Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
File: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft (raw, json)
Hash identifier: hf5QkVDmeL0UpWAOK/PIq9DVV2gFyWHbe163U0RYylY=
Subject key identifier: 7C:9F:56:30:25:BD:A9:88:19:1F:C5:4B:01:43:2F:EA:13:18:74:59
Authority key identifier: A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E
Certificate issuer: /CN=a50f21c3dc93757fc03282a835600d659f961e8e
Certificate serial: 019D3A1CB94B6F438A5723ADD0C7970A502D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
Manifest number: 0D72
Signing time: Sun 29 Mar 2026 15:00:54 +0000
Manifest this update: Sun 29 Mar 2026 15:00:54 +0000
Manifest next update: Mon 30 Mar 2026 15:00:54 +0000
Files and hashes: 1: IyFwnbWnoKfZVMOw4siaFLOw0dM.roa (hash: I/fImPBHiDykSEzgNGq+cfAayabaV17LU6Onzjp6x+A=)
2: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl (hash: WJWSuTXdu6T9HgfA85eUraB5sKxVOnlwn5/BqEqUq7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:b9:4b:6f:43:8a:57:23:ad:d0:c7:97:0a:50:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a50f21c3dc93757fc03282a835600d659f961e8e
Validity
Not Before: Mar 29 15:00:54 2026 GMT
Not After : Mar 30 15:00:54 2026 GMT
Subject: CN=7c9f563025bda988191fc54b01432fea13187459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:89:2f:99:84:be:4e:28:7d:c1:57:24:cc:52:
eb:8f:aa:83:ac:60:a1:6a:17:d1:76:50:54:cd:0f:
07:5c:02:3e:f9:30:cc:6d:d6:81:97:0a:3c:78:88:
4d:99:c3:b6:e1:02:01:bf:c5:24:01:22:d7:90:73:
41:74:36:f2:3b:0d:8a:a4:7d:da:5b:78:ba:ad:3a:
b1:21:95:54:a5:b0:96:c3:6a:3b:ce:46:cd:29:91:
5c:67:f7:a5:76:72:ea:30:db:a3:a4:5e:d5:76:25:
a6:03:86:04:dc:fe:ad:9c:5a:06:f2:84:b5:95:f3:
f7:4c:e8:19:72:3b:80:d7:5c:d7:c2:5b:e9:06:85:
df:e4:9c:b4:3d:66:b1:f1:e5:4d:eb:66:89:58:de:
d0:e9:29:af:1a:2c:74:ae:5b:ef:bb:b4:fa:ac:da:
62:05:98:c9:50:e7:7b:b2:d2:d4:bf:6b:bb:b2:4d:
79:e6:8d:f3:41:0c:11:f0:d7:25:47:0d:58:67:b6:
7f:04:e2:50:d9:70:78:88:57:67:33:ee:ee:6d:c6:
94:57:4d:26:bb:5e:80:3b:91:f9:de:ba:91:c0:37:
a5:1b:7c:4b:12:c2:fe:f5:69:d7:eb:8f:f4:a1:ec:
ec:54:53:eb:2f:ba:a7:7a:0c:b0:a3:88:fe:e2:38:
8f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9F:56:30:25:BD:A9:88:19:1F:C5:4B:01:43:2F:EA:13:18:74:59
X509v3 Authority Key Identifier:
keyid:A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:86:3f:dc:23:5a:50:5f:57:43:13:04:e9:c2:f9:51:ec:3a:
18:c7:7e:b8:e2:9b:82:9f:25:48:2d:3d:c2:bc:ad:27:d0:5e:
45:55:cd:19:c9:af:7b:87:0d:16:a9:03:32:59:c1:ac:0b:78:
a2:87:d1:b2:6f:f6:67:a1:72:ad:c9:35:3f:3b:79:56:9b:1c:
50:ec:cd:bf:1e:76:eb:00:b3:b5:85:d7:ec:ad:61:db:cf:68:
26:89:85:2f:e8:79:84:28:24:41:1e:ba:ca:03:57:5f:81:10:
80:e5:05:de:10:c2:bb:95:d4:0f:a5:a9:19:01:21:e0:73:4e:
31:f7:76:06:c1:37:05:d1:eb:24:bb:48:8a:14:37:f8:d6:c3:
78:f2:a6:ab:3c:f7:52:d7:9a:7b:96:44:5d:e0:b5:64:2c:5b:
48:ac:04:70:7a:ef:75:5a:2c:de:84:61:53:d6:49:65:af:7a:
87:70:67:8f:4c:a8:9e:77:cb:f8:27:be:30:1d:f9:0f:f4:52:
cd:02:df:7b:41:07:02:e3:1a:03:fb:bb:fc:17:b9:67:c7:1c:
84:93:85:b3:a9:12:08:7d:c5:bf:bf:d3:a1:85:7a:9a:0f:9b:
39:21:01:59:a8:8c:5d:89:99:63:a4:b8:39:5c:54:53:64:e8:
fa:8b:84:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:00 2026 by rpki-client