Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
File: p9ha3isNTsHKCSqOJwPBkgDHLzI.mft (raw, json)
Hash identifier: QuHcZAm3qvq1Qk8fq7Za2hE6vbwRh32BVnFdM/1ootg=
Subject key identifier: 0C:A8:35:09:00:67:12:39:5C:71:6A:FB:37:C3:23:3C:6A:14:2C:2A
Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Certificate serial: 019CAE6C2202D4A8894DDB9BC2241FDB1EB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
Manifest number: 10BE
Signing time: Mon 02 Mar 2026 12:00:47 +0000
Manifest this update: Mon 02 Mar 2026 12:00:47 +0000
Manifest next update: Tue 03 Mar 2026 12:00:47 +0000
Files and hashes: 1: SvxwS_lV784DW9bPgSuJYXAnLY4.roa (hash: cRLgycuUHIOemfVnKATCpToT+Luf3V15E0LKGchaIIs=)
2: TfDpwnkDY9DTlAsJc9Iqnduzj8A.roa (hash: XbrnUGWje15/NR9HfumBox3YZkdHMNSMKy7Az9ObxUM=)
3: p9ha3isNTsHKCSqOJwPBkgDHLzI.crl (hash: 0fCHMSamB3uVfQ/9s/nWvhhCvJ82ErkP2staD053wkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:22:02:d4:a8:89:4d:db:9b:c2:24:1f:db:1e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Validity
Not Before: Mar 2 12:00:47 2026 GMT
Not After : Mar 3 12:00:47 2026 GMT
Subject: CN=0ca83509006712395c716afb37c3233c6a142c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0b:da:5f:62:4d:ca:2b:8d:8e:23:0d:0a:96:
7c:9c:37:3b:0f:9e:69:76:e7:d4:18:a6:b0:c4:b2:
80:cd:bc:09:c5:b9:d8:67:3a:94:63:fa:2e:ba:82:
e2:11:25:eb:c1:70:ad:c1:41:d8:39:4c:16:2d:e1:
12:93:c4:b7:b2:5e:98:53:fc:86:cb:9d:0d:2f:b1:
37:5c:fe:21:dd:c8:68:d1:95:ae:4c:83:46:c5:f6:
b9:2b:d6:aa:1f:f9:9b:87:d9:f5:a7:76:98:0a:15:
4b:3a:d4:52:bd:92:eb:b6:99:43:f1:f8:63:4f:49:
a8:34:d1:e7:2f:2c:e1:64:97:c5:f0:4c:75:06:b4:
ee:df:a0:f6:35:df:ec:0a:fa:b6:c0:4b:10:07:db:
bf:06:f1:68:4f:91:88:ed:b4:b0:5c:19:f6:f3:ee:
07:8b:0d:1e:36:59:99:d7:75:a3:03:62:29:09:e6:
82:df:7c:64:dc:7c:c5:b7:e4:05:fb:aa:d6:d5:9b:
b5:c3:08:cb:88:06:67:0a:59:ef:7c:2f:e0:ca:fe:
fc:ad:5d:21:65:fd:c9:b6:b1:ea:e8:07:99:75:e6:
e9:b3:4f:0c:48:2c:36:1d:00:92:2f:00:05:24:45:
ff:ef:34:4a:c1:43:81:be:80:87:d6:b3:be:b2:7d:
88:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A8:35:09:00:67:12:39:5C:71:6A:FB:37:C3:23:3C:6A:14:2C:2A
X509v3 Authority Key Identifier:
keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:3e:3b:8f:fc:27:10:83:ea:88:db:9e:ad:8b:57:9b:47:fa:
ae:3c:e5:49:2b:f3:52:23:de:12:92:9c:e9:a9:82:9a:43:4c:
0f:0d:24:4f:d0:b4:72:c9:6e:46:7c:03:25:b1:73:c0:d8:e6:
6d:36:52:25:a6:b1:23:84:b9:bb:31:93:c5:d8:1a:89:a3:6e:
11:8b:4a:31:07:93:86:c0:1e:9c:0a:7d:ed:44:ed:60:91:b8:
39:4d:d0:f5:8b:4c:c1:75:f8:8f:04:29:af:f0:26:e3:6e:40:
ca:b5:71:37:3f:57:ff:67:a4:0d:42:5a:4c:e0:95:e6:d2:81:
60:96:f1:bc:32:ff:9f:7b:aa:5b:5f:50:4d:6f:86:4b:56:77:
d5:8d:46:df:12:29:b4:00:5a:56:a5:05:64:4d:18:13:1d:39:
f0:52:bf:59:a7:1f:cd:69:17:46:a8:45:80:41:63:55:24:bd:
fc:18:e3:7c:dc:9c:13:ad:46:7f:78:7c:41:32:e1:ed:bb:55:
14:e0:7f:3c:59:96:93:6c:05:3f:80:64:59:d0:50:9f:1d:52:
65:be:d2:b4:12:58:17:df:c0:00:f7:1b:f7:e4:b9:0d:23:54:
0f:d3:75:e8:ef:50:6d:2b:ee:0d:2b:61:2b:d1:d9:8e:14:b2:
a6:4c:52:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:27:04 2026 by rpki-client