 08:00:12 +0000
Files and hashes: 1: pbzEOsOOyDKksxCPhBhG-xag72U.roa (hash: iF4hi9XQEfO4uOx6Je7Sgz4Viq0kEg/cT2o7PAWCJTI=)
2: peC5TwtOTIRu-c8nzciBEIdrHPM.crl (hash: A7sfD3aatpDU1w//xLcDLgH6A/c3lRrRxKLbpUTm86M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:35:d0:b7:dc:71:51:32:fa:76:43:f5:de:23:ba:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3
Validity
Not Before: Mar 13 08:00:12 2026 GMT
Not After : Mar 14 08:00:12 2026 GMT
Subject: CN=dc79f01074ba79f3716dee488a3d8718ad74244c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a9:30:ce:c4:f0:07:a7:5e:15:57:ab:47:16:
dd:49:bc:48:7d:dd:da:1f:ab:81:80:da:ef:a7:fc:
a1:02:50:16:f8:d3:db:55:6e:f5:00:9a:8d:6a:e4:
cf:7c:85:48:f6:74:9a:b3:4e:06:1a:9d:cc:2b:93:
75:0a:79:8b:4c:11:d7:14:92:4b:41:81:bb:3c:57:
08:2c:d3:fb:f6:ec:8f:37:e1:fa:e6:fe:b6:ea:d6:
71:af:14:3d:95:4c:54:08:b4:8a:e2:17:9e:48:6d:
eb:05:32:60:30:30:79:fb:45:a0:f4:5c:71:9f:bd:
be:13:aa:da:fb:ea:1b:79:ec:78:77:98:7c:26:5f:
ea:0e:8d:60:27:29:dd:07:43:d7:49:cd:76:fc:85:
dc:cc:1f:4e:11:52:db:35:e8:df:f9:55:34:66:91:
18:2b:1f:5b:30:0c:8f:a0:bf:2f:a7:df:94:30:7d:
a8:50:bc:26:0d:15:40:5f:8e:94:cc:d3:9a:c1:49:
a3:cc:77:0e:52:32:75:63:f8:c1:96:5f:95:99:34:
d8:f1:77:e5:a3:7f:00:3c:6f:d2:a2:9d:d0:58:a0:
71:de:9b:c1:46:bf:93:b3:68:0a:9c:b0:ff:a7:28:
f3:fc:ad:0e:53:76:e5:cb:95:a1:d0:90:90:98:89:
9c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:79:F0:10:74:BA:79:F3:71:6D:EE:48:8A:3D:87:18:AD:74:24:4C
X509v3 Authority Key Identifier:
keyid:A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:19:fb:5a:1b:ee:8d:49:30:d7:8a:0a:04:2a:1f:08:55:0d:
db:79:ae:da:76:36:96:fc:d1:12:2a:52:56:52:f6:8d:b8:85:
d8:d9:df:08:7b:96:d1:21:ce:31:f5:86:9f:65:bc:2c:da:fc:
06:e8:14:2f:af:bb:c5:8e:90:78:a1:08:df:49:13:5e:9c:f2:
e1:7e:c2:b2:aa:30:d7:23:11:62:5e:62:8c:63:03:de:d5:0f:
cd:ad:63:40:9a:a2:0c:c8:db:17:cd:a5:ae:77:21:bf:9e:46:
22:3a:b2:41:0b:5a:bb:f7:5a:95:cf:62:ad:a8:78:f4:77:3c:
a4:7d:7d:9f:e7:06:36:98:6c:ec:42:78:77:d2:99:84:7a:f5:
70:db:ed:ed:ce:22:42:ca:50:0c:61:f7:5f:9e:eb:e6:46:0f:
6a:fd:35:89:b1:77:b5:55:8a:a9:94:66:4b:2b:09:4e:d1:22:
08:03:b4:6d:10:2b:eb:d8:e7:43:cf:2b:0c:a9:eb:f4:a1:10:
5f:cf:54:75:b1:d4:b7:9b:44:58:38:ee:ab:fb:1e:92:0d:37:
bb:96:7e:76:56:59:7c:f5:9d:4b:5f:1e:45:32:c7:fb:fd:df:
48:0e:c7:50:cc:2f:54:b0:1d:8c:33:09:ee:23:e1:ae:ec:ef:
42:c8:fe:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:57:13 2026 by rpki-client