Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
File: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft (raw, json)
Hash identifier: YVoj9eoacUiMyq5Lc5OpbFFQ5GHNhZZwY3pF4ZGtiCE=
Subject key identifier: 6E:B0:3D:FB:1A:0B:C6:51:65:35:96:B0:40:1F:43:47:FE:DF:1B:D3
Authority key identifier: A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E
Certificate issuer: /CN=a50f21c3dc93757fc03282a835600d659f961e8e
Certificate serial: 019D9AAC3AFC7D1F9F23585201940E614E6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
Manifest number: 0DA4
Signing time: Fri 17 Apr 2026 09:01:11 +0000
Manifest this update: Fri 17 Apr 2026 09:01:11 +0000
Manifest next update: Sat 18 Apr 2026 09:01:11 +0000
Files and hashes: 1: IyFwnbWnoKfZVMOw4siaFLOw0dM.roa (hash: I/fImPBHiDykSEzgNGq+cfAayabaV17LU6Onzjp6x+A=)
2: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl (hash: FV6X8zHEADBA5Moz0ZcilrS0TmsiLC9H+7g6g2AZFeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:3a:fc:7d:1f:9f:23:58:52:01:94:0e:61:4e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a50f21c3dc93757fc03282a835600d659f961e8e
Validity
Not Before: Apr 17 09:01:11 2026 GMT
Not After : Apr 18 09:01:11 2026 GMT
Subject: CN=6eb03dfb1a0bc651653596b0401f4347fedf1bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:56:28:7d:87:6d:43:e7:95:f2:98:86:35:ed:
4c:8c:d8:ca:3a:38:09:c4:7b:2f:97:8f:c3:d4:c1:
d1:ce:0c:35:1f:c3:ab:68:e6:1b:1a:ea:3f:0c:9d:
d1:17:1b:3a:7c:32:40:0d:82:fe:d0:2a:2d:d2:ee:
d7:76:5d:97:e9:34:cf:7b:06:65:02:f1:e3:f7:ac:
7a:56:21:64:a2:68:60:66:a3:aa:5c:eb:14:50:24:
be:0a:85:f1:cc:2b:19:a1:6b:6b:4b:52:07:58:b7:
64:77:69:16:8a:5c:c9:8e:e6:a2:f3:ba:b0:d7:08:
83:4e:e1:d1:dc:f7:85:71:d6:c8:3e:bb:87:7c:f4:
a5:4a:c8:f4:b2:d1:62:b2:13:2d:d6:4b:c7:50:50:
03:ae:49:c3:7e:ee:96:6a:93:26:5a:81:fe:bc:89:
88:a0:b1:1a:1b:cb:69:b6:15:9c:0e:fa:1e:5f:16:
7e:b1:d7:b3:6b:27:11:9c:f6:bd:95:a8:8c:56:c8:
57:4e:4c:d0:a1:d5:7b:6c:ac:61:26:15:d6:4b:a8:
85:4c:d0:7d:de:c4:e3:f3:2c:58:65:65:41:05:cb:
d7:2a:0c:ed:0b:eb:b1:e1:c5:65:6b:3e:ff:15:e6:
1e:d2:1f:d2:9f:5a:21:14:d7:86:d8:db:c1:c3:c9:
48:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B0:3D:FB:1A:0B:C6:51:65:35:96:B0:40:1F:43:47:FE:DF:1B:D3
X509v3 Authority Key Identifier:
keyid:A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:3d:b8:0f:68:ad:30:4a:c6:d7:c9:a9:7a:75:10:3e:a3:48:
8b:f5:ce:47:79:c1:0d:9a:ed:29:17:0f:bf:c3:24:5a:b3:33:
9c:9c:bb:d3:6d:46:33:76:14:d7:eb:6b:f6:04:cb:16:41:55:
10:55:32:e6:29:80:82:ca:c5:b7:81:87:66:df:41:52:7a:8b:
4a:fb:bd:a3:0e:a9:13:78:e4:71:60:6d:c1:2f:56:90:30:6c:
a4:1c:a8:25:d5:ae:8d:14:68:1f:09:64:db:f3:2a:68:ba:88:
f7:3e:2d:fa:0d:36:94:c5:a2:4f:8e:b5:61:ff:92:99:c5:13:
a6:9c:f5:0a:25:b2:03:c6:bf:f5:4e:a3:80:9e:03:29:a9:4f:
fa:eb:69:4c:b7:39:30:86:0c:2c:04:af:b9:42:e5:33:45:32:
ba:bc:8f:99:3b:c8:aa:81:6a:cd:a3:07:e9:7c:69:07:96:20:
8a:d3:59:59:61:8e:75:81:26:33:9a:57:40:43:87:07:61:a9:
32:32:e6:1f:48:c3:e3:78:d0:c2:64:42:09:c6:a5:3a:77:6f:
af:7f:55:de:34:50:2f:81:97:7d:17:bc:b1:35:77:cf:ea:d8:
f9:72:8e:fe:1f:7b:3d:7b:02:e3:12:44:1a:c1:79:ba:ed:3b:
46:eb:29:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:05:05 2026 by rpki-client