Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
File: PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft (raw, json)
Hash identifier: NvmH9bx+Vw+q2LvXiHuPvGbfBLXMJDK4ThWdxg4nqpA=
Subject key identifier: 1F:A0:8F:DB:33:48:A9:51:FB:37:D3:B3:4B:AE:A2:47:5A:F0:3A:D5
Authority key identifier: 3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44
Certificate issuer: /CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44
Certificate serial: 019CAF7EA2E8663394A6418B8A6E0E88EDAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
Manifest number: 0184
Signing time: Mon 02 Mar 2026 17:00:37 +0000
Manifest this update: Mon 02 Mar 2026 17:00:37 +0000
Manifest next update: Tue 03 Mar 2026 17:00:37 +0000
Files and hashes: 1: AjOeFVcLciinUkSYuM-ivopf7bY.roa (hash: dujHfSK3JJ1Up1sejLmok+P4uElPn9XkqC3TePll1TY=)
2: PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl (hash: 3JM/6mI9h2BdJlTgNmRTwhm29hbAdXXiSctczL51JV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:7e:a2:e8:66:33:94:a6:41:8b:8a:6e:0e:88:ed:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44
Validity
Not Before: Mar 2 17:00:37 2026 GMT
Not After : Mar 3 17:00:37 2026 GMT
Subject: CN=1fa08fdb3348a951fb37d3b34baea2475af03ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:76:69:26:c5:91:b0:ba:6a:70:a2:b5:fe:4a:
3f:94:04:c9:4f:9e:cb:82:ed:8a:98:06:63:2e:8f:
2d:7c:a4:79:5f:08:20:43:c0:64:14:40:64:9a:83:
8f:ca:71:9f:e1:ba:e1:87:02:e4:4b:05:9e:b6:e9:
4e:1d:40:7c:7a:fe:79:34:3f:4b:ba:d6:ac:5e:6f:
a1:8f:b4:47:24:db:12:ca:8b:10:34:9d:27:57:c6:
4f:28:e1:22:0b:c1:64:9c:05:a5:44:20:6c:a0:be:
5a:82:d2:be:a3:50:11:af:0b:44:15:7b:30:2c:f0:
98:53:a4:73:ff:92:5b:74:e5:a8:eb:75:cb:cd:c8:
a5:71:b6:b6:5a:28:d8:b0:2d:16:83:a0:a1:59:a6:
f3:cd:c3:0b:44:e1:4d:dc:f1:8e:8d:95:ab:4f:ff:
88:dd:59:12:7d:d3:62:21:30:4f:57:59:d2:56:97:
aa:91:40:bb:7b:46:3c:0b:ca:28:d7:b2:72:d3:f6:
46:a3:cc:7b:05:da:f2:f9:62:cb:96:06:06:5e:6f:
b4:41:96:f0:dc:8b:42:a6:da:cc:d0:6e:d4:93:a8:
2e:e8:73:63:81:9e:e2:b1:a3:19:7e:68:e4:6c:e9:
3e:d6:4b:22:37:cc:fc:1e:5a:32:67:4c:60:52:25:
fc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A0:8F:DB:33:48:A9:51:FB:37:D3:B3:4B:AE:A2:47:5A:F0:3A:D5
X509v3 Authority Key Identifier:
keyid:3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:95:1b:dc:8d:9d:0a:9b:dc:8e:7a:44:16:e9:08:45:4b:76:
b4:32:bb:eb:bd:e6:1b:ad:ae:49:5a:5c:bc:c8:9c:d5:de:eb:
8c:b9:dc:e9:6d:2d:b9:7b:fc:d0:24:29:80:bb:f0:58:da:58:
27:1d:c6:79:c7:16:ee:bb:6c:5a:d8:2e:38:f5:9e:d6:c9:23:
4f:ab:b6:fb:9d:29:fe:fa:f2:e5:8f:90:2c:cb:10:59:02:1a:
e2:04:9a:06:99:1a:0b:88:d0:29:ed:a6:57:39:69:0b:27:31:
2f:01:24:51:7b:22:be:56:c7:fa:19:c8:0e:9a:7b:5d:36:2a:
93:51:81:ad:72:dd:e0:15:8d:71:1e:05:98:94:4d:58:88:a4:
33:c9:14:1c:38:73:2c:04:1a:71:82:51:32:a6:c5:62:ba:2a:
09:b3:0e:b2:98:a6:d8:6d:e5:09:2b:d4:a3:7e:ec:bf:7c:c8:
59:ba:2e:40:d5:ed:9d:8d:2a:b8:3b:da:7b:0f:a4:4f:00:bd:
28:2c:57:5e:2f:39:55:e6:64:af:b9:33:7e:2b:34:5d:49:d0:
4b:92:44:6f:b4:ac:f3:e8:9c:51:95:d1:e8:63:1f:a8:e1:54:
1a:ad:25:3d:6e:ce:ce:99:af:a5:0b:bf:4e:0a:4d:ee:26:88:
52:f6:dd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:40:53 2026 by rpki-client