Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft
File: p03gktwuTXKqfmqWDSGtTnl1izw.mft (raw, json)
Hash identifier: JHvEjJn0DovoOGljpP6T4NFgwfLqi/KIdFQ01maS/gg=
Subject key identifier: 43:20:50:54:B2:DF:8A:5D:5F:33:50:9B:05:4C:D9:D6:3B:1F:7E:10
Authority key identifier: A7:4D:E0:92:DC:2E:4D:72:AA:7E:6A:96:0D:21:AD:4E:79:75:8B:3C
Certificate issuer: /CN=a74de092dc2e4d72aa7e6a960d21ad4e79758b3c
Certificate serial: 019D382DCC64A9FA5DD889DDB7BE4633AF30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p03gktwuTXKqfmqWDSGtTnl1izw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 06:00:18 +0000
Manifest this update: Sun 29 Mar 2026 06:00:18 +0000
Manifest next update: Mon 30 Mar 2026 06:00:18 +0000
Files and hashes: 1: HAOGr9qmEHLwQ55VEf6gl-wrCMY.roa (hash: 2L0cffWPWFlhQ1pCasY0Pddusud0MCUWSHUpwa9HyyE=)
2: p03gktwuTXKqfmqWDSGtTnl1izw.crl (hash: hAhkUstNV9pZ17nkOBoLKr1w+HTtLIeiQAWqnlwynKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p03gktwuTXKqfmqWDSGtTnl1izw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:cc:64:a9:fa:5d:d8:89:dd:b7:be:46:33:af:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a74de092dc2e4d72aa7e6a960d21ad4e79758b3c
Validity
Not Before: Mar 29 06:00:18 2026 GMT
Not After : Mar 30 06:00:18 2026 GMT
Subject: CN=43205054b2df8a5d5f33509b054cd9d63b1f7e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cc:d7:20:40:0d:2a:96:e2:09:8c:83:27:96:
30:00:b5:7d:31:66:fd:55:82:31:db:0a:1b:c4:3d:
1a:c7:cf:af:b3:c3:d9:da:c3:2f:87:d7:cc:a8:70:
e4:57:ff:60:12:03:4d:55:15:c9:bd:65:3a:76:fe:
1c:1c:cd:ad:da:ea:f9:9b:ea:6b:1d:19:0c:1c:b6:
07:a8:c4:16:e2:0b:7e:39:e8:00:ba:6c:af:a6:04:
92:3f:e9:5d:c2:8a:75:b3:63:04:b6:f6:2b:e6:a4:
54:e5:56:4e:d5:86:1b:fc:f2:52:7c:72:94:94:76:
4a:ea:ae:2a:86:16:58:2d:a8:c8:ed:1f:e8:c3:b5:
b9:49:eb:07:d7:9b:58:6b:c9:0c:97:15:c7:6d:34:
ec:5a:53:c9:a9:35:4d:40:c2:45:c6:ef:f3:fa:c4:
65:f2:73:8b:c8:ec:f3:9d:c9:3a:ec:38:69:90:5b:
d2:d2:6f:66:94:c7:73:77:c3:e1:2f:e0:10:65:62:
5b:5f:3d:d9:ed:30:a9:7f:42:c0:6f:bb:83:b3:26:
70:82:3f:2b:25:bc:cb:92:68:c5:e6:6b:c8:db:f9:
c9:4f:28:21:79:3b:95:2d:a3:7a:bb:b4:ef:01:73:
ed:c1:c7:d0:27:a1:1e:34:db:01:d5:63:4d:65:b0:
07:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:20:50:54:B2:DF:8A:5D:5F:33:50:9B:05:4C:D9:D6:3B:1F:7E:10
X509v3 Authority Key Identifier:
keyid:A7:4D:E0:92:DC:2E:4D:72:AA:7E:6A:96:0D:21:AD:4E:79:75:8B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p03gktwuTXKqfmqWDSGtTnl1izw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/469974-1184-4824-9181-f4a275d6b584/1/p03gktwuTXKqfmqWDSGtTnl1izw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:08:7f:d6:d8:34:29:09:bc:77:42:5d:f9:05:f6:23:24:b7:
2f:f8:45:be:68:7a:08:08:e7:76:f2:ea:6e:5c:f2:6e:cc:b9:
9e:62:78:3d:a4:0c:18:2f:a6:db:cf:53:fa:55:b1:29:e8:17:
ab:de:45:aa:2d:f5:b9:ec:b5:10:95:91:b4:b3:ba:9b:d0:8c:
08:b6:c7:77:9b:fc:23:bb:3c:c1:59:fb:df:c0:42:63:9a:f5:
55:9d:8f:34:19:4f:c0:21:30:a0:5e:1a:dc:ea:1f:79:ee:84:
6d:8f:2c:45:11:17:24:5d:66:3a:f6:44:b0:14:0c:33:de:bc:
d8:92:ec:40:b2:98:2b:e0:f3:0d:ff:9a:5a:3c:eb:bd:5e:56:
48:05:81:4e:96:37:15:be:a4:d3:c6:4d:aa:4a:af:cd:d5:76:
77:49:02:a2:7a:95:7c:b4:4b:d9:ad:f5:b2:27:cc:3f:e2:14:
1b:c5:3a:d9:94:67:6f:42:38:75:22:ad:00:cc:b2:96:62:20:
9a:17:84:81:cd:bb:c3:72:4c:fa:1c:db:a4:27:aa:a9:a6:ac:
34:9f:b7:9e:16:20:f3:71:82:b1:45:f4:84:34:42:c3:07:d1:
c5:6e:7f:7c:00:9f:a2:fa:29:98:61:af:81:34:25:2c:0a:a7:
f3:9c:7a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:33 2026 by rpki-client