Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft
File: pRA1bcClIYlc5h-FSV4G2vehKzs.mft (raw, json)
Hash identifier: RWNUslt+mAJAAf87Z2Vl0/1yiHkm3ZWHSMs/+YhWPw4=
Subject key identifier: 41:2E:22:A2:6D:06:BB:F8:59:C6:8B:10:E3:90:5F:72:47:B0:D7:EF
Authority key identifier: A5:10:35:6D:C0:A5:21:89:5C:E6:1F:85:49:5E:06:DA:F7:A1:2B:3B
Certificate issuer: /CN=a510356dc0a521895ce61f85495e06daf7a12b3b
Certificate serial: 019CADC785792DBD23393036118DB22A6C5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 09:01:00 +0000
Manifest this update: Mon 02 Mar 2026 09:01:00 +0000
Manifest next update: Tue 03 Mar 2026 09:01:00 +0000
Files and hashes: 1: A9Bi8Cx9s5eBAL60l2qMt4h9sE0.roa (hash: AC4LzrIhV3YAzRN5mHN75qp4tUeiM+KW6TE9bEVKoxI=)
2: pRA1bcClIYlc5h-FSV4G2vehKzs.crl (hash: q4suyxvXsh7O39LHxe2nSBB0U3oAyLFBo8GdRSeXHXM=)
3: vdQ8Xor9Vehtiv0Bg_9ca6wd1w8.roa (hash: s2e/NrFq+wqQKph1EQxPVpjpr6FbDPVVUYvD7GykSEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:85:79:2d:bd:23:39:30:36:11:8d:b2:2a:6c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a510356dc0a521895ce61f85495e06daf7a12b3b
Validity
Not Before: Mar 2 09:01:00 2026 GMT
Not After : Mar 3 09:01:00 2026 GMT
Subject: CN=412e22a26d06bbf859c68b10e3905f7247b0d7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0a:34:3c:ee:e3:54:c6:2f:06:47:c3:fe:34:
3d:72:1c:77:d8:4f:5a:ed:c0:c2:e8:cf:13:29:e1:
c9:4c:7a:d3:fa:23:38:37:6c:ff:4e:e6:11:37:8c:
a8:d5:a6:91:c4:01:53:e3:e6:98:ba:f5:f7:b9:1b:
2c:4e:43:de:fb:aa:33:64:fc:83:94:dd:f9:86:7a:
cc:91:47:39:bd:72:18:07:cd:dc:68:59:06:73:a1:
8b:86:ce:6d:b5:6f:03:e2:60:0c:c6:bf:a0:70:46:
0f:61:29:26:86:14:b5:08:a8:b1:a8:42:d6:61:d7:
b0:b0:90:10:d7:63:c5:e1:8e:14:10:99:f4:31:ad:
00:28:c7:24:a1:ca:10:7f:09:4f:f7:1d:87:57:df:
40:60:5d:a5:1d:c3:4e:73:a4:be:fa:ca:c7:5f:56:
94:af:78:b5:81:b9:17:fa:88:c3:cf:a1:85:53:d3:
da:26:57:10:e9:2d:a1:14:05:4c:25:03:12:56:bd:
f3:f2:56:03:73:19:88:be:82:c1:a4:3d:1b:43:b0:
32:0d:25:74:50:5d:9a:be:61:c0:71:4c:a0:2f:00:
78:03:e8:80:48:26:48:25:f1:1f:a4:9a:13:fa:1f:
d0:cb:b4:fc:66:99:6e:66:21:24:43:d0:fc:87:d4:
0a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2E:22:A2:6D:06:BB:F8:59:C6:8B:10:E3:90:5F:72:47:B0:D7:EF
X509v3 Authority Key Identifier:
keyid:A5:10:35:6D:C0:A5:21:89:5C:E6:1F:85:49:5E:06:DA:F7:A1:2B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:60:ea:e7:26:a5:db:da:61:ab:d9:23:a0:67:89:11:b0:34:
ae:12:ac:39:6e:25:1e:62:e4:6f:eb:2b:66:8e:0d:50:52:73:
68:7a:8a:f4:c0:0d:0a:31:82:46:88:03:98:b0:cd:7f:f0:fa:
03:53:1a:27:57:fd:d4:84:26:74:b6:43:c1:86:39:a9:02:0f:
1d:9c:28:80:6d:24:24:02:cc:16:32:16:c1:a6:fc:de:06:65:
47:2a:3d:f4:ae:91:80:0a:c9:45:8c:ee:4e:29:98:17:b1:02:
94:68:8a:63:70:11:47:0d:ca:34:3e:3f:11:9d:a7:de:ac:8a:
13:23:16:94:c1:c1:89:7e:d0:21:cb:db:46:ae:8c:19:14:fd:
ae:bd:9c:48:50:30:87:d9:fa:ca:c6:90:6a:2b:64:9f:23:9d:
e7:b9:2d:2d:b3:1d:3a:4c:94:a1:09:06:b0:cb:56:cf:18:a1:
93:4e:8a:c0:a2:50:59:d7:89:96:13:a0:ff:0e:f5:1b:15:12:
d6:b2:4c:e5:73:f7:51:23:41:76:fd:5e:f8:3b:c6:20:a3:ad:
9f:9e:38:0c:52:45:31:50:2a:b7:5f:d7:26:29:85:9f:6c:ee:
01:e0:f4:18:bf:7f:3c:ee:06:ac:e6:bc:18:d7:54:9f:9c:5a:
2a:0a:3b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:23:38 2026 by rpki-client