Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
File: pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft (raw, json)
Hash identifier: lodFSsmeUkLP+5HOQVPLVIORcYT2UmiBAXw3A5s76Mk=
Subject key identifier: AB:5D:99:A8:77:0B:B8:85:0D:5A:FE:E0:94:FF:97:FD:0B:0B:59:83
Authority key identifier: A4:AA:9B:CD:06:EA:6C:56:5D:D9:07:CA:04:E5:07:7D:68:C0:66:4F
Certificate issuer: /CN=a4aa9bcd06ea6c565dd907ca04e5077d68c0664f
Certificate serial: 019CAC46A845DBCDE0DEE495B1EA84EDC120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 02:00:37 +0000
Manifest this update: Mon 02 Mar 2026 02:00:37 +0000
Manifest next update: Tue 03 Mar 2026 02:00:37 +0000
Files and hashes: 1: C0jIgMcLTHgqOBjTV2Pk_I0UXpE.roa (hash: Vnmpnxzb5d888xy3LtJLua3mvD0ti0N+tPvmlqaYeqw=)
2: pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl (hash: QZtJdBIeI4nOogkhoK+wrjKfh8+c1uNqNZ/7GR4bg2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:a8:45:db:cd:e0:de:e4:95:b1:ea:84:ed:c1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4aa9bcd06ea6c565dd907ca04e5077d68c0664f
Validity
Not Before: Mar 2 02:00:37 2026 GMT
Not After : Mar 3 02:00:37 2026 GMT
Subject: CN=ab5d99a8770bb8850d5afee094ff97fd0b0b5983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:71:88:b7:61:2b:28:e1:f5:fb:a3:d1:96:37:
38:39:c7:9a:70:49:30:38:d8:55:1b:72:2a:8a:b7:
7f:70:ce:bd:24:f8:8f:c0:22:c4:a9:c6:30:ac:55:
5b:b8:e8:f5:02:49:f8:a9:d6:0f:b4:22:23:12:86:
dc:88:5c:b3:f5:92:d9:ca:75:25:45:ee:cc:48:6a:
24:50:fd:e6:4e:c0:f7:44:f0:af:49:df:f5:b8:aa:
8b:13:11:29:25:0f:a7:bd:04:d8:69:fe:a3:fe:2e:
9e:ef:7e:65:5d:4c:5f:57:ff:4b:1b:ce:53:40:67:
e8:5c:4b:b5:51:88:41:80:2e:11:d0:b6:78:a2:99:
95:ea:61:28:b3:86:16:37:7c:1e:ba:c4:6e:d2:f0:
00:d4:0d:dd:f6:e4:91:61:ba:7d:9e:2a:a5:48:73:
0b:a3:45:fd:44:85:e8:48:eb:ea:6c:5c:d4:4b:00:
ba:53:d9:ce:7d:bd:b4:c5:07:98:ce:38:84:f7:33:
0e:a7:42:fb:b4:6e:79:19:2b:12:7c:a4:98:c6:72:
d6:98:20:af:8d:12:fc:90:5e:25:a5:bd:ab:7f:64:
ce:5c:fe:45:8c:60:71:6f:d8:ac:c2:3b:36:e6:af:
84:35:fe:2a:c7:73:67:4e:a7:15:c2:a7:f0:93:1b:
8b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5D:99:A8:77:0B:B8:85:0D:5A:FE:E0:94:FF:97:FD:0B:0B:59:83
X509v3 Authority Key Identifier:
keyid:A4:AA:9B:CD:06:EA:6C:56:5D:D9:07:CA:04:E5:07:7D:68:C0:66:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:8d:f8:4b:3e:f7:ae:71:f4:87:74:03:3f:34:f2:82:e7:87:
ca:4c:8f:3e:07:4d:da:3e:f8:c9:57:a1:59:9e:1b:4e:e0:8b:
8b:31:06:59:2a:31:24:11:3d:f2:06:bb:b3:8c:50:9c:41:63:
c6:ab:3d:62:c3:35:75:95:27:96:1b:47:8e:cb:78:09:7c:29:
19:77:5c:c8:df:c5:3d:ba:c1:3f:2f:09:23:e2:ae:3e:91:e1:
18:b5:9a:d1:6c:f0:dd:6d:e2:f3:49:92:54:bb:f2:72:a6:fb:
87:0f:ba:18:d4:f8:04:3d:c0:df:0b:29:0c:b4:12:8d:3b:48:
d0:87:01:a9:02:b3:ac:5d:de:a1:b3:d1:f7:9a:1c:aa:a5:78:
18:e2:e0:37:b9:87:40:0c:ef:5e:7b:13:b0:ba:66:28:78:38:
67:cc:23:87:87:82:3f:fc:9f:17:1a:00:05:b6:f0:e4:b1:77:
4f:d4:00:c1:33:35:22:43:a7:a9:0e:d5:91:9b:61:39:da:00:
ff:29:c2:6d:c9:58:27:47:c4:4e:71:c3:d5:df:38:49:1d:c0:
4c:44:15:52:42:0e:f2:24:ab:1d:00:35:54:f1:30:bd:67:44:
38:00:40:98:7f:e5:ff:5e:d8:99:08:a1:a0:ad:ef:da:63:22:
0a:b6:a4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:13:25 2026 by rpki-client