Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
File: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft (raw, json)
Hash identifier: Mt42uCZJGnwzvLiJlMhPuHicEY4yPgm5J+sstywuKxY=
Subject key identifier: 52:AD:3E:3E:53:91:C7:60:A8:9F:36:84:5C:3A:72:38:6E:74:3E:60
Authority key identifier: A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
Certificate issuer: /CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Certificate serial: 019CAA58D7FE2D64DDB0D3BEE971AA9B5984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
Manifest number: 0C39
Signing time: Sun 01 Mar 2026 17:01:15 +0000
Manifest this update: Sun 01 Mar 2026 17:01:15 +0000
Manifest next update: Mon 02 Mar 2026 17:01:15 +0000
Files and hashes: 1: jbAqNXtEEA5VMmJmYWIDy0wpLeE.roa (hash: heA9ElftnVcEx/Z56cUQXfy2JpdBhi/Gw5ToPa737lc=)
2: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl (hash: Crpa6eBggKAbX04E7zB9DklWqcgfrGoXrnWrfzdloiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:d7:fe:2d:64:dd:b0:d3:be:e9:71:aa:9b:59:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Validity
Not Before: Mar 1 17:01:15 2026 GMT
Not After : Mar 2 17:01:15 2026 GMT
Subject: CN=52ad3e3e5391c760a89f36845c3a72386e743e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3b:66:8a:58:73:a1:ec:b8:86:36:3b:98:9c:
47:89:48:2f:28:32:40:fa:78:47:2b:e3:3b:b2:b5:
5f:61:91:ce:c8:cd:40:18:b5:92:33:38:5d:6d:6d:
bf:b6:8b:3c:50:a1:0e:31:86:dc:ab:1f:a1:58:07:
94:d6:43:d8:46:5f:a4:16:e8:f5:84:7c:f0:09:86:
60:a3:9c:20:2f:8a:fa:15:de:6b:ee:7b:cf:bf:df:
e3:2c:07:61:88:93:ec:65:0e:6c:f2:5e:a4:f9:4b:
f2:68:7b:63:f7:1a:c1:ea:8e:e7:5c:d8:ec:9f:3f:
3d:38:fa:e3:66:4c:9f:71:33:b1:1a:ac:52:95:b9:
d2:3e:f6:ae:62:d1:0f:47:8e:0e:48:3d:64:95:1e:
83:ab:0b:2d:07:0a:79:39:be:ff:1e:20:dd:9e:6c:
d6:16:e4:53:96:35:d6:ee:d8:41:96:b8:74:75:cb:
ad:59:b6:e1:2a:40:cb:4c:45:31:b7:ae:c9:e3:37:
92:c2:f9:d3:1d:93:a5:e8:e0:86:92:f7:0b:af:5a:
fc:e3:95:97:59:35:98:34:7e:c6:14:82:14:f4:3f:
d7:19:96:3b:34:de:7a:78:16:46:a2:bc:87:61:3e:
b0:a9:a0:5e:d0:1f:a0:9b:19:5b:57:99:9f:0e:44:
49:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AD:3E:3E:53:91:C7:60:A8:9F:36:84:5C:3A:72:38:6E:74:3E:60
X509v3 Authority Key Identifier:
keyid:A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:1b:51:37:bb:24:28:15:1d:9a:4b:95:10:58:99:aa:a0:e8:
c5:62:05:34:b7:6c:44:26:0d:b8:77:65:72:14:15:17:89:3d:
d2:65:ca:d6:44:e9:f7:8c:4a:93:a1:54:74:87:4d:98:ce:fd:
28:7d:ef:76:45:0c:1b:e0:5c:7a:4f:78:06:fb:0c:d4:fc:24:
f3:df:2f:a5:fd:24:bf:ff:e8:51:45:d8:54:60:65:a8:34:eb:
90:df:08:f0:e3:6e:74:54:8e:3b:73:b5:10:b3:95:a0:d3:7a:
c2:2f:62:a5:a5:c4:17:8b:e3:6c:f6:68:1b:3d:76:0f:d7:dd:
e6:ec:0c:5d:d3:54:f3:e4:af:cc:80:13:8b:04:15:1d:03:73:
f5:78:03:e3:a8:d6:72:f0:2b:71:68:0b:1d:19:4c:34:a6:b7:
04:9b:d4:63:21:77:25:2d:6f:75:d2:2e:ac:32:66:59:e5:ad:
28:a9:45:52:58:48:78:ca:33:bd:9a:53:65:55:55:d7:01:8a:
05:be:ee:2b:5f:c7:74:9c:e2:c1:45:7c:7c:ad:b2:4f:03:56:
82:b7:06:b7:55:73:dd:0d:3e:9e:fb:b5:ca:94:b0:c2:a2:00:
88:3c:53:ac:9e:73:08:b0:84:11:97:c9:d9:47:dd:2f:32:88:
80:74:99:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:43 2026 by rpki-client