Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
File: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft (raw, json)
Hash identifier: Olch8XBzhF7DTnBoh5p2eeWgemThnUOI3C5KF943b7Q=
Subject key identifier: 5D:5B:49:9E:7E:60:50:D8:59:27:F8:0C:36:F2:78:44:2E:9C:71:35
Authority key identifier: A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E
Certificate issuer: /CN=a50f21c3dc93757fc03282a835600d659f961e8e
Certificate serial: 019CAB33E2B77F7FDB8CF7E7F093E931BA1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
Manifest number: 0D28
Signing time: Sun 01 Mar 2026 21:00:30 +0000
Manifest this update: Sun 01 Mar 2026 21:00:30 +0000
Manifest next update: Mon 02 Mar 2026 21:00:30 +0000
Files and hashes: 1: IyFwnbWnoKfZVMOw4siaFLOw0dM.roa (hash: I/fImPBHiDykSEzgNGq+cfAayabaV17LU6Onzjp6x+A=)
2: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl (hash: yq7FSps+Gjqc9o9LtcZXfoI03mv59zMrpMcpcovhgSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:e2:b7:7f:7f:db:8c:f7:e7:f0:93:e9:31:ba:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a50f21c3dc93757fc03282a835600d659f961e8e
Validity
Not Before: Mar 1 21:00:30 2026 GMT
Not After : Mar 2 21:00:30 2026 GMT
Subject: CN=5d5b499e7e6050d85927f80c36f278442e9c7135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7d:b9:82:dc:5b:7b:c2:08:30:38:28:07:22:
73:e5:4f:c5:70:e2:81:f7:16:30:4b:16:6e:4f:cb:
9c:39:c8:5d:e1:2c:cd:d4:ef:df:7d:68:e6:ba:cc:
09:39:46:c0:2f:ba:07:1b:97:09:6d:83:f6:b7:4b:
47:1c:0b:6b:10:96:64:36:50:13:99:9c:db:20:02:
ab:a7:b0:c6:c5:c0:73:b5:19:87:14:f4:36:38:b5:
1e:06:b3:aa:85:c5:0e:50:62:b9:e6:04:eb:96:d8:
ec:a1:d0:d9:54:97:bd:14:7d:2c:22:14:17:dd:44:
26:eb:74:24:82:69:bc:61:2e:86:bf:df:99:55:0d:
5c:88:3b:e4:2a:e6:32:0f:51:29:cc:b5:78:d8:d7:
24:be:af:63:fd:ff:c8:8f:7b:17:1e:f5:23:91:e9:
88:e9:f6:a4:81:9d:e3:af:3d:20:47:72:74:cf:4f:
5e:99:7e:27:35:0e:92:63:e1:be:1e:68:0c:f0:9c:
eb:62:b0:ff:47:3b:8a:4f:4c:f5:8e:5c:9c:8e:c6:
f9:28:87:ee:1d:4a:48:95:f1:3b:90:59:03:e5:ee:
47:11:da:5d:96:32:93:5e:7f:f7:f2:7b:46:00:95:
c5:36:8e:73:7a:14:b6:b5:c0:fb:8e:40:c1:3d:26:
af:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5B:49:9E:7E:60:50:D8:59:27:F8:0C:36:F2:78:44:2E:9C:71:35
X509v3 Authority Key Identifier:
keyid:A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e9:31:3a:e4:92:4f:cf:59:76:73:95:0a:d5:ac:54:c0:5d:
36:45:93:e2:83:61:22:b0:d5:6a:e3:36:aa:de:e3:23:f7:e6:
92:9f:2c:52:c3:7c:7a:d0:fc:d2:68:2f:8e:75:9e:52:69:64:
53:35:ce:cd:a0:50:1f:26:74:04:6c:cb:32:12:21:79:10:a5:
9b:22:53:fc:c3:cd:af:0c:50:4f:60:28:48:ae:9a:1d:a2:3d:
69:d4:8c:15:2d:78:a9:14:a4:be:fc:11:2d:fd:2c:7b:f7:4d:
db:d7:60:31:37:d8:98:cb:77:64:d7:72:2b:f0:8d:e0:e7:c9:
c3:f0:0c:ea:40:d3:40:49:49:05:d2:98:91:ad:b7:1f:8f:10:
db:8e:39:d9:be:44:f4:49:6d:7b:db:b5:36:d3:58:f1:72:f3:
db:44:aa:30:70:34:b9:ca:27:76:96:f7:06:b8:93:06:25:ac:
dc:1b:7c:27:20:9c:f1:e1:e3:96:5f:0d:4c:78:9e:81:52:c5:
98:62:64:5c:70:05:d2:56:2c:9d:60:85:83:e3:61:aa:fd:59:
80:b0:57:d7:c0:26:9e:34:2f:10:fe:91:5d:c7:8c:77:9e:c5:
52:a2:db:3a:d6:07:a8:81:27:39:12:e9:4a:05:0e:d2:91:6d:
d1:ed:0a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:52:31 2026 by rpki-client