Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
File: pZrIMj67a-IPronQmMokE4-MkAU.mft (raw, json)
Hash identifier: 3lXNpaOzRgX6DLC53HzmfEzet88M4Tb/wlQmv/zoj98=
Subject key identifier: 0A:70:9F:FE:F1:C8:3D:97:C8:8E:16:48:C9:46:F3:0B:FC:60:DC:EF
Authority key identifier: A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
Certificate issuer: /CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Certificate serial: 019D9DE38A439A0582CAD3E55FF2A936ADE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
Manifest number: 18C4
Signing time: Sat 18 Apr 2026 00:00:28 +0000
Manifest this update: Sat 18 Apr 2026 00:00:28 +0000
Manifest next update: Sun 19 Apr 2026 00:00:28 +0000
Files and hashes: 1: QPbL87CmRT1ll0u9cNfWuv1QlyA.roa (hash: 8Z1WQs/0Meh/R2Q6A9r9cYWb2lmAvHlCtOd8UxHsBvk=)
2: pZrIMj67a-IPronQmMokE4-MkAU.crl (hash: qEMoF/iG1WeAJ5Nmv8kixBzRoo/VYC312P+S65+T8ww=)
3: zA-JAsK-5Dim3-SrX670VbjLnXQ.roa (hash: 8KB8obCvtfReso5cwgxqXrjE6TJfCW9MSYEyqCiQ9Zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:e3:8a:43:9a:05:82:ca:d3:e5:5f:f2:a9:36:ad:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Validity
Not Before: Apr 18 00:00:28 2026 GMT
Not After : Apr 19 00:00:28 2026 GMT
Subject: CN=0a709ffef1c83d97c88e1648c946f30bfc60dcef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:dc:79:a0:cf:f4:9a:c9:37:86:c5:60:02:93:
f3:7f:4f:73:7f:4e:3f:fa:c3:ed:61:f7:06:a4:03:
c0:60:ea:da:43:95:00:dc:be:38:7f:2d:49:06:05:
41:81:4b:22:f3:5a:85:ca:12:3e:8e:0c:9f:b6:a7:
5b:6f:48:67:ab:b7:95:25:e8:c4:21:75:4c:b5:e9:
a6:a8:6e:25:ba:50:49:01:50:71:c3:59:ec:54:80:
9b:92:9c:23:ba:a7:19:c7:71:78:62:31:c4:55:87:
7c:e3:5f:a8:23:93:f4:f1:0d:6c:b0:bf:f6:14:f4:
22:61:2d:d3:a5:de:f7:bd:3c:b7:44:56:ae:6c:b5:
9f:ec:16:b5:84:18:75:6b:b3:09:a4:39:9d:5f:e4:
25:0d:e3:30:da:5a:67:1f:69:58:02:3e:29:dc:6d:
49:1a:65:d4:e8:67:c5:06:fb:dc:c3:57:c8:6b:6d:
08:2e:98:b8:a9:94:2d:f7:18:28:23:d0:6a:29:79:
a3:f2:16:cd:4c:ae:fd:c4:a7:25:27:f6:9d:a4:88:
08:8d:fe:64:ec:90:7f:de:e7:e2:30:7b:50:b5:cb:
5b:2a:17:e2:32:19:65:07:a1:11:3e:98:83:70:a5:
60:1c:24:e4:57:fb:37:67:28:ac:66:5e:86:a5:ba:
7c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:70:9F:FE:F1:C8:3D:97:C8:8E:16:48:C9:46:F3:0B:FC:60:DC:EF
X509v3 Authority Key Identifier:
keyid:A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a8:a9:9e:a9:81:95:8c:4d:eb:27:5c:f3:a0:71:e8:18:9a:
3f:88:59:7c:ba:20:f0:1d:be:18:05:3b:d0:18:ab:27:96:9c:
80:95:54:a3:93:8c:0c:90:1d:c8:19:48:f4:5e:af:42:c1:ec:
f6:0f:99:d4:e0:19:fe:eb:29:fd:14:72:b9:cc:21:dc:85:30:
19:ef:8d:3e:7a:d8:fa:cd:01:6c:0f:25:38:58:be:e7:4e:8c:
8f:54:7a:73:c5:74:a8:6c:7c:13:fa:da:45:11:69:e7:97:18:
62:ac:71:f7:01:e6:46:d9:7d:f6:49:a8:81:81:d5:8a:2c:16:
d0:d3:61:74:8b:a5:51:5a:cd:b6:32:9d:59:f1:28:4e:f8:aa:
b8:08:77:47:27:51:09:25:f6:ef:1a:ef:9f:78:77:3d:26:89:
42:99:4d:be:34:d5:b1:2b:47:be:d6:1c:6f:63:f9:fb:36:4b:
4f:be:9b:55:3d:be:da:d0:4c:31:f1:f5:62:be:e0:78:68:4b:
39:0b:98:d7:0b:0c:1b:55:12:ea:b8:e8:06:79:cf:c0:b5:40:
b3:22:5c:2c:dd:2a:a3:8d:0e:ec:40:bb:1e:d5:00:40:f3:db:
36:34:ce:c0:af:32:ce:a7:c6:2f:c6:80:94:2d:72:43:d6:0d:
23:0e:71:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:47:30 2026 by rpki-client