Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
File: pByW6THu5BuJnWLH24NjNEajxCs.mft (raw, json)
Hash identifier: 9KYVdjKrWr3Mbmoy2tIrabDQsPOGEFL0Ptq1EjbZDwo=
Subject key identifier: 62:0E:FE:CD:72:03:2F:27:FF:95:90:EA:A8:AC:EB:DA:7B:FC:11:42
Authority key identifier: A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B
Certificate issuer: /CN=a41c96e931eee41b899d62c7db83633446a3c42b
Certificate serial: 019D39416BCD603F276D87F882D43EB06704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 11:01:21 +0000
Manifest this update: Sun 29 Mar 2026 11:01:21 +0000
Manifest next update: Mon 30 Mar 2026 11:01:21 +0000
Files and hashes: 1: 08erSysabwz5oeBdP8PLy755AHA.asa (hash: RIOLOsPK24oYYh42JNS8I14+Rr+oEV6iLUu+Usr4/PY=)
2: Ug2vF1vgPHmEqRhi6uOzDzFa8k4.roa (hash: J3X4+yL+W+OJhZWrAFHs4AhqGxikLkSzill4Qp4q87Q=)
3: pByW6THu5BuJnWLH24NjNEajxCs.crl (hash: s+vlhQs9iO1uwxIWtV05sG4HQc0zW5jz6DH/0cXwbyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:6b:cd:60:3f:27:6d:87:f8:82:d4:3e:b0:67:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41c96e931eee41b899d62c7db83633446a3c42b
Validity
Not Before: Mar 29 11:01:21 2026 GMT
Not After : Mar 30 11:01:21 2026 GMT
Subject: CN=620efecd72032f27ff9590eaa8acebda7bfc1142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f4:be:d4:e6:2e:69:27:09:46:1c:bb:7b:9d:
bb:cf:27:8b:d4:b5:63:9c:e3:5f:01:1c:66:e1:40:
fa:0b:22:53:d8:7a:f2:43:2d:5b:c7:c6:72:28:be:
b3:d7:4a:3d:ff:4d:28:cb:33:3f:3b:c7:c5:0d:ba:
a8:da:c2:8c:db:e4:57:cc:dd:a0:2b:d4:d9:84:04:
7c:3a:34:60:37:f8:41:46:94:e9:8a:1f:41:a5:b5:
a2:c4:65:d1:7b:bf:f8:c4:f0:0d:92:92:38:e2:ce:
bc:31:a7:bb:f9:d5:a1:1b:01:f9:ff:d1:76:28:b8:
3f:db:bd:2e:c1:28:53:da:7c:2e:f4:cd:7a:07:a5:
ce:26:ac:b1:39:ce:d6:a8:33:3a:16:5c:8c:eb:8e:
ed:fa:e2:54:a4:75:65:4d:9d:5f:1e:f5:8f:13:e0:
bb:a1:74:69:39:6a:3f:8f:d5:52:fe:af:71:db:ba:
e6:86:b7:ec:07:96:95:df:9e:a1:2b:62:ce:5d:83:
af:67:4b:74:c9:8c:d2:79:b7:1a:d2:2c:9b:92:65:
d4:25:fe:f4:44:de:ca:7d:ec:87:ca:06:cd:9e:cb:
b1:52:6c:f4:88:93:ec:c6:45:ef:7c:2b:b0:33:12:
c7:94:df:ae:bf:75:72:56:28:70:04:1d:12:54:58:
c2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0E:FE:CD:72:03:2F:27:FF:95:90:EA:A8:AC:EB:DA:7B:FC:11:42
X509v3 Authority Key Identifier:
keyid:A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:6f:12:1c:52:6b:64:6d:42:1f:f9:02:4b:98:f8:40:fb:d4:
5a:6f:cd:26:1d:e6:5b:6b:f4:8f:d0:6c:be:66:b1:01:53:12:
12:71:e8:8b:f5:5d:81:c9:2f:cc:bc:65:69:80:10:bc:64:6d:
11:30:0d:ff:d2:64:33:e2:50:80:a1:cd:46:36:da:f0:9b:70:
8f:73:75:20:2f:b7:cf:5a:2a:4a:a9:b5:c4:2d:6b:1a:c0:79:
ea:cb:f8:ec:78:1c:93:37:53:49:da:6e:83:1c:6d:00:b9:fd:
de:45:22:d5:ba:d2:91:76:eb:27:9a:f2:12:55:0d:86:7f:aa:
32:65:96:2d:53:d1:3d:17:f9:4a:b8:1d:a1:17:f4:45:6a:27:
73:aa:cb:6e:d0:f7:58:1b:d2:78:ee:bc:94:84:f8:41:c2:5a:
6b:9c:bb:77:82:74:69:2d:89:9c:c1:8c:8f:a0:7b:13:32:a9:
09:9e:5c:5f:ed:87:25:4b:f1:46:1b:dc:5a:3f:2e:8f:bc:d6:
4b:a8:56:00:b7:2e:0b:f9:30:90:c9:9c:4a:e3:c8:1e:b3:bf:
de:fd:3f:e7:d1:02:07:8d:2f:ed:7f:fb:10:9f:cd:94:8a:cb:
18:70:54:ce:08:47:ab:a3:ba:2f:57:77:1b:05:c3:73:4a:42:
ef:a4:27:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:49 2026 by rpki-client