Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
File: pDtTIrjqOKegRNywZxp126EEPX4.mft (raw, json)
Hash identifier: Wodw7FSiY9h2gwR+xnyOet+2cWE6lusnIhpt7leTJ0Y=
Subject key identifier: 4B:97:A1:F4:D9:52:DE:67:64:40:DB:F1:18:A4:FC:97:08:FB:7B:E5
Authority key identifier: A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
Certificate issuer: /CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Certificate serial: 019CA9EA97A3C050EB67F816638FC4C56305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
Manifest number: 184D
Signing time: Sun 01 Mar 2026 15:00:49 +0000
Manifest this update: Sun 01 Mar 2026 15:00:49 +0000
Manifest next update: Mon 02 Mar 2026 15:00:49 +0000
Files and hashes: 1: AREZ7-I4dY-lVbG1KNvmj3abde0.roa (hash: 5iBy3FivOVWf36BTRuKIxy1pHWbIkHkYDe7qIgLbr7U=)
2: mMsPrtRi4JJovpyGYjWOc4wt2Ac.roa (hash: NZ9c/htksySRie6h0nflWnbh4o9NACM0t9JzBFsPMrg=)
3: pDtTIrjqOKegRNywZxp126EEPX4.crl (hash: 9c7VLzBKUhpzJljWxtzfXUkTNLyRUpdOoV60s+8TCrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:97:a3:c0:50:eb:67:f8:16:63:8f:c4:c5:63:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Validity
Not Before: Mar 1 15:00:49 2026 GMT
Not After : Mar 2 15:00:49 2026 GMT
Subject: CN=4b97a1f4d952de676440dbf118a4fc9708fb7be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:28:21:12:83:07:82:80:11:e2:0a:48:89:38:
51:0c:f9:e9:d5:98:5a:ba:65:b4:ac:ed:4d:3b:fe:
4a:ca:ed:28:e4:4d:e7:8f:7a:f4:26:7c:95:9e:cb:
8f:ea:ed:e8:64:70:6b:85:19:91:4e:39:ff:2f:70:
a9:8b:80:e3:fe:f1:d0:21:c7:09:29:bb:2d:76:d2:
dc:a7:b6:bb:8e:6e:48:7d:73:ad:e7:b1:c9:b4:62:
01:61:26:51:d2:4a:f6:3b:fb:ce:75:d0:37:21:6f:
5c:3a:b9:71:a8:ab:a4:c4:de:cf:db:e1:7a:c3:33:
a7:41:15:9d:a1:28:b5:4e:24:44:b5:73:32:e5:93:
d2:64:1f:77:0e:9c:27:e1:ce:f1:3b:d4:ad:a5:4f:
e7:68:81:90:66:ff:66:3d:a4:e2:da:07:86:a9:a4:
e9:4e:fa:29:25:c6:ad:e9:f6:77:7b:54:66:c7:85:
67:36:92:80:bd:b6:c1:9b:d8:37:92:fb:c3:2b:b8:
92:85:ab:3e:ac:26:da:87:63:bd:96:3c:69:e1:d9:
16:dd:a0:53:96:ee:eb:c7:22:26:9e:f4:8c:61:c9:
76:5a:3c:45:b6:2d:2a:46:a8:17:75:ac:74:0f:52:
5b:1b:2c:58:bc:f4:fc:95:1c:42:68:6a:9c:18:06:
28:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:97:A1:F4:D9:52:DE:67:64:40:DB:F1:18:A4:FC:97:08:FB:7B:E5
X509v3 Authority Key Identifier:
keyid:A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:59:68:f8:ab:c1:8d:e8:87:83:d7:27:ec:02:bc:88:7c:9e:
fc:b3:01:86:82:85:10:3d:db:71:f6:aa:cb:0b:4a:68:16:90:
4b:08:e4:b7:7f:75:e4:51:a7:3b:1a:05:f1:f7:ab:2a:58:d2:
37:3a:e1:05:24:68:77:a8:44:a5:6a:2e:91:dc:bb:ad:87:00:
f2:79:ba:64:98:13:3c:24:71:01:12:d1:9e:c3:14:6b:54:d5:
f8:df:65:83:87:d6:85:16:19:5c:8a:2c:5c:a3:a3:8c:91:5e:
0d:5b:5d:64:15:70:29:18:bb:71:5e:60:71:3b:e0:08:e4:f6:
8a:45:d3:94:9b:7a:f7:36:db:d8:41:ba:a4:b0:e0:89:ec:4a:
4b:6a:48:9c:75:69:92:ec:4d:13:f7:e6:61:10:72:9b:a9:2d:
03:0b:ef:b8:6c:80:5b:27:2b:5d:02:44:11:4f:9a:03:b8:9f:
67:71:bb:4a:56:07:4e:34:ef:9a:80:3b:a4:06:39:5c:c8:74:
a3:10:eb:99:a6:ad:6a:d7:f3:22:cc:43:65:b7:1b:f9:49:12:
2f:6c:26:38:25:f8:c8:85:5c:d0:dd:30:d5:c6:9b:bb:13:7a:
50:72:ee:9c:c3:ce:40:de:c1:54:8f:c3:40:24:25:e5:b4:9f:
00:83:0b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:27 2026 by rpki-client