Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
File: p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft (raw, json)
Hash identifier: aHhVtItca4zgKoHBBxbmkXeO2WyXwXqmd1cGsiN5ENQ=
Subject key identifier: 99:A8:D4:FA:3D:F1:C7:74:85:57:73:51:A2:58:32:EF:49:01:FF:2A
Authority key identifier: A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
Certificate issuer: /CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Certificate serial: 019D3752CE1AABBAFF864689ABCF68CBCDCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
Manifest number: 175E
Signing time: Sun 29 Mar 2026 02:01:06 +0000
Manifest this update: Sun 29 Mar 2026 02:01:06 +0000
Manifest next update: Mon 30 Mar 2026 02:01:06 +0000
Files and hashes: 1: 5xWsJLB1rOrqA4DS2BwAZY-uRwg.roa (hash: JIN7iifBaNIG0jSwJOMYaoCb6Od3dAZF5qeWgFbXbiY=)
2: meAessKCpmwe8fOAgZe9YU9MTiw.roa (hash: 50h4K5YSYsz32EpIZ2NW1nDqeDeoSpSQ6hoQmydaO20=)
3: nSbiFuonVVedtf1Mjw5hb4zONuc.roa (hash: J6+zjZkHNoFOiT1a2hQNHKdZUcl8pIjHWjIqVGiuISk=)
4: p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl (hash: DwrfjzBlFBLeC2yOwfp6IoJLlMtwfV8cuRlhSVj+1w0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:ce:1a:ab:ba:ff:86:46:89:ab:cf:68:cb:cd:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Validity
Not Before: Mar 29 02:01:06 2026 GMT
Not After : Mar 30 02:01:06 2026 GMT
Subject: CN=99a8d4fa3df1c77485577351a25832ef4901ff2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:42:7a:57:85:ff:87:55:e3:13:f1:f1:3a:f8:
b3:00:53:e5:a3:f8:0d:81:6a:c0:f9:88:ff:4e:04:
97:db:2c:13:61:cd:27:0e:89:db:12:8c:52:87:73:
6f:b1:22:28:e7:e6:fb:44:22:c1:5e:7a:bf:4d:2b:
c4:32:ef:80:66:f2:3e:8a:5a:28:63:51:a6:53:b5:
2d:1c:cc:e3:1b:fb:3a:cb:1a:57:54:0a:3c:a2:d6:
7c:3b:9d:ff:d2:3e:74:ef:cb:1f:8a:46:2b:cb:be:
dd:86:d5:8e:fb:c0:a1:f8:9c:ce:6b:3a:38:3b:f4:
40:5a:11:ac:5e:e8:14:eb:23:98:db:df:c8:cc:f4:
27:42:e3:eb:63:7a:ec:51:84:82:89:57:1e:c5:a4:
b0:da:75:2c:af:09:ca:e5:08:d6:a3:fb:22:44:e9:
7d:03:6b:27:4c:4b:f9:d1:dc:e2:a0:08:e1:33:17:
d3:5e:e1:56:7a:e5:c5:af:72:2f:f9:00:d8:6b:19:
ba:f3:f1:50:a7:98:f4:9a:02:44:e9:07:36:58:8b:
6d:af:da:42:e5:fa:13:7e:75:93:94:a5:7b:8d:90:
05:b3:2f:10:f2:60:e7:6f:ae:76:72:4a:9a:3b:ec:
66:4f:d4:f8:f6:e8:ba:17:58:f2:53:e8:ca:64:52:
02:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A8:D4:FA:3D:F1:C7:74:85:57:73:51:A2:58:32:EF:49:01:FF:2A
X509v3 Authority Key Identifier:
keyid:A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:bd:79:52:a8:bc:d3:22:e4:77:25:44:13:7a:ee:d0:7c:43:
05:96:d9:3e:82:77:53:0c:e2:d3:78:5a:7c:ce:47:8d:14:60:
45:e7:84:2e:c7:5f:7c:c5:34:de:50:d0:c6:df:ef:fa:0b:51:
fc:57:33:fa:cc:19:8c:d7:1c:f8:60:50:54:27:8a:1a:64:36:
1d:4b:12:d4:86:0d:05:08:d8:cb:35:c7:0a:3c:72:e2:2f:c4:
05:96:9e:9b:e5:fd:7a:76:b5:de:6a:e7:3f:66:46:b9:86:a0:
4d:a0:e8:be:77:bd:53:07:1f:39:87:90:5d:3e:82:57:7d:dc:
c7:dd:98:8c:22:6f:4a:f5:73:c9:b3:79:99:dc:5b:c9:e0:5b:
19:25:e3:ce:ba:5d:09:03:e5:53:db:9d:59:74:c4:da:02:b5:
0a:0b:ad:46:d1:72:d9:40:89:bd:c2:f2:13:13:36:4c:91:d9:
84:80:9f:ce:2f:10:0f:cc:21:d7:32:94:eb:b1:7d:89:c6:31:
37:f8:a1:12:50:7f:de:ea:6c:be:4b:de:6d:50:96:06:6f:88:
a6:48:dd:85:35:b5:83:c7:1a:83:b1:e7:ea:d6:4a:60:30:0d:
46:4e:7b:d0:f4:3d:e6:09:34:c5:23:61:c6:77:6b:20:eb:5a:
be:ec:41:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:38 2026 by rpki-client