Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
File: pNAp8sMhrbWeyl_KV6Hrm99THWo.mft (raw, json)
Hash identifier: AdjIt2WRmvP3+ny/zpDgGM2yi8OZ5uUrPVsdL5y0bUs=
Subject key identifier: 4D:A0:8D:2E:38:E0:45:B8:09:A2:F4:28:D0:82:22:DB:B0:80:C4:C9
Authority key identifier: A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
Certificate issuer: /CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Certificate serial: 019CAB3466EC2D00EA25166C7A40D695648F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 21:01:03 +0000
Manifest this update: Sun 01 Mar 2026 21:01:03 +0000
Manifest next update: Mon 02 Mar 2026 21:01:03 +0000
Files and hashes: 1: 0-4nqiPOGteiK9VP6x_sLK2mkJo.roa (hash: D/G/NyWtohGa+4A1yzgQpS5Fkg8In30pL4ywg6qyHJ4=)
2: Z3v-SAm3fw6NnIHtD6dU5VOCOP4.roa (hash: v7j7LyN9QjPmbnKNeQyhNxvVR/InX3nLJAUhm3ToZRw=)
3: pNAp8sMhrbWeyl_KV6Hrm99THWo.crl (hash: FAOVt40GXnjH9YLZfmCen/xJcAxiG+Z/zUqEZ4vNUzk=)
4: rHP4WUAqcSQvgCZtg8_htfcNuko.roa (hash: Mb29TkYRCVH9g/5FuCaCpqq3Nrrav/iSJCN1hGSFHTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:66:ec:2d:00:ea:25:16:6c:7a:40:d6:95:64:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Validity
Not Before: Mar 1 21:01:03 2026 GMT
Not After : Mar 2 21:01:03 2026 GMT
Subject: CN=4da08d2e38e045b809a2f428d08222dbb080c4c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b0:4c:12:3f:78:0c:f1:c1:75:ff:db:9f:82:
e6:a3:c4:dd:04:d5:d5:00:b2:c3:0f:84:53:52:cc:
29:f1:0d:e1:ac:67:71:02:74:f5:ab:c6:fc:e7:b9:
11:24:5e:f7:54:6a:b1:70:25:c4:16:28:82:0e:24:
a5:a9:3f:c1:3e:38:e2:ca:f8:62:26:10:37:9c:a7:
ee:0b:c2:4b:22:3c:a9:67:7f:7e:13:af:b3:99:e2:
a5:3b:4f:42:0b:9f:e5:a4:81:57:11:8b:57:a6:9f:
9f:56:8b:81:8e:10:93:dc:6a:36:46:e4:4a:f2:57:
f8:3c:b2:d1:b4:5d:0a:2d:87:40:ac:8c:c3:6d:b8:
4f:b6:d0:73:2f:42:13:72:16:2e:de:84:f8:ea:be:
0e:b3:e3:c7:7e:c8:d0:74:c1:15:67:87:00:2b:a6:
1e:c7:8b:a7:9b:91:b5:88:e0:46:9d:a1:7b:33:f7:
35:fc:a3:44:1d:49:c9:81:8a:3e:2a:6a:21:22:ea:
af:47:e0:81:c6:fb:48:1b:c4:d2:9e:a6:43:7b:69:
8c:78:11:b5:2b:ea:f5:5a:3a:b8:be:fe:bb:72:92:
13:ed:24:ad:a3:1e:9e:3c:73:a2:ad:2f:66:79:c0:
78:30:91:de:57:f5:82:b9:86:28:4a:ac:48:8e:89:
fa:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A0:8D:2E:38:E0:45:B8:09:A2:F4:28:D0:82:22:DB:B0:80:C4:C9
X509v3 Authority Key Identifier:
keyid:A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:32:de:95:c6:1d:5b:db:5e:73:d4:44:00:61:49:5f:56:96:
5a:e1:63:8c:6a:68:88:fd:71:93:1d:b8:1d:54:68:9f:ad:5c:
0f:2c:ef:0b:15:15:f4:f5:ce:be:68:b0:98:43:eb:42:75:62:
bf:6c:7d:2b:38:3f:a5:09:f8:92:44:ac:1d:56:74:9f:8f:d4:
1a:0f:cc:27:9b:24:c7:46:16:a0:b9:54:ed:1a:ae:f7:4c:58:
14:6e:3a:77:6a:eb:ea:34:fb:e0:fb:a7:34:31:ea:b7:7d:71:
4e:c9:22:39:60:ed:ed:b2:17:58:6a:7a:85:9f:af:03:42:1b:
51:bf:3e:fa:c8:9d:95:07:a2:32:f1:04:c9:77:91:d7:1d:d1:
40:4d:d0:0f:88:8d:e1:3d:2d:ae:10:4a:e8:78:3d:83:96:5c:
49:9f:4b:f9:96:e2:b7:a0:bd:bf:a1:f6:e7:a4:51:c3:1b:e9:
55:01:11:05:c8:2d:34:5b:3c:b8:c7:b9:7e:d7:f0:77:25:86:
83:06:c2:4d:b7:fb:64:63:c3:03:0e:15:c3:3f:24:38:a8:95:
8e:db:50:73:69:65:df:6a:d6:7d:c5:70:db:1f:34:0d:16:84:
f6:14:2a:db:55:fd:dd:85:8e:d9:74:31:58:e9:11:af:dc:da:
fa:27:58:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:08:01 2026 by rpki-client