Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
File: pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft (raw, json)
Hash identifier: yelSc2P0uBXaRJNzMgD6BOj4XX0y1k3qyhVyY8xH3XY=
Subject key identifier: 19:C7:54:D6:CA:01:00:74:0A:70:92:9B:C7:ED:33:10:E9:81:9E:0B
Authority key identifier: A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0
Certificate issuer: /CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
Certificate serial: 019CABD9DDACDA9EF471A91C1902DC6970BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
Manifest number: 0DC9
Signing time: Mon 02 Mar 2026 00:01:47 +0000
Manifest this update: Mon 02 Mar 2026 00:01:47 +0000
Manifest next update: Tue 03 Mar 2026 00:01:47 +0000
Files and hashes: 1: Z8sIth2fuLtbZU5YZYofujl3N3Q.roa (hash: OuZ+DZI7vPFF2f+5cYLFAwbQ08o0C2E+Uzidod1oA7I=)
2: pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl (hash: iTIDziaA3qCwPHRoIpgutCFMv2Hm33XTESJr6V7gyRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:dd:ac:da:9e:f4:71:a9:1c:19:02:dc:69:70:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
Validity
Not Before: Mar 2 00:01:47 2026 GMT
Not After : Mar 3 00:01:47 2026 GMT
Subject: CN=19c754d6ca0100740a70929bc7ed3310e9819e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f7:12:22:c1:3c:37:fa:21:4b:97:b9:f1:aa:
a6:94:68:b3:be:65:d7:18:97:dc:0b:5a:ee:8d:ba:
ec:53:ab:73:44:c4:17:41:da:c6:1c:ef:f7:bc:a8:
87:2a:b8:12:99:54:de:e1:3e:d1:3f:1c:2e:6c:be:
51:08:de:b6:58:1f:07:76:95:72:db:ad:80:d3:1d:
30:3f:2c:4c:a2:b6:c3:70:7f:4c:86:ff:93:ed:58:
5a:6d:90:48:49:32:bd:27:53:7d:ce:78:5a:ed:72:
6c:22:23:39:f7:b3:e3:6e:bd:20:f7:54:f3:16:72:
e4:23:5d:9e:53:d3:5c:8a:07:2b:1a:68:cb:b4:9c:
b5:cc:65:0b:c3:ed:4b:e4:26:2b:6b:04:dc:7a:66:
af:a6:26:ed:0f:53:cd:27:1c:ad:ec:9f:e0:b6:84:
7f:07:61:25:96:8f:bf:d1:90:a1:62:ab:79:c6:22:
e3:1f:0b:42:3f:70:10:56:ea:d4:0e:2f:00:d3:01:
8e:ef:c7:4a:f7:0f:f6:77:2f:10:89:c4:7e:ee:c2:
d9:65:c7:0f:3e:0f:c4:e4:11:3a:6b:c4:d6:48:92:
9c:34:b7:cc:fb:a3:67:96:c7:33:22:61:7d:b6:be:
e4:45:f3:53:e5:53:fe:a5:d9:00:6a:ab:2e:58:42:
14:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C7:54:D6:CA:01:00:74:0A:70:92:9B:C7:ED:33:10:E9:81:9E:0B
X509v3 Authority Key Identifier:
keyid:A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:fa:28:66:9c:be:15:41:11:7f:8f:25:a0:a5:59:52:ca:b7:
67:ef:bb:e7:3a:29:f3:52:27:39:fd:72:47:5a:b7:6b:b0:f8:
2e:63:37:07:aa:ab:18:9c:32:9c:d0:52:e7:08:30:f3:5c:a7:
e0:d8:7b:fd:a2:ee:f5:70:94:5c:18:a7:df:20:a6:8d:56:b4:
97:e1:69:26:f3:ef:fa:d5:92:c2:90:25:9a:99:30:3c:3f:e8:
25:fd:46:5a:b6:0a:79:a7:11:be:e8:05:30:6c:fd:1b:2f:88:
f9:9c:b1:6b:c1:a0:84:38:3b:d8:b2:12:37:b3:03:22:74:5f:
6a:6b:3a:e0:36:7d:f1:61:de:e2:2a:ff:6d:81:3d:ec:57:b8:
ab:32:75:7e:bb:7d:36:b4:ba:d9:f9:35:01:9a:20:07:53:9f:
29:8a:09:97:4e:f0:eb:07:3c:0c:60:1c:ac:38:70:db:d5:cb:
5f:89:c4:9e:5a:16:fd:b0:b3:0a:75:55:fb:3c:4b:40:89:a7:
24:0a:fb:6b:ff:d4:55:c1:83:19:4c:6f:86:c2:3f:37:c1:8f:
74:cd:bc:9f:2d:54:b0:7d:0a:c2:9b:95:94:18:6e:d6:cc:62:
ea:14:c3:ea:02:cf:e0:17:f4:f6:b8:dd:bf:a8:7e:74:58:0d:
7c:1c:1f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:44:02 2026 by rpki-client