Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
File: pDOBaM2dWvBgQBP8QnQSb8WB88s.mft (raw, json)
Hash identifier: T2rj2sj9R/2cycKMjHM+zD/gAF2vZ8Ddk0gs9eYvZI8=
Subject key identifier: 36:32:14:1A:90:43:CE:87:EB:AB:6B:71:D9:54:85:16:E6:3E:62:DC
Authority key identifier: A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
Certificate issuer: /CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Certificate serial: 019D992AF7FD6DFAB97E114B919C1444BACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
Manifest number: 0F5E
Signing time: Fri 17 Apr 2026 02:00:23 +0000
Manifest this update: Fri 17 Apr 2026 02:00:23 +0000
Manifest next update: Sat 18 Apr 2026 02:00:23 +0000
Files and hashes: 1: 5t5_5MqWJNollBMPqdFua97XfMM.roa (hash: KTz9ZppQRmMMx9XPLOR36od8YyLkBIE5elG5FeL6i2Y=)
2: FSHrqYhJli1tSVyjlj_58RREeXk.roa (hash: uSCHyOKTAFU7tgMnLJvTfArI/447X68lLDwgFscWtJQ=)
3: pDOBaM2dWvBgQBP8QnQSb8WB88s.crl (hash: cbnmVK5pOgRazpYroLeGMTSwJnypdBdZGLth3eDRaxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2a:f7:fd:6d:fa:b9:7e:11:4b:91:9c:14:44:ba:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Validity
Not Before: Apr 17 02:00:23 2026 GMT
Not After : Apr 18 02:00:23 2026 GMT
Subject: CN=3632141a9043ce87ebab6b71d9548516e63e62dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3c:35:09:10:0e:36:29:34:dc:8e:f9:4a:16:
fb:2e:ae:39:04:16:a1:0f:71:0c:7b:47:cf:c2:95:
1d:57:1a:5b:01:98:de:e4:2f:ea:61:03:f5:4a:1a:
6b:9f:7a:ff:7b:0c:ef:4b:25:22:0b:a9:5d:5c:ed:
9f:d5:ba:17:b7:cd:ac:cd:c7:9a:df:5c:bc:0f:9f:
18:79:3b:1c:b9:9e:90:78:64:b4:81:32:51:45:68:
bd:24:e1:10:88:d0:78:04:1b:83:92:55:81:7f:04:
c8:39:3f:39:a6:2d:bb:71:b3:e1:66:75:c2:85:d4:
c9:ca:ce:44:cd:0a:9a:59:15:24:03:00:c4:52:79:
12:21:4c:58:9a:f4:17:73:47:2d:4c:4c:51:d9:a7:
82:8d:d3:05:8e:ae:e1:f4:a8:58:23:f4:03:7a:33:
96:b4:93:5a:30:c3:90:83:26:34:21:0a:a6:6e:e5:
d0:9f:74:e5:f1:9f:1e:ff:3f:34:b0:15:4b:ab:bc:
57:2d:12:f3:aa:f3:e4:96:70:0e:a5:d6:b9:9d:77:
eb:c1:3e:a2:7f:b4:25:84:63:80:d5:10:0a:23:d4:
0f:64:b1:27:c1:82:f7:54:83:13:64:1a:29:b6:69:
ec:8c:db:71:8c:97:64:da:2e:ce:cd:e7:42:37:12:
61:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:32:14:1A:90:43:CE:87:EB:AB:6B:71:D9:54:85:16:E6:3E:62:DC
X509v3 Authority Key Identifier:
keyid:A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:e5:5e:00:d2:53:e9:1c:85:87:20:13:e6:6d:8b:4c:07:bd:
b4:b9:16:cf:86:1b:95:89:16:d8:cc:e9:d0:e8:ee:76:87:ad:
06:e7:88:18:0f:cb:64:96:eb:e8:81:6f:d9:f3:cf:9a:45:1d:
f2:59:b8:5d:79:a2:f0:38:c0:37:62:90:cd:56:d6:a1:eb:73:
c5:f1:98:7d:81:ec:9d:4f:99:b1:65:b0:59:46:c3:79:85:f8:
80:9c:a5:9d:6f:fe:83:64:b6:04:7d:5c:a4:0e:51:0b:e9:43:
4b:2a:80:c1:b6:e5:2c:5d:61:22:63:16:e9:19:ee:52:91:57:
a1:28:42:16:7a:1c:30:67:b4:b3:cf:dc:9b:1b:c1:cf:be:e8:
a6:57:0b:6d:a1:12:d3:ec:ab:fb:9d:e8:e8:75:82:cf:db:d1:
a9:3e:b7:ec:87:f8:c9:4c:fb:fe:61:ae:49:2b:15:01:a8:10:
21:d1:e2:e5:61:56:3d:00:85:0b:bd:a3:f2:2f:d0:32:69:5c:
aa:dc:67:3e:84:d6:42:b1:34:ae:69:d7:9e:38:2e:da:b1:c1:
e8:76:a3:07:80:1f:3d:cd:7b:43:9d:de:01:22:aa:55:41:6c:
85:83:e7:46:c5:73:d4:6d:15:c6:0e:28:1d:47:56:0d:3b:fd:
fa:ff:a6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:46:07 2026 by rpki-client