Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
File: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft (raw, json)
Hash identifier: ajhMli596CNnxOsXKJArP4AtNCnN5FlV8zCJWIZGWcE=
Subject key identifier: FF:56:1B:39:8A:A9:A4:7E:2F:EF:B0:AE:3E:7E:8D:06:0D:79:39:62
Authority key identifier: A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
Certificate issuer: /CN=a57f291818d8719738268d844994a2e10824d4c9
Certificate serial: 019D3A1CA0E06F754B253D364C8CBB0CB534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 15:00:47 +0000
Manifest this update: Sun 29 Mar 2026 15:00:47 +0000
Manifest next update: Mon 30 Mar 2026 15:00:47 +0000
Files and hashes: 1: JPBii3Hqcq30q25CjK9-h-C44rw.roa (hash: 0nYkKiEoyllpIK9/qO7+AH5OvjbE8XnCXRin+xPio6U=)
2: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl (hash: CD5oT+DEST4PRWxeOxRhMpjls8O8PRuLT/xbZKFRv1I=)
3: qVXn2mio2xGIpazTfAYClCM2JZM.roa (hash: utP7O671cytqXjasGTBwll6HaIxFO1XJW1EluiUhDqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:a0:e0:6f:75:4b:25:3d:36:4c:8c:bb:0c:b5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57f291818d8719738268d844994a2e10824d4c9
Validity
Not Before: Mar 29 15:00:47 2026 GMT
Not After : Mar 30 15:00:47 2026 GMT
Subject: CN=ff561b398aa9a47e2fefb0ae3e7e8d060d793962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:15:c0:72:fc:50:8b:c2:8b:a0:3d:4d:83:f9:
c2:b1:84:b9:ba:a2:c3:2d:65:be:40:c5:dd:a9:9c:
c9:ef:77:4d:69:b0:16:25:7d:f1:fb:83:86:df:84:
ec:8d:0e:ad:56:f4:13:c4:d1:30:5b:b6:11:90:f7:
42:56:74:bc:bc:23:5a:1c:7c:2b:70:af:e8:b0:c4:
56:26:67:7e:1d:5b:b7:b2:ce:27:fc:a1:3c:db:42:
e3:f5:39:97:b6:e5:65:69:1b:a4:2f:92:e6:0a:96:
ea:2f:e4:57:fa:e3:cf:25:78:6c:0a:31:ab:f3:69:
d7:fd:28:81:ce:15:d7:80:ae:e9:a8:3b:ff:6b:c2:
d1:67:eb:d4:f6:6d:57:05:65:9f:bb:d6:a4:b2:0c:
ae:db:3c:2f:cb:b1:49:b3:c5:1c:34:4c:e5:be:f9:
58:36:3c:8a:4b:de:c6:da:e9:8e:62:2f:5d:e1:89:
0b:7a:9a:0e:db:b0:ed:c7:d2:8f:4f:9a:c1:f8:58:
21:36:37:36:bf:45:1d:c6:02:42:45:d8:c2:6c:89:
a7:10:e0:db:d6:9d:cb:42:d0:3d:8a:34:e0:15:59:
74:8b:a6:0f:ae:dd:d7:71:f0:81:33:6f:6a:b7:ea:
e7:9d:38:90:fa:7d:ce:27:94:09:f1:83:02:df:bb:
fb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:56:1B:39:8A:A9:A4:7E:2F:EF:B0:AE:3E:7E:8D:06:0D:79:39:62
X509v3 Authority Key Identifier:
keyid:A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:68:aa:07:5e:fe:23:e0:ad:d3:aa:06:95:0f:1f:74:f2:92:
0f:d2:f2:3b:af:65:86:9f:35:fd:30:d7:8d:39:26:17:9a:6f:
98:0e:d6:33:79:7d:1c:bc:f9:a3:19:7f:36:20:55:50:2e:ab:
49:04:c5:26:13:42:e5:54:af:f1:4e:ba:b7:7e:09:78:f6:ec:
35:6d:32:8e:84:8b:88:40:60:c5:08:26:9c:b9:47:f9:a5:52:
22:ac:0a:53:16:7a:c0:b5:6d:d9:46:99:db:8f:4e:a6:03:ac:
f0:59:04:8f:b4:31:dd:6f:8a:85:9a:f9:0f:41:11:87:08:a9:
9c:11:ce:58:a9:c4:98:92:cf:f2:9d:36:51:3b:61:c5:62:77:
2f:86:5b:19:99:d5:47:ab:f7:66:e3:2a:2d:42:49:de:21:ce:
39:72:bc:80:1a:58:78:a4:b4:dd:f7:16:c8:f4:26:ee:76:5b:
db:68:ca:19:a9:b9:37:b0:b7:1b:8c:6f:86:b6:f7:f8:58:c1:
05:7b:9f:88:1a:40:80:c8:5b:fb:11:07:51:2c:61:59:2e:71:
f2:07:f2:11:00:8c:e9:f0:c5:64:f4:71:b0:20:94:40:c3:41:
9a:7e:ce:96:06:cf:c5:5f:51:ce:db:65:e4:17:03:e8:54:b3:
00:7c:d8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:13 2026 by rpki-client