Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft
File: pDCUIgOqL405Co2uULhamEUE_Zw.mft (raw, json)
Hash identifier: pe5PiAl91X8rrVOateYogGqo75z0nKBV8/rABCa7JP4=
Subject key identifier: 20:90:5E:8E:C4:28:5F:A4:E1:EC:3E:63:5C:20:53:6C:69:95:8A:C1
Authority key identifier: A4:30:94:22:03:AA:2F:8D:39:0A:8D:AE:50:B8:5A:98:45:04:FD:9C
Certificate issuer: /CN=a430942203aa2f8d390a8dae50b85a984504fd9c
Certificate serial: 019CAC4687A0E1E0182DD4542D05E6A193B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft
Manifest number: 1242
Signing time: Mon 02 Mar 2026 02:00:29 +0000
Manifest this update: Mon 02 Mar 2026 02:00:29 +0000
Manifest next update: Tue 03 Mar 2026 02:00:29 +0000
Files and hashes: 1: nU7s4umftAMiGN6r7wo4esT2bnk.roa (hash: L35jrGV9LS0QTr/GiGbmv85SpItryPBRv0p450JVajw=)
2: pDCUIgOqL405Co2uULhamEUE_Zw.crl (hash: 749mabLCMkaNSvCUfLacV+z7XHBTM1riR7y1klJSlQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:87:a0:e1:e0:18:2d:d4:54:2d:05:e6:a1:93:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a430942203aa2f8d390a8dae50b85a984504fd9c
Validity
Not Before: Mar 2 02:00:29 2026 GMT
Not After : Mar 3 02:00:29 2026 GMT
Subject: CN=20905e8ec4285fa4e1ec3e635c20536c69958ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3c:21:53:d8:45:1b:ff:f9:c6:0e:60:b7:a7:
22:52:15:20:7e:96:a8:0a:84:3f:43:07:ba:3e:2c:
90:cc:14:52:ce:1f:71:19:52:26:a5:06:37:fd:b5:
c6:c6:40:11:d4:aa:c7:2f:8d:28:1c:44:a0:28:d0:
ff:c3:64:36:8d:07:bb:4d:7c:93:ef:63:7d:48:32:
36:1e:dd:36:9b:34:aa:45:7a:40:5c:4a:4f:45:bd:
17:d6:d1:cf:5b:09:33:84:a5:6f:e4:ea:6c:49:ef:
8a:67:6f:16:08:fa:f5:93:69:50:e4:3a:a4:f4:b6:
d2:fa:4b:eb:47:bc:14:61:f5:64:11:da:12:9c:2e:
ff:ed:53:36:36:a7:03:96:12:f5:79:d1:c8:d5:4e:
8a:77:f1:fc:bc:b5:4d:41:6d:b9:00:27:ad:bd:81:
06:1c:a2:e1:0b:c7:d0:52:29:90:e1:e1:4a:3d:65:
45:46:f0:fa:47:90:b8:ca:88:2b:05:87:a3:8b:3a:
5a:2f:20:80:99:2d:d7:50:fc:78:bc:44:68:33:c2:
f7:c1:5a:29:cc:07:c3:00:cb:57:23:1e:62:98:6f:
3b:79:2f:8a:86:70:5d:8c:6a:9a:dd:e7:de:11:de:
3a:b1:5f:d7:b8:fc:3b:e3:4c:68:6d:3c:7c:02:9d:
52:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:90:5E:8E:C4:28:5F:A4:E1:EC:3E:63:5C:20:53:6C:69:95:8A:C1
X509v3 Authority Key Identifier:
keyid:A4:30:94:22:03:AA:2F:8D:39:0A:8D:AE:50:B8:5A:98:45:04:FD:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:f2:b3:77:d5:94:08:d0:0a:ab:2e:79:ae:90:7d:33:8e:e8:
02:c3:14:d5:49:93:f8:8c:d2:e8:65:8b:04:ee:cc:4f:4f:55:
05:3d:49:7f:76:97:b3:fb:9f:6d:d5:d0:7a:26:9b:b9:12:b3:
58:dd:23:67:7e:a6:ff:8e:38:59:d4:cf:81:55:2b:f4:17:18:
70:48:e1:67:d7:bf:14:a7:a6:d1:52:5b:fa:e6:5a:e3:85:44:
23:93:ce:9e:a1:ba:0b:82:fd:a1:0e:ea:8f:f3:13:71:11:88:
dc:b2:7d:ef:88:fd:27:f4:c5:2c:be:d4:0b:7f:52:28:2d:44:
8a:71:59:b9:52:16:e9:8b:a4:6f:ee:b3:ec:17:7b:13:c5:ac:
6d:36:31:66:b4:6e:44:4e:35:51:26:f5:4f:11:a7:10:72:b8:
24:9c:9f:72:b6:e2:d1:f8:ea:fe:cb:02:e9:2a:fa:2a:68:96:
40:49:53:e5:2d:2e:62:33:0b:0f:64:93:14:60:e6:00:60:a3:
14:d6:e0:69:44:e6:10:43:79:50:3d:b6:7f:6d:fb:86:2c:83:
50:a7:8c:98:41:41:49:62:f9:ee:d6:5f:d2:b2:d6:00:f7:49:
c7:d5:f8:ed:02:30:c5:bc:c5:cd:84:db:32:7b:85:b7:2b:22:
c3:16:93:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:07:53 2026 by rpki-client