Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
File: pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft (raw, json)
Hash identifier: qkJODHVuRToJoK0omQZ3ntQsRT/1wFbSVy8vuNJWy2E=
Subject key identifier: 8C:12:F5:07:B0:04:FC:90:DA:41:10:EC:D7:6B:D6:1B:27:DB:E9:EE
Authority key identifier: A4:40:B8:5F:0F:7B:A6:38:5C:D4:FE:E8:A0:EC:04:E8:18:41:54:2C
Certificate issuer: /CN=a440b85f0f7ba6385cd4fee8a0ec04e81841542c
Certificate serial: 019D984FA35A7052041BD311A7B29049C59D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
Manifest number: 1855
Signing time: Thu 16 Apr 2026 22:00:49 +0000
Manifest this update: Thu 16 Apr 2026 22:00:49 +0000
Manifest next update: Fri 17 Apr 2026 22:00:49 +0000
Files and hashes: 1: EOVG1E-Fss-TCAZp6FvBla5puoE.roa (hash: QLZCSRXuXCEog/Ml5Xp9IxcczY5XpGCzAWi6jfDK03o=)
2: pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl (hash: Ta6zu42cvOvjn7nJTFXqhjY3ZJTyih32hzZa2eImmYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:a3:5a:70:52:04:1b:d3:11:a7:b2:90:49:c5:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a440b85f0f7ba6385cd4fee8a0ec04e81841542c
Validity
Not Before: Apr 16 22:00:49 2026 GMT
Not After : Apr 17 22:00:49 2026 GMT
Subject: CN=8c12f507b004fc90da4110ecd76bd61b27dbe9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9a:be:e1:5f:dc:ba:d6:08:7d:8e:6c:e2:66:
09:ce:81:86:ab:3b:48:35:b2:a5:22:6d:d5:59:f0:
87:ff:87:c7:7a:1f:50:e9:fe:cc:d5:f6:1a:3f:d6:
a2:26:79:9f:54:5c:d7:79:1c:11:81:07:11:47:4a:
07:ca:01:2a:ea:97:71:22:bc:1a:23:4b:8c:aa:3b:
6b:47:55:bc:e3:09:0c:88:e2:8e:13:03:48:1e:b7:
30:8f:72:ca:97:e5:d0:b1:75:2f:a5:56:74:61:ab:
60:b0:8d:53:62:f1:28:21:84:8f:08:6a:a3:4a:59:
e3:af:ed:df:b2:e5:ad:fd:bd:e0:f3:7a:69:ad:06:
7a:34:f5:2c:81:e0:13:43:18:9d:e6:60:c0:2b:88:
ec:be:0a:9b:7d:44:3c:57:9b:bd:c3:11:51:a8:6e:
15:99:21:74:ec:6b:fb:5e:24:09:32:b2:21:62:d3:
10:55:28:20:e1:47:2c:fe:eb:b7:f3:7c:b0:6b:de:
dc:cb:c4:a0:f4:34:d6:1d:81:57:0c:9c:2c:48:b5:
88:13:56:0f:b5:27:e7:d0:cb:44:fa:8e:0b:01:76:
ee:83:b1:3e:b5:8a:b8:1f:ac:21:b8:7e:a8:45:84:
b8:94:65:54:4f:c5:83:b2:f8:8e:04:26:fa:0b:a1:
ef:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:12:F5:07:B0:04:FC:90:DA:41:10:EC:D7:6B:D6:1B:27:DB:E9:EE
X509v3 Authority Key Identifier:
keyid:A4:40:B8:5F:0F:7B:A6:38:5C:D4:FE:E8:A0:EC:04:E8:18:41:54:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:45:00:e2:ec:43:9f:13:a4:6d:7f:66:6a:61:e6:6b:70:7a:
87:4c:90:81:c8:2c:c2:4d:88:9a:5b:d1:73:e6:1b:a7:d6:5e:
f9:a2:0a:71:62:2e:5f:e3:ae:f8:15:e3:99:0d:96:e0:da:07:
d9:c9:c5:c6:7d:20:d7:9e:38:97:cc:c3:11:49:8d:8b:9f:06:
2e:31:da:db:fe:2d:60:58:bb:e8:0e:6d:95:ed:2e:ba:1f:38:
8f:6d:f7:3e:75:03:72:63:cf:a2:c7:c3:91:8c:03:10:49:2c:
6f:e8:bf:dd:28:4a:59:67:a9:2a:a6:98:a2:10:b6:19:45:23:
c0:8d:7d:f9:d0:19:56:4c:c0:84:cf:0c:63:9d:37:1c:ac:9a:
3c:92:d1:13:cb:16:50:b3:58:a5:54:5f:18:7d:40:b0:45:74:
e3:a4:cb:85:07:b6:50:bb:45:09:1a:07:1d:77:72:b7:2d:73:
e7:01:df:69:4b:ed:60:5a:ff:f2:ac:5e:84:44:08:cc:55:a5:
ce:0a:e6:29:fe:9e:a9:d7:2f:01:1a:46:c7:73:f7:2c:ca:b7:
42:f3:1f:24:39:f1:1e:e5:25:55:33:64:58:1e:fa:4c:64:a5:
2e:c5:d9:b2:b9:42:61:96:6a:12:29:57:8d:0a:91:34:56:1b:
36:79:d0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:58:05 2026 by rpki-client