Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft
File: PKap1LWSRrTjNhThpLWRthGOihU.mft (raw, json)
Hash identifier: M43uwS9Dxw8gnEZYD4IfBFR74wSPTCM6CSFdFpFmzo0=
Subject key identifier: A5:AA:AB:29:0D:67:81:D8:B1:5A:C2:B3:C7:26:B5:B1:F5:5A:58:32
Authority key identifier: 3C:A6:A9:D4:B5:92:46:B4:E3:36:14:E1:A4:B5:91:B6:11:8E:8A:15
Certificate issuer: /CN=3ca6a9d4b59246b4e33614e1a4b591b6118e8a15
Certificate serial: 019CAA21CEA52890E170577C9D821AC21BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKap1LWSRrTjNhThpLWRthGOihU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft
Manifest number: 13E9
Signing time: Sun 01 Mar 2026 16:01:08 +0000
Manifest this update: Sun 01 Mar 2026 16:01:08 +0000
Manifest next update: Mon 02 Mar 2026 16:01:08 +0000
Files and hashes: 1: MoHvjFVhkl8HU6ePjT49rhVwjYg.roa (hash: 2eLzVr3a7Kd+bh+gySuGFEV4/gbUAwjuFtVGSZR/wAk=)
2: PKap1LWSRrTjNhThpLWRthGOihU.crl (hash: Rt0jRpzyJbi134exW8gaXqx4Yus6Ln4CCfKBRuKCd58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PKap1LWSRrTjNhThpLWRthGOihU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:ce:a5:28:90:e1:70:57:7c:9d:82:1a:c2:1b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca6a9d4b59246b4e33614e1a4b591b6118e8a15
Validity
Not Before: Mar 1 16:01:08 2026 GMT
Not After : Mar 2 16:01:08 2026 GMT
Subject: CN=a5aaab290d6781d8b15ac2b3c726b5b1f55a5832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:34:91:10:5d:10:61:8e:d5:ad:71:47:43:83:
1f:7f:ad:ac:cb:29:5b:f7:b9:d4:64:a6:cd:f0:af:
16:89:70:f7:da:8e:f4:61:d7:f1:53:eb:9f:67:74:
a7:be:7a:e5:e0:eb:35:1d:74:84:c8:b3:e1:ec:88:
ef:df:84:c2:31:63:d3:65:b2:c5:1f:35:56:cd:f7:
42:85:29:da:34:1a:a6:05:bd:ec:e6:ed:45:ae:d7:
9b:03:41:31:e6:88:2e:45:9f:a5:fc:c3:a9:64:06:
9b:71:d9:8e:b9:44:34:6c:70:fb:82:7f:70:d3:b3:
ac:c7:dd:0f:5a:90:12:df:58:d6:a0:16:c9:7a:6c:
cd:3b:35:62:4e:ba:90:1c:7b:b4:de:4f:1e:03:28:
47:a1:b6:26:88:97:bc:fc:b2:45:32:92:c9:f6:56:
09:ff:e2:eb:59:e5:02:21:1d:4e:6c:14:c7:57:dc:
df:61:f3:68:e0:85:f9:fd:62:a6:b3:5d:85:11:24:
53:55:bc:fa:a4:50:f2:98:a2:c1:35:b7:e8:b4:6e:
bc:12:9b:c4:7c:c2:02:87:35:e2:d6:4c:0d:fc:03:
b2:18:cf:9f:54:15:0b:63:9b:df:f3:5e:e6:d4:f8:
16:97:f9:06:a8:c4:6e:5f:f7:f6:94:b5:22:b6:25:
19:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AA:AB:29:0D:67:81:D8:B1:5A:C2:B3:C7:26:B5:B1:F5:5A:58:32
X509v3 Authority Key Identifier:
keyid:3C:A6:A9:D4:B5:92:46:B4:E3:36:14:E1:A4:B5:91:B6:11:8E:8A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKap1LWSRrTjNhThpLWRthGOihU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:71:8a:99:e6:66:39:9d:e8:7f:e9:2d:44:4c:22:bd:4e:2d:
71:6f:09:36:83:c4:07:b0:22:f3:5f:06:68:72:f9:ff:04:b0:
ea:d0:df:39:38:d1:73:ec:11:15:2f:75:6d:1d:45:76:28:59:
76:a8:88:60:dd:8d:c8:d6:b4:76:0f:02:8c:fe:ae:d7:78:1c:
28:f5:11:6c:89:f5:50:b4:99:5b:b4:00:e6:a7:f4:29:eb:ca:
53:11:d8:32:1e:34:59:5f:ac:6b:43:c7:66:62:fe:8b:b5:a7:
e4:a9:61:c6:eb:cc:da:b7:e7:df:c4:02:52:ff:7d:c3:7c:08:
88:a6:9a:2f:6c:da:a5:3f:3b:fa:b1:c1:a3:09:8a:84:ca:21:
0d:a9:6f:e4:85:f3:76:e7:83:e2:a8:b0:eb:70:ab:22:f6:03:
11:73:d4:d2:59:92:ea:9f:75:9b:ac:2a:1a:45:52:4b:21:89:
dd:eb:f9:d5:dc:cd:4d:d7:13:4d:11:bf:d7:11:74:67:08:d2:
ab:9c:e2:33:5b:ed:73:6a:ae:c2:d8:23:fa:8a:f8:c4:ee:fb:
44:7b:cd:37:d5:8f:34:d3:38:92:6b:a2:bd:00:21:1b:b9:2b:
18:5b:1f:67:d5:93:21:04:38:50:be:4a:84:33:52:d6:aa:e1:
8d:39:03:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:42 2026 by rpki-client