Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
File: pC0LgmZEoYOHz4Mi235kavY9mGo.mft (raw, json)
Hash identifier: JG6pO4PCL2haUecyJm8rh0HyXfemjTHXRnnCLRVirTc=
Subject key identifier: F2:FF:B7:3C:74:05:08:B2:34:08:46:5A:71:D5:23:E3:FA:CF:BD:B1
Authority key identifier: A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A
Certificate issuer: /CN=a42d0b826644a18387cf8322db7e646af63d986a
Certificate serial: 019D38D2B15371F03394709FA7C78121BEEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
Manifest number: 05FC
Signing time: Sun 29 Mar 2026 09:00:25 +0000
Manifest this update: Sun 29 Mar 2026 09:00:25 +0000
Manifest next update: Mon 30 Mar 2026 09:00:25 +0000
Files and hashes: 1: 3fJrjAYV-8WA5qmnNRu8vP1jkLs.roa (hash: UTNsuGJV1hBq6NhuyQF7exUAJYp789Ei8OqvCYeZo7o=)
2: pC0LgmZEoYOHz4Mi235kavY9mGo.crl (hash: 4JeWint+8VdEetiR1OESh07tyc7B3Gmm+JlmvXVRpGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:b1:53:71:f0:33:94:70:9f:a7:c7:81:21:be:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42d0b826644a18387cf8322db7e646af63d986a
Validity
Not Before: Mar 29 09:00:25 2026 GMT
Not After : Mar 30 09:00:25 2026 GMT
Subject: CN=f2ffb73c740508b23408465a71d523e3facfbdb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3f:dd:ce:67:14:ec:20:ac:40:c3:34:28:fc:
f7:76:06:d4:1c:ff:24:02:1f:3b:9d:8a:e2:3d:49:
38:f9:db:4b:e6:4c:1f:fe:c3:c6:32:4b:c5:63:23:
ca:2c:a5:e5:94:dc:d6:cc:32:05:05:7a:e4:6b:ab:
31:c9:c4:d3:9d:22:46:8a:3e:50:3a:23:f3:8f:3f:
4f:e8:0c:f7:6b:38:fd:85:ae:5d:4f:6c:49:10:a2:
67:94:6b:d3:ca:1e:33:27:7c:a1:4f:e4:aa:84:54:
23:4d:b7:55:28:a3:5d:2a:fd:b6:67:1f:9d:5b:96:
71:70:b5:15:d6:13:4c:af:f8:39:d6:64:6f:20:f5:
de:62:3b:9f:f2:eb:05:a2:5c:65:f9:55:6e:e7:8d:
91:22:bb:19:77:b5:07:8e:6c:0a:1a:49:f7:f3:f1:
55:c2:f6:91:ef:d3:28:1a:15:99:26:b9:e4:67:c7:
aa:71:f7:bc:47:d6:33:ed:e9:74:a0:7e:56:fd:6f:
81:3b:66:26:d9:43:e0:c8:42:7b:b8:71:6d:09:45:
7e:82:25:7b:f5:4a:94:45:c2:f4:fc:0f:60:47:f8:
dc:f7:3c:63:ac:6e:dc:23:21:18:03:ce:ce:19:f8:
81:4f:3f:ab:36:18:46:81:9e:b7:a8:89:97:de:42:
45:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FF:B7:3C:74:05:08:B2:34:08:46:5A:71:D5:23:E3:FA:CF:BD:B1
X509v3 Authority Key Identifier:
keyid:A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:9b:a0:75:17:6f:18:ca:7e:97:4a:b6:ec:45:6a:fa:60:f7:
ab:ff:c2:cc:d2:39:4a:6c:e8:86:19:01:0e:d7:77:85:16:dd:
e6:a9:7a:b0:da:e4:5b:79:b6:b8:69:18:fc:4d:b3:d9:57:5c:
3d:25:24:e7:3a:07:a4:e7:8b:d9:d0:93:63:da:28:b9:0f:25:
40:79:89:43:93:58:15:5e:c0:f3:90:c7:dc:fc:da:53:ca:07:
62:4e:1a:c6:77:30:05:32:f0:df:44:72:da:bd:2c:ac:eb:e9:
ab:56:07:0d:03:f6:98:f0:ab:c7:39:19:91:52:08:77:56:13:
3d:bf:a6:60:77:ac:95:c2:e3:bb:b2:79:62:e9:d0:8a:1d:fb:
cc:e7:19:91:c8:f1:e2:8e:3d:d1:82:7c:b4:a6:1c:7a:ab:98:
83:8a:a1:52:83:73:02:f3:8b:2c:03:be:9f:f7:95:81:37:c4:
b9:0e:8f:4c:b3:30:bb:5e:2f:1f:49:33:7a:a6:6f:92:8f:1b:
53:35:f1:00:ee:d0:b2:8b:83:b2:9a:42:16:60:a7:e8:d2:ce:
95:77:86:53:74:f0:e7:3d:5a:7c:ae:cc:c9:ee:03:41:ba:21:
cc:c7:14:bc:5d:dc:80:4c:de:8e:7b:cf:2a:57:fa:9b:63:9b:
47:53:cb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:31:26 2026 by rpki-client