Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
File: pT2P6iKY_zVCptwIkLEIySIYNjU.mft (raw, json)
Hash identifier: M8OnfiD+ycNtrSAD3z0DSFCW+JisTjZo0kMGemHlMPA=
Subject key identifier: AC:78:B7:2A:6C:F2:36:B5:FF:92:69:CB:91:87:B6:74:14:42:D3:3E
Authority key identifier: A5:3D:8F:EA:22:98:FF:35:42:A6:DC:08:90:B1:08:C9:22:18:36:35
Certificate issuer: /CN=a53d8fea2298ff3542a6dc0890b108c922183635
Certificate serial: 019DA30A04F215AEA68ED7569C1183B8FBBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
Manifest number: 1110
Signing time: Sun 19 Apr 2026 00:00:35 +0000
Manifest this update: Sun 19 Apr 2026 00:00:35 +0000
Manifest next update: Mon 20 Apr 2026 00:00:35 +0000
Files and hashes: 1: pT2P6iKY_zVCptwIkLEIySIYNjU.crl (hash: SLCDQ/wcfFULgUQoITLabDLM5VyDOOsp0EvtmTu+QuU=)
2: zkRoAk-heecQlcDd4NYa_uCW1tw.roa (hash: MyMSVr8o6OsojK7lNBDhOIJstHWvuZ78LlSiWHryefQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:04:f2:15:ae:a6:8e:d7:56:9c:11:83:b8:fb:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53d8fea2298ff3542a6dc0890b108c922183635
Validity
Not Before: Apr 19 00:00:35 2026 GMT
Not After : Apr 20 00:00:35 2026 GMT
Subject: CN=ac78b72a6cf236b5ff9269cb9187b6741442d33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5e:8a:35:05:b1:ff:0c:00:1a:ad:9c:b4:eb:
59:b1:52:0e:e4:63:57:e4:d4:30:d4:92:7d:30:7c:
7b:56:5f:d9:d5:b5:f2:8f:34:e2:30:7f:97:4c:4c:
21:c9:9d:37:93:12:35:ca:af:9d:41:37:b4:16:7d:
cb:f2:75:06:15:83:b3:ba:54:80:72:e8:44:f8:c5:
65:8d:4a:01:4d:37:9a:94:e8:5f:6b:16:00:1b:1f:
a6:6d:0a:07:49:3a:9d:63:a4:2a:6a:2d:9d:12:a4:
2d:33:60:ac:89:75:49:46:a2:51:64:3c:33:73:3e:
fe:03:8d:56:b0:f2:ff:5d:39:33:b2:5f:68:7a:45:
76:2e:3e:ab:d9:b6:28:a9:0b:dd:f4:7e:78:8d:d9:
51:ee:66:4a:49:ef:18:95:ea:0b:ab:4e:88:d3:0d:
12:63:a0:3c:0a:99:df:86:9f:94:ba:18:5c:1f:11:
ad:02:7a:08:81:92:ef:c4:4f:a4:64:b7:42:d3:19:
c6:3d:89:d9:73:a8:cf:9d:2c:80:12:72:cf:8b:1f:
5c:9c:0e:7c:07:b9:9c:ba:d9:64:16:d0:9c:1b:98:
56:62:df:1e:cf:5b:c8:f5:f2:89:81:71:1a:13:c0:
68:ad:22:ae:7d:01:38:39:a5:e6:d8:c7:8c:85:42:
3f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:78:B7:2A:6C:F2:36:B5:FF:92:69:CB:91:87:B6:74:14:42:D3:3E
X509v3 Authority Key Identifier:
keyid:A5:3D:8F:EA:22:98:FF:35:42:A6:DC:08:90:B1:08:C9:22:18:36:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ea:71:3d:55:d6:17:a5:4e:68:86:4e:ed:ec:af:78:2c:ad:
37:40:50:50:23:29:8f:45:57:06:90:1b:e8:1c:c5:b4:1c:08:
c3:b0:29:b5:b1:7c:bc:ed:69:8d:ac:c7:df:97:7e:fb:2e:b5:
fd:4a:ef:8b:3e:97:cf:04:38:c7:c0:5b:87:4c:34:0a:96:4a:
e0:6d:db:36:a1:3c:c2:85:39:0a:ab:72:b7:b3:99:86:1a:0e:
6c:e4:2e:ec:56:c5:80:72:c9:f7:84:2c:25:53:19:b3:8c:9a:
dd:d8:44:55:57:2b:c2:02:9a:85:d4:b9:64:fe:e7:bf:13:d5:
cc:a0:88:e1:41:5d:d1:02:72:64:0e:35:be:d6:09:bb:02:79:
00:71:2c:66:25:ff:09:a0:e7:a7:94:2f:10:d3:3e:dd:ef:70:
a3:8e:7a:a4:26:ae:67:65:60:ec:8f:98:06:cd:56:e8:ec:a5:
4d:aa:9e:51:75:8d:6e:61:82:54:1c:b8:11:cc:f7:7e:7a:80:
d0:c6:7e:d1:00:34:3b:ff:4f:6b:c1:7e:d3:de:b9:60:23:a6:
92:93:56:e4:e1:a1:9c:15:1a:aa:f4:a1:46:2f:c5:3c:23:f0:
95:7a:73:fb:94:7f:b7:21:f3:c4:fe:73:0d:59:64:6d:ab:da:
f8:8a:a3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:08 2026 by rpki-client