Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
File: piEYZBO7394g5ZL75VU95_lOWYc.mft (raw, json)
Hash identifier: VutKaYc7DHqx7SDfNtEsulLz5EoHDUHCIS26Q5dm8uw=
Subject key identifier: 17:0B:ED:E6:3A:CC:C2:C7:3B:D7:16:0A:05:DE:53:A9:89:F4:FC:98
Authority key identifier: A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
Certificate issuer: /CN=a621186413bbdfde20e592fbe5553de7f94e5987
Certificate serial: 019CAD22D8C1D4BACBA59FC00602678766DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
Manifest number: 071C
Signing time: Mon 02 Mar 2026 06:01:07 +0000
Manifest this update: Mon 02 Mar 2026 06:01:07 +0000
Manifest next update: Tue 03 Mar 2026 06:01:07 +0000
Files and hashes: 1: 1FR5ZpZwPSxvOqUqxpmnyVdoI2Y.roa (hash: Uc2np6So5kLYsA5QE2lGHUyNPrOYT/fABQqkzzDnXDo=)
2: hbdA2d-vBo-3SzfwxxldcwTdYxM.roa (hash: raXOO4Vzk3j1wiNPoTdhzreg0aYJjjmuG0/ZS3bT/qA=)
3: piEYZBO7394g5ZL75VU95_lOWYc.crl (hash: kPYQV6TI/25GM0sljiWY/jLIaOEJ7oZS9GFCQLIVmNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:d8:c1:d4:ba:cb:a5:9f:c0:06:02:67:87:66:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a621186413bbdfde20e592fbe5553de7f94e5987
Validity
Not Before: Mar 2 06:01:07 2026 GMT
Not After : Mar 3 06:01:07 2026 GMT
Subject: CN=170bede63accc2c73bd7160a05de53a989f4fc98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:dc:a7:d4:3c:a8:25:41:e8:42:6d:6e:27:69:
9c:47:95:96:11:9b:78:ce:72:0a:0d:13:2b:09:ec:
1c:ce:1f:dd:a8:82:e1:c1:3f:3d:2d:2a:93:b6:95:
1f:40:b6:b6:26:df:39:36:31:73:8a:9f:a3:75:0a:
2b:40:c4:11:52:96:38:ca:ec:a6:3e:1e:ca:e9:d1:
37:2a:5c:33:c3:37:60:91:0d:fe:43:f9:93:11:1c:
eb:1d:81:d1:d8:3a:b0:e8:8e:65:14:a2:be:b3:2e:
ed:72:eb:a6:b2:38:3b:9e:9a:47:64:5d:6f:2b:9f:
58:3a:28:0b:ba:1b:0e:38:73:ee:82:6b:cf:52:58:
8c:d2:9f:1f:df:97:34:bc:b8:8a:26:09:92:ab:9f:
07:9a:11:fe:b5:8d:31:bf:55:b6:5e:43:86:76:87:
31:de:ae:b2:13:c7:56:52:b7:6e:1c:00:36:63:8f:
8e:20:58:be:8b:99:a1:42:f0:b2:f6:91:78:f6:8b:
4f:b6:3e:f3:45:f0:a5:a2:9b:7f:fa:c5:fe:88:3d:
29:55:cc:4e:1a:01:38:b9:05:00:3d:58:49:b5:6e:
9f:80:4d:cc:e4:43:4f:29:6e:36:16:52:77:dc:9b:
5c:81:bd:fc:fe:6b:a4:00:2d:61:bd:36:84:f6:1f:
ba:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0B:ED:E6:3A:CC:C2:C7:3B:D7:16:0A:05:DE:53:A9:89:F4:FC:98
X509v3 Authority Key Identifier:
keyid:A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3b:3a:12:4c:63:36:db:ff:93:8d:df:6c:a6:68:8f:3b:de:
41:4d:ce:94:62:de:f2:7b:f1:d6:db:94:94:7f:47:eb:82:a3:
4f:64:58:8d:c4:00:c8:fb:94:94:f6:eb:2a:60:f5:d5:c8:de:
14:a4:b6:b5:25:fe:a5:1a:cc:71:8b:a9:ff:96:8b:56:91:4f:
cb:00:5c:2e:95:d9:a3:bf:70:53:d7:18:1a:fb:ff:f6:3a:c7:
29:af:96:80:16:3e:4f:01:a8:ed:42:e1:5b:29:60:db:20:9e:
75:96:71:61:38:c6:11:c4:c3:fc:87:91:3f:4f:84:75:67:c3:
12:0f:07:5a:1a:81:d4:dd:cd:56:8a:78:f8:af:ee:6c:1a:d0:
06:47:74:ba:00:2d:40:21:98:0f:d2:79:ee:e2:20:5a:00:70:
b3:5e:b9:eb:d5:74:a8:ec:d7:ea:01:2e:6d:43:f7:ff:9f:98:
52:02:3c:b5:52:c5:9f:39:f3:68:e7:d2:23:58:53:bb:4f:85:
d1:33:a7:18:b7:db:c4:69:74:18:f0:23:ee:91:2a:84:e8:ed:
0e:28:43:37:b7:30:31:9a:68:ec:39:ec:5f:80:f1:a2:44:75:
bd:c6:d3:f6:2e:ed:74:50:64:14:bf:4b:38:fc:e8:2b:57:66:
9f:6c:d1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:25:16 2026 by rpki-client