Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
File: pP14NtcTCMQtD50Wj_1MWBZxRFk.mft (raw, json)
Hash identifier: DtDldyEX4qbcttdejVxPgkMHsgN+Xkux+HEPkqPQbzA=
Subject key identifier: D5:B4:4B:61:54:25:AE:F6:54:19:59:41:DF:84:D1:91:3B:41:4D:24
Authority key identifier: A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59
Certificate issuer: /CN=a4fd7836d71308c42d0f9d168ffd4c5816714459
Certificate serial: 019D3940DE52F8A8F615A5D4DEACE7A8E0AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
Manifest number: 13B9
Signing time: Sun 29 Mar 2026 11:00:45 +0000
Manifest this update: Sun 29 Mar 2026 11:00:45 +0000
Manifest next update: Mon 30 Mar 2026 11:00:45 +0000
Files and hashes: 1: ojC0sB05EcDCgctQ9dDCJxZPOP0.roa (hash: 1kAvCSrjpKtG/wqX4+TjXTfOsHQ+c83C0DRspLJabKQ=)
2: pP14NtcTCMQtD50Wj_1MWBZxRFk.crl (hash: gy1hQI06u1Y0FKeTUuvaSiS9S2hmglItcdYvhjVRZdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:de:52:f8:a8:f6:15:a5:d4:de:ac:e7:a8:e0:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4fd7836d71308c42d0f9d168ffd4c5816714459
Validity
Not Before: Mar 29 11:00:45 2026 GMT
Not After : Mar 30 11:00:45 2026 GMT
Subject: CN=d5b44b615425aef654195941df84d1913b414d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c8:34:22:61:6d:c2:c7:22:c4:e5:8c:e5:a0:
08:47:52:8b:c4:eb:75:0a:06:32:b6:42:6d:ea:e0:
d1:1a:99:a3:23:29:9f:e6:bb:14:f9:45:83:d6:53:
95:fb:cf:51:0a:3c:73:4b:0f:cd:7f:d1:d0:84:b7:
a3:a0:7e:6f:56:bc:6b:6f:4f:bc:33:5e:88:ca:cc:
51:0d:bf:46:d9:11:fd:6b:2c:d5:2c:0a:68:74:e7:
d2:e3:06:bb:a4:58:7c:12:7c:94:80:de:be:d7:fe:
89:3a:d6:9f:07:a5:fc:83:c6:0d:a8:6d:cb:5f:d9:
cd:c3:24:20:98:23:8a:aa:ea:09:db:26:d1:46:e5:
fc:7f:ab:66:84:70:a9:8b:bb:b2:46:29:83:e6:fe:
95:af:a8:81:6f:23:a8:61:78:07:1b:5e:06:5f:6c:
0e:a5:bb:35:b0:e4:60:53:de:c0:52:95:15:54:0f:
32:86:0c:df:d3:f2:a2:2b:50:3d:30:ce:b2:cd:61:
18:b0:4c:b8:b1:2e:10:3a:34:8a:fe:66:f1:e9:a8:
59:2c:98:1d:7c:e8:17:d7:d5:4c:7a:68:7a:60:1c:
49:5d:f5:11:bb:bd:e6:0e:17:9c:56:13:d2:b9:91:
7a:80:3f:b1:a6:2f:bd:bc:dd:f7:04:63:0f:30:76:
9a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B4:4B:61:54:25:AE:F6:54:19:59:41:DF:84:D1:91:3B:41:4D:24
X509v3 Authority Key Identifier:
keyid:A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d5:22:1a:68:df:e4:1b:a0:0d:da:cc:4f:bf:1d:32:3e:cc:
fc:68:66:f4:e5:31:7a:2b:2f:a3:c1:74:9b:eb:ef:5c:e4:bc:
01:ba:13:fb:d5:68:74:ba:ce:71:5f:ca:9e:e4:68:c9:a1:3a:
66:43:e8:af:54:ed:9c:85:2b:bb:1e:ac:ec:f0:a7:0c:f6:a0:
f6:eb:1c:97:96:8f:e4:ca:3d:d6:71:4c:6a:87:e3:ca:d7:54:
53:a1:a2:a7:31:04:22:0a:dd:e8:92:0d:55:14:81:b1:f4:24:
80:c1:9b:90:05:d7:be:d8:8d:09:44:d0:bd:ec:91:f3:70:5f:
19:77:99:ad:a0:a9:3f:a3:7e:c4:05:3e:c1:94:c3:c3:0e:57:
94:7f:49:7a:75:a1:54:2b:ea:1c:bd:59:dc:56:ad:76:c7:9c:
32:6b:03:e7:97:4f:1e:97:50:a3:bd:6a:b0:c4:69:29:7c:b5:
32:79:29:41:d8:8b:30:29:17:a4:81:df:2a:8d:e9:e8:64:1e:
c6:ca:76:28:db:4d:c2:2b:60:f2:6a:88:41:5c:21:27:14:34:
21:97:99:52:64:6e:63:60:0f:75:b7:37:95:27:ff:f9:ac:36:
d3:4e:07:7a:b1:77:cc:6d:dd:13:14:81:e9:e8:7e:03:1c:0c:
49:c5:c9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:03:14 2026 by rpki-client