Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
File: pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft (raw, json)
Hash identifier: 5PEohzy5wRXY531/n2G1pUuNflfCSj6Y6iuM/0fMcXo=
Subject key identifier: 15:A9:2F:1F:4A:76:76:69:55:28:40:34:8E:5D:1C:CD:C3:48:61:BB
Authority key identifier: A4:C9:3A:B3:64:C8:78:32:E7:77:62:26:EE:E6:C1:31:DB:E1:53:BB
Certificate issuer: /CN=a4c93ab364c87832e7776226eee6c131dbe153bb
Certificate serial: 019CA9B3A17EAE68851FCE6EE9BE3CE9C91F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 14:00:47 +0000
Manifest this update: Sun 01 Mar 2026 14:00:47 +0000
Manifest next update: Mon 02 Mar 2026 14:00:47 +0000
Files and hashes: 1: lI1XK5SZ4unF2gsULOFdifpJAaI.roa (hash: rfS2OFj3wmP/4G5TYdNqf/vwvU8JRB0c9MwtD5rUi20=)
2: pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl (hash: FHqI/PcObpn6ledhdM2+X7xQK0uJX7q49eh8mG3PFJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:a1:7e:ae:68:85:1f:ce:6e:e9:be:3c:e9:c9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c93ab364c87832e7776226eee6c131dbe153bb
Validity
Not Before: Mar 1 14:00:47 2026 GMT
Not After : Mar 2 14:00:47 2026 GMT
Subject: CN=15a92f1f4a767669552840348e5d1ccdc34861bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2e:5a:13:06:21:2a:c8:e6:06:36:6b:3b:fa:
7d:04:92:5e:12:54:ab:1d:3f:aa:b4:be:fd:2d:40:
52:db:a3:ee:aa:3a:56:29:6c:6f:3d:07:8e:c7:52:
02:63:70:e0:0d:7f:07:e1:9d:15:7b:bc:fd:f6:9c:
d6:22:ab:02:67:ed:83:e8:89:ce:f5:c2:de:dd:ce:
10:fb:34:0e:41:81:95:31:66:ec:34:57:9b:1c:2b:
bb:36:47:d6:ff:a5:44:d2:a4:89:c0:77:85:01:8e:
f5:61:42:eb:47:57:4a:e0:8f:b6:ad:ef:7f:a9:62:
c4:2f:d2:72:ce:f2:3b:00:4e:64:1f:31:58:b8:86:
9e:b4:5d:34:b0:53:3b:12:ba:76:60:4b:85:63:2e:
ac:88:42:97:40:c0:61:53:67:83:b2:6e:b8:8b:45:
50:0b:93:28:4f:8b:b1:91:2f:f7:98:03:87:d4:a8:
36:b4:5f:84:28:c0:d2:69:7b:e6:8f:a2:79:fd:09:
e7:ba:7b:fb:c4:97:0a:ec:98:a4:84:46:93:bd:5e:
33:42:b9:60:93:99:df:11:a6:04:39:98:61:59:c4:
2b:bd:c0:05:5e:72:7a:f7:54:10:00:0a:37:86:7f:
32:f1:5e:85:54:ec:c0:6a:f3:00:e6:f5:eb:6f:2f:
c2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A9:2F:1F:4A:76:76:69:55:28:40:34:8E:5D:1C:CD:C3:48:61:BB
X509v3 Authority Key Identifier:
keyid:A4:C9:3A:B3:64:C8:78:32:E7:77:62:26:EE:E6:C1:31:DB:E1:53:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:5f:8e:a2:25:d2:49:d7:1e:dc:56:df:d2:62:80:e0:2b:94:
09:76:18:45:ec:6c:9e:0a:13:32:30:91:8e:4e:09:56:bc:33:
20:af:09:83:68:32:13:4e:f1:e2:1b:94:05:43:3f:d2:dc:51:
19:6e:e7:1f:2b:0b:e9:4e:a0:86:1e:15:98:28:7a:37:18:44:
8a:76:56:9a:5b:78:47:3b:be:51:aa:8f:64:df:93:22:be:53:
9c:2f:ca:64:9f:9d:d3:f8:49:eb:1f:05:f2:f8:79:fc:b9:f1:
87:48:73:90:99:5b:28:a3:64:27:f6:5e:b2:a1:34:01:8e:17:
c8:07:b0:a2:86:da:3c:36:67:0e:da:da:35:4e:89:17:5d:80:
4b:a6:31:41:c9:db:2f:10:72:31:89:18:ca:4f:90:9a:34:3e:
66:89:20:ef:07:7d:f5:b8:35:4f:41:2b:b1:a5:d6:6b:a6:ca:
90:3b:48:21:51:78:8c:77:85:6d:fb:3f:c1:e4:a7:2f:48:48:
05:49:82:72:1c:28:32:3b:82:4d:4e:ea:98:c0:69:eb:84:f7:
f8:d0:b3:f9:c8:34:6f:7f:62:92:ac:89:b7:6a:f1:bb:c8:22:
f7:1a:55:e0:af:48:f0:32:88:c4:ee:28:17:cb:22:59:bb:5c:
fb:9c:71:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:49:52 2026 by rpki-client