Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
File: pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft (raw, json)
Hash identifier: RV/BXlPA5vE/T9GTY5w1BNnvjxgxcXCp4zQv5yprY0Y=
Subject key identifier: 7C:1B:AB:B4:66:47:70:7B:94:FF:6B:DB:D0:90:9E:38:CA:27:1F:9B
Authority key identifier: A4:C9:3A:B3:64:C8:78:32:E7:77:62:26:EE:E6:C1:31:DB:E1:53:BB
Certificate issuer: /CN=a4c93ab364c87832e7776226eee6c131dbe153bb
Certificate serial: 019D34BFA6B5A2832BAFEC921D8301A00DC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
Manifest number: 188F
Signing time: Sat 28 Mar 2026 14:01:08 +0000
Manifest this update: Sat 28 Mar 2026 14:01:08 +0000
Manifest next update: Sun 29 Mar 2026 14:01:08 +0000
Files and hashes: 1: lI1XK5SZ4unF2gsULOFdifpJAaI.roa (hash: rfS2OFj3wmP/4G5TYdNqf/vwvU8JRB0c9MwtD5rUi20=)
2: pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl (hash: lqWSi57kH9oj3nKmM2geXRU61phkrJz2wITzs/mJ4MM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:bf:a6:b5:a2:83:2b:af:ec:92:1d:83:01:a0:0d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c93ab364c87832e7776226eee6c131dbe153bb
Validity
Not Before: Mar 28 14:01:08 2026 GMT
Not After : Mar 29 14:01:08 2026 GMT
Subject: CN=7c1babb46647707b94ff6bdbd0909e38ca271f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ff:8b:be:83:78:dc:92:ef:11:c5:fa:06:9c:
ad:a1:7d:35:07:a3:f7:be:e1:41:53:48:05:43:4b:
d5:e9:18:d9:35:5e:dc:5f:2b:be:87:48:5c:4b:d1:
4d:dd:43:e1:90:e5:c7:b8:c5:78:82:2e:dd:d7:5f:
6c:f0:16:95:1f:d9:22:1e:81:32:1f:34:c0:1e:5d:
17:6f:81:93:c5:17:6d:4c:74:20:9b:3e:fc:f4:99:
74:ee:74:c9:c1:08:02:08:1f:62:8e:3c:0d:e7:57:
36:d8:07:b3:89:08:62:78:b1:e4:67:b8:ae:4d:b7:
04:cb:a3:0a:12:15:16:5b:41:5f:85:61:29:3a:9f:
98:47:3e:1d:1e:79:66:3f:9c:3e:81:ea:19:cc:18:
83:7d:08:4e:f0:8b:05:59:71:bc:12:86:6c:23:5e:
7a:83:d1:ec:b9:de:dc:c9:9b:ba:3b:7a:ac:04:e1:
c4:fe:f1:e1:09:b1:02:36:61:64:9f:44:6b:61:66:
44:6f:b9:ef:e8:6f:67:b7:c6:14:e4:00:75:3d:78:
22:34:bd:a2:39:83:89:96:d3:3f:71:93:42:95:4e:
bb:72:e6:d9:73:a6:ff:a8:2d:21:5a:58:00:22:91:
df:15:04:6b:d4:af:ae:54:dc:fd:4e:dc:a2:b6:68:
33:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1B:AB:B4:66:47:70:7B:94:FF:6B:DB:D0:90:9E:38:CA:27:1F:9B
X509v3 Authority Key Identifier:
keyid:A4:C9:3A:B3:64:C8:78:32:E7:77:62:26:EE:E6:C1:31:DB:E1:53:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:b5:ce:ef:3e:1c:bf:1c:79:77:91:25:b3:74:bc:5d:8f:a8:
79:63:f2:79:6e:d1:a2:62:c6:04:33:b5:57:3e:d6:cd:64:55:
e4:79:4a:2a:a5:37:66:85:a3:12:63:f2:5a:d1:96:65:b7:2d:
10:ed:18:87:a5:b9:1a:19:13:ee:99:9c:fe:92:88:31:23:00:
cb:b5:01:12:1d:00:ca:25:78:d4:75:66:9a:bd:39:d2:49:5d:
e5:80:70:ca:88:07:8c:e6:8d:d7:7c:47:9e:aa:8d:ca:a8:ab:
5b:08:b9:32:3a:6a:44:c5:25:fd:be:a3:30:df:0f:c7:37:80:
77:be:c5:5b:26:ad:2a:52:8c:7c:fe:ae:58:95:bf:9a:db:b8:
47:f3:8d:2b:b5:aa:7a:fc:70:cf:a6:00:54:aa:89:2d:e8:fc:
40:5a:2b:db:60:26:90:88:02:4e:3f:b6:f4:93:66:b9:c6:ee:
87:50:72:2c:81:5b:1c:45:1d:1d:cd:17:c1:25:58:d1:6b:bc:
49:2e:1b:36:5d:46:27:a2:a0:26:44:02:04:14:a0:0a:64:4a:
1e:f2:a3:06:41:75:2e:65:d2:d0:35:64:77:ff:45:f6:fa:42:
86:28:02:1a:87:34:a9:e9:8a:88:fd:f0:d2:09:bd:00:9a:b3:
59:e3:5c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 00:19:31 2026 by rpki-client