Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
File: pZp4qFEvkJzm1HMlLwTPGenmiio.mft (raw, json)
Hash identifier: igfnTIXyqxEccGWUZkx/ZeVo5FHAnkqmoFdXiRca2ig=
Subject key identifier: B7:00:2B:34:CE:23:D1:DB:B4:E3:59:D4:11:D5:62:14:A7:70:95:EB
Authority key identifier: A5:9A:78:A8:51:2F:90:9C:E6:D4:73:25:2F:04:CF:19:E9:E6:8A:2A
Certificate issuer: /CN=a59a78a8512f909ce6d473252f04cf19e9e68a2a
Certificate serial: 019D9AAC2E5A41541580DC26689786A0B385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
Manifest number: 0F4D
Signing time: Fri 17 Apr 2026 09:01:08 +0000
Manifest this update: Fri 17 Apr 2026 09:01:08 +0000
Manifest next update: Sat 18 Apr 2026 09:01:08 +0000
Files and hashes: 1: lgjWE5f6FBur4txLoui9WQ1m0Wg.roa (hash: Nc9dyrcUa1QHYvN/T1aLg2QBZKFaf7gWSdVmcW5gdec=)
2: pZp4qFEvkJzm1HMlLwTPGenmiio.crl (hash: rUEoRFwBds84dCCfwhehKxmzetI65LmnkedgLIt/fqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:2e:5a:41:54:15:80:dc:26:68:97:86:a0:b3:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59a78a8512f909ce6d473252f04cf19e9e68a2a
Validity
Not Before: Apr 17 09:01:08 2026 GMT
Not After : Apr 18 09:01:08 2026 GMT
Subject: CN=b7002b34ce23d1dbb4e359d411d56214a77095eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:43:2a:45:32:ff:ca:94:e5:5c:97:e9:06:4f:
f1:f7:9c:19:da:18:82:e1:98:c4:76:b8:0c:8b:a0:
ea:4f:68:d3:a4:c4:8d:4d:76:c7:42:56:81:11:18:
b4:d9:29:5f:0e:3f:04:a5:5d:06:65:86:fd:b7:f8:
d7:9e:90:d7:38:dc:2b:6c:91:ab:99:52:3d:e1:bf:
53:10:82:bb:2d:28:f3:6d:3e:4c:b4:3e:86:0f:75:
1a:5f:c4:4f:f6:12:2e:48:ff:2c:33:84:7d:6c:bf:
ba:ba:1c:12:db:f8:a9:7d:f1:9d:54:0d:70:39:bc:
1b:86:b3:8a:37:bf:25:83:3e:ca:3e:c8:c3:23:8e:
e0:1c:2b:73:d3:30:d2:29:f8:d8:7d:a1:81:cd:e5:
2c:2d:19:00:04:4a:73:b6:ae:8d:27:4c:67:1a:d3:
63:58:da:fe:c1:d5:c4:45:49:dd:7e:c8:22:53:65:
ad:2a:dd:a6:10:2d:d8:fa:17:0d:c2:73:64:00:56:
5b:50:18:64:82:5d:4d:f1:20:a1:b6:be:9a:1d:f7:
2a:42:b1:0b:b3:97:80:23:2c:55:1b:be:68:3f:10:
2f:6c:55:cc:30:27:31:75:5b:10:85:00:31:1b:e5:
91:94:cc:fa:c5:2a:01:15:7a:71:57:21:b7:62:13:
22:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:00:2B:34:CE:23:D1:DB:B4:E3:59:D4:11:D5:62:14:A7:70:95:EB
X509v3 Authority Key Identifier:
keyid:A5:9A:78:A8:51:2F:90:9C:E6:D4:73:25:2F:04:CF:19:E9:E6:8A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e6:3e:8a:1c:01:33:da:ea:89:0a:60:9e:e2:d8:db:51:2d:
4b:f0:87:05:a9:8b:86:6d:7a:96:82:f3:b0:3f:9c:ad:5c:b9:
cd:bd:18:1d:06:2e:02:42:13:a7:7d:4d:23:d5:c4:fb:fb:bb:
a7:6b:f0:11:70:a8:12:53:ba:fe:14:ea:38:d6:10:40:dd:48:
63:7c:8a:a3:44:8d:f2:31:ae:c9:a1:f3:f4:56:f0:46:c1:36:
43:89:99:bf:0a:b6:a8:f8:be:29:03:9a:b3:b3:b9:27:ca:22:
6f:6d:33:15:6d:e3:b5:06:fd:08:88:d5:13:af:3d:09:96:88:
b0:39:1c:0c:7d:bd:f2:e3:b0:75:67:fb:98:6e:66:73:62:56:
c8:a0:f6:cd:31:ab:ab:9b:c3:6f:eb:f2:15:49:ba:49:84:90:
65:23:2e:4e:da:d5:34:0a:4b:85:c3:c4:ca:55:b2:3b:67:c3:
81:32:1b:ca:14:7c:7a:9c:93:ff:c7:cc:66:e9:4e:33:89:e9:
65:07:7c:99:c2:2a:b0:12:ac:3f:d8:0c:b8:42:1f:0c:64:3a:
8e:8d:bb:7b:bd:bd:04:2a:ad:5f:01:81:1c:ee:7f:04:e6:1e:
01:ec:e1:15:27:20:5c:54:1e:11:74:be:50:61:f4:ef:c1:a8:
b7:4a:a5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:48:15 2026 by rpki-client