Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
File: pT2P6iKY_zVCptwIkLEIySIYNjU.mft (raw, json)
Hash identifier: DGrNGnNwbGb0QLPktIkX8caoZJWTRYehrkk5FqFFyJQ=
Subject key identifier: FA:10:A5:2E:45:C4:08:20:C9:63:6F:2A:1C:AE:EF:A8:82:80:20:24
Authority key identifier: A5:3D:8F:EA:22:98:FF:35:42:A6:DC:08:90:B1:08:C9:22:18:36:35
Certificate issuer: /CN=a53d8fea2298ff3542a6dc0890b108c922183635
Certificate serial: 019D38D32E217DE19487F3B4064E29792703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
Manifest number: 10D9
Signing time: Sun 29 Mar 2026 09:00:57 +0000
Manifest this update: Sun 29 Mar 2026 09:00:57 +0000
Manifest next update: Mon 30 Mar 2026 09:00:57 +0000
Files and hashes: 1: pT2P6iKY_zVCptwIkLEIySIYNjU.crl (hash: 5g8hcGCL8E2AA2b1fLkED79TGQoj07zYpxKXzJQ1IWU=)
2: zkRoAk-heecQlcDd4NYa_uCW1tw.roa (hash: MyMSVr8o6OsojK7lNBDhOIJstHWvuZ78LlSiWHryefQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:2e:21:7d:e1:94:87:f3:b4:06:4e:29:79:27:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53d8fea2298ff3542a6dc0890b108c922183635
Validity
Not Before: Mar 29 09:00:57 2026 GMT
Not After : Mar 30 09:00:57 2026 GMT
Subject: CN=fa10a52e45c40820c9636f2a1caeefa882802024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3b:a2:2c:64:59:73:b6:f5:a4:a6:be:a4:86:
d3:5c:0b:f2:bb:23:4e:2b:5e:14:2d:5a:4a:f1:ac:
cd:fa:8a:b8:76:dd:14:55:0d:ae:f6:c6:07:78:b0:
00:9c:5b:32:d0:f6:03:3a:12:7f:e9:f5:f0:55:2e:
ed:6e:b0:e0:b8:21:e0:37:0c:2e:45:cf:72:fc:04:
79:c3:de:bb:c8:4e:ab:84:c6:58:47:11:a1:21:cd:
a5:ec:f6:23:92:ba:72:c8:6e:4a:56:71:ed:b0:bd:
7c:23:a0:7f:42:42:34:7c:37:c8:84:d4:85:11:20:
64:c8:48:a7:bd:66:b5:b4:4d:4a:44:ea:79:97:43:
a6:de:a3:d3:c5:72:3e:0a:56:f4:bd:da:d6:06:09:
94:ec:63:62:69:2c:7d:03:46:23:13:f8:60:11:01:
44:8e:85:18:d6:0a:08:e1:2c:a2:c5:a3:31:f1:43:
40:7e:25:8a:6f:71:3b:c4:52:93:3a:fe:ac:0d:ee:
9a:51:6d:de:53:9d:ee:83:45:c7:86:eb:e6:53:f3:
c2:3f:79:42:7b:43:1a:03:ff:80:ba:3d:6a:cb:64:
1c:a3:12:ea:cb:da:8d:28:b2:53:a6:fc:86:d4:9f:
1e:70:e2:93:31:d2:88:49:cb:d3:c7:ec:13:e2:1f:
d4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:10:A5:2E:45:C4:08:20:C9:63:6F:2A:1C:AE:EF:A8:82:80:20:24
X509v3 Authority Key Identifier:
keyid:A5:3D:8F:EA:22:98:FF:35:42:A6:DC:08:90:B1:08:C9:22:18:36:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:96:a5:e8:81:0d:e6:ed:cf:99:25:b3:47:16:57:cc:ad:25:
b1:f7:28:c9:ed:83:cf:81:80:e8:b9:f0:a4:a3:40:13:e5:15:
d6:1b:d0:c8:7f:18:40:f4:e8:05:aa:36:8c:8e:a9:bf:db:bd:
4a:8b:11:2d:eb:3b:24:1b:dd:6f:b2:31:d4:2a:a8:7a:d3:f4:
b7:e7:a8:79:9c:79:fe:57:43:ef:fd:46:dd:f5:fa:87:d9:78:
83:a7:f5:39:29:c3:4b:b7:04:10:03:d2:0c:cf:74:00:34:1a:
1f:f5:a3:da:25:d2:5b:29:95:3b:1b:3b:a3:d7:17:1c:e1:55:
13:3c:2a:96:4a:74:0a:ba:45:f4:bf:07:cd:f4:a7:95:f8:0a:
0c:dd:62:3a:4c:ef:d4:f0:c2:19:c6:5d:37:5e:8a:7b:b2:07:
7e:bf:82:1d:0b:4b:10:a2:4d:ba:af:ac:c2:58:33:fe:20:43:
43:8e:3a:78:22:c1:7f:d2:fa:56:c5:d3:c7:b8:af:e7:6e:b2:
07:17:f5:be:c6:10:f8:0e:a5:48:c1:55:c9:80:3c:eb:d3:bc:
fa:5f:81:a5:d6:ef:ab:ca:88:07:4a:0d:86:82:4b:b5:ef:e7:
2d:97:64:91:48:fe:81:b0:7e:fb:8b:ae:f3:1e:58:a8:41:fb:
a2:1f:82:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:55 2026 by rpki-client