Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
File: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft (raw, json)
Hash identifier: IuAtRxGxoyYyR9MkTMYnRyZlvoNOnEURN8AuUV+ljXA=
Subject key identifier: C0:5F:9C:98:94:4D:E1:8D:1A:F9:2A:98:AD:28:D3:34:98:4D:36:A3
Authority key identifier: A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
Certificate issuer: /CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Certificate serial: 019CE3351D268ADD12C857E6449F818EDF04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
Manifest number: 1860
Signing time: Thu 12 Mar 2026 18:00:34 +0000
Manifest this update: Thu 12 Mar 2026 18:00:34 +0000
Manifest next update: Fri 13 Mar 2026 18:00:34 +0000
Files and hashes: 1: 8xpf1H5jnrklNTBoaVn0u85Fw00.roa (hash: xVZEKXXOjsh0YBdOeRbRNQ2rIeuGE/aopxCQhkfvBRc=)
2: k1f4H5R1t7ioWxpD9zQTzDGVw34.roa (hash: UazRYiujjVi7Q1FCel0edXG5MOLygjSQmvy3K0uCobk=)
3: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl (hash: TryMsfdBXsaE7sti1RW5YkGgKKCIUNMFqef72+4KDls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:35:1d:26:8a:dd:12:c8:57:e6:44:9f:81:8e:df:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Validity
Not Before: Mar 12 18:00:34 2026 GMT
Not After : Mar 13 18:00:34 2026 GMT
Subject: CN=c05f9c98944de18d1af92a98ad28d334984d36a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:47:96:54:64:4c:4e:26:10:b2:fe:9d:e4:79:
fa:af:0f:ae:a3:3a:e1:e3:7d:9d:c0:3d:82:b4:ec:
df:81:f3:60:f3:83:e2:c4:a5:2a:fc:a9:fa:3f:b5:
dc:b3:64:d3:e4:21:95:f0:af:f7:d0:c9:1d:13:04:
19:ad:24:d9:54:ce:74:ef:72:dc:46:56:ec:72:8e:
e7:ca:7e:67:e4:2b:f4:0f:fc:83:d7:20:34:de:a8:
a3:1b:e0:8d:14:48:d0:f0:75:a7:2f:f0:19:67:78:
40:b8:13:1f:73:b0:04:45:6d:c1:21:48:26:8c:fd:
83:6f:a9:71:d7:eb:48:57:c3:74:a2:d7:f3:e0:a4:
ba:15:3a:57:78:6f:75:3a:fe:4f:8f:bf:1f:71:ad:
60:e6:48:08:a7:66:34:a1:b0:69:20:c5:85:03:1f:
15:14:6f:ce:8a:fb:d9:90:df:8f:e0:34:88:27:97:
ae:cf:78:4c:78:ba:f7:8b:94:26:ca:4d:12:fb:66:
bc:d5:29:dc:3a:84:86:fb:2e:1b:03:7a:e1:bc:28:
e8:0c:fb:a7:25:fd:59:85:d4:57:9b:05:85:12:e5:
21:a3:4c:0e:16:d7:a3:e6:68:85:5f:2f:2e:cb:bb:
89:19:bc:5c:65:6d:b5:a4:1d:12:7c:56:fc:4d:d8:
0b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5F:9C:98:94:4D:E1:8D:1A:F9:2A:98:AD:28:D3:34:98:4D:36:A3
X509v3 Authority Key Identifier:
keyid:A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:99:19:fc:ca:01:88:55:1e:25:fa:52:99:e3:33:15:49:26:
39:aa:42:ff:77:cc:a8:8b:e5:5d:47:e3:38:f1:ef:f3:4f:55:
da:88:0d:4e:91:b6:e0:9f:3d:d0:58:ff:fe:6f:8e:00:12:43:
79:7f:e4:cf:44:0a:de:4b:95:44:0b:2c:f5:23:f8:d7:91:db:
7c:f1:33:43:6a:30:b9:9a:91:ee:fd:09:9f:87:b8:18:de:43:
3d:b1:9f:a2:48:1d:53:ee:48:6f:6a:97:a5:cd:48:31:e4:92:
f4:a8:22:30:bf:ab:50:79:23:a3:e8:bd:82:0a:c7:b9:8f:f5:
85:b6:8f:db:7e:2f:fc:d9:0a:e4:95:00:39:43:6e:3e:64:d3:
94:14:4f:d8:84:36:69:27:a0:14:95:dd:91:40:cc:6f:a9:fd:
31:6a:8c:c2:66:10:00:29:ca:e9:9e:96:33:61:92:cc:ac:0b:
40:90:26:4a:38:5b:e7:8d:89:b5:c6:b1:2a:f9:f3:11:5a:c8:
f9:6b:d6:95:d2:57:33:8f:5d:41:73:a6:28:42:0d:1f:3a:41:
27:f6:cd:6e:52:18:2f:1b:e1:e1:58:6f:0d:fd:c7:19:6e:41:
e0:68:4e:08:64:27:b2:ed:2f:cf:f1:bf:42:61:58:a2:0e:cd:
3f:4a:ba:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 03:01:27 2026 by rpki-client