Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
File: pAoIH7qPsz77RiWe-T9oeNcBUOs.mft (raw, json)
Hash identifier: KWpHKwTF+pekZ4XX86zpzo447W6LhchnTqGADF9ATUE=
Subject key identifier: 71:E6:6C:EA:E2:E0:EC:D3:2E:DB:E4:F0:AC:DB:CE:61:F8:48:0E:49
Authority key identifier: A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
Certificate issuer: /CN=a40a081fba8fb33efb46259ef93f6878d70150eb
Certificate serial: 019D9A74BE8150FDE31151B2BEC3E228514E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
Manifest number: 0E21
Signing time: Fri 17 Apr 2026 08:00:35 +0000
Manifest this update: Fri 17 Apr 2026 08:00:35 +0000
Manifest next update: Sat 18 Apr 2026 08:00:35 +0000
Files and hashes: 1: VBRvFj1EOS8ywtDDLAz1AuJ-F3M.roa (hash: ZcSJ73xAFGVAh8eRMHYLBDppD5u63RXHyLpMLnO53qI=)
2: mnODa5wDvkGX4Jfpz4BI1Vtzz80.roa (hash: jyMMr46dns8Qs3JvGsMvWCbFmVoKBoUCnfmLlBoBHdM=)
3: pAoIH7qPsz77RiWe-T9oeNcBUOs.crl (hash: 1KaJwoIj8f1i6md8sSoD9bm3iMs1dNxCnLzMSSHu8/c=)
4: vmahc-gH9xY8uloECYneObmRUwo.roa (hash: 6npTr2kUzSthDDmcUqv6TyudZTdNiJRtH1eH8fs3DyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:be:81:50:fd:e3:11:51:b2:be:c3:e2:28:51:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a40a081fba8fb33efb46259ef93f6878d70150eb
Validity
Not Before: Apr 17 08:00:35 2026 GMT
Not After : Apr 18 08:00:35 2026 GMT
Subject: CN=71e66ceae2e0ecd32edbe4f0acdbce61f8480e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:68:48:02:f6:33:7c:1f:7b:d4:c3:07:c1:20:
ba:a8:b2:04:e5:8b:6f:a1:aa:98:9f:96:02:50:ec:
d2:e1:90:b8:81:88:bb:94:22:62:8a:03:5d:b5:27:
b3:49:7b:a3:bc:e1:bc:99:2f:89:93:ea:3e:a8:30:
89:24:bc:12:41:78:83:9b:98:98:cc:7e:2b:90:19:
90:16:a6:5c:78:e0:cc:48:c3:7e:c2:b3:93:0b:1e:
48:c3:92:ce:06:f8:01:d3:ad:f3:ae:86:e7:d7:0d:
19:06:76:81:a3:86:b0:66:c7:01:67:a8:d3:7f:69:
24:c3:2e:69:8c:a0:0d:44:02:22:d4:c0:e9:84:f0:
52:b0:df:63:d1:d2:e2:dc:05:31:43:42:0c:a9:04:
03:4c:0e:48:f1:fb:ae:b1:0b:2d:68:e5:30:36:22:
d1:57:c8:26:80:e9:00:e2:3b:d3:03:9f:1f:a8:01:
50:ba:ae:a0:90:dd:a7:1f:5a:ae:e9:a8:f5:47:b7:
b7:f3:a8:0d:5b:3b:30:c4:d3:c3:88:59:67:7e:72:
43:df:e1:74:b7:d2:c6:a3:80:dd:1b:ab:3b:46:26:
42:60:2a:0a:d6:54:95:aa:92:b0:e2:72:d3:8e:01:
3b:cc:03:c2:75:36:01:a7:47:ab:3c:16:20:09:8f:
3c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E6:6C:EA:E2:E0:EC:D3:2E:DB:E4:F0:AC:DB:CE:61:F8:48:0E:49
X509v3 Authority Key Identifier:
keyid:A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:25:14:34:e0:6c:c7:60:68:d5:10:6f:95:09:d2:40:a7:1a:
8b:ba:70:ef:a7:a6:96:86:f1:b4:f6:6e:3f:10:8c:77:52:08:
32:c4:2b:40:59:ae:74:92:ab:d8:5f:01:c9:b7:7e:e3:4b:6e:
3d:fe:68:95:8c:04:4f:f0:a1:68:ed:4c:d7:dd:83:d6:8b:6b:
e4:6e:c9:f1:f5:16:fd:5b:7a:85:ab:71:40:23:f0:3e:f3:e5:
b3:f6:ff:ff:a7:b9:68:86:2a:29:3b:10:b9:35:3c:20:04:8e:
dc:3c:da:e3:f0:49:77:29:c1:58:8d:7e:56:48:17:ef:6a:72:
45:e3:c9:57:ad:53:75:63:a5:4a:17:61:32:b4:e7:cd:d6:d0:
8a:e9:26:65:80:54:fb:b1:bb:28:3b:5a:0e:ac:68:ef:ad:b8:
23:b0:3b:f3:40:81:8b:15:d9:b2:e9:be:36:e2:02:be:2d:6e:
9f:d6:8a:41:b1:36:6e:af:c7:ed:50:fd:03:13:c0:59:fe:9a:
fa:a4:e0:50:bc:6f:e0:cd:91:7f:43:65:c7:91:cf:ae:a3:85:
bd:20:02:cd:f7:bc:3f:b5:ed:85:ed:cb:3f:73:11:5f:0c:90:
5f:34:2c:ef:29:cd:ea:2f:78:1b:95:81:cf:71:0b:2c:cd:4b:
0a:02:04:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:01:08 2026 by rpki-client