Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
File: pT2P6iKY_zVCptwIkLEIySIYNjU.mft (raw, json)
Hash identifier: NR9TKQfwp2/qXv92jGW63OArL6B2b1GoqkrlSzd2Tkg=
Subject key identifier: 05:32:F7:EA:C9:68:F1:3F:CB:79:EA:A5:D0:31:04:02:5A:64:26:06
Authority key identifier: A5:3D:8F:EA:22:98:FF:35:42:A6:DC:08:90:B1:08:C9:22:18:36:35
Certificate issuer: /CN=a53d8fea2298ff3542a6dc0890b108c922183635
Certificate serial: 019CABD99E9B10DB3B2AD7E78E36E71CD226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
Manifest number: 1090
Signing time: Mon 02 Mar 2026 00:01:31 +0000
Manifest this update: Mon 02 Mar 2026 00:01:31 +0000
Manifest next update: Tue 03 Mar 2026 00:01:31 +0000
Files and hashes: 1: pT2P6iKY_zVCptwIkLEIySIYNjU.crl (hash: E5VipPZFGhrE/fvDjtVCm+0QbL7lDvo1mOF6aKHR4b8=)
2: zkRoAk-heecQlcDd4NYa_uCW1tw.roa (hash: MyMSVr8o6OsojK7lNBDhOIJstHWvuZ78LlSiWHryefQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:9e:9b:10:db:3b:2a:d7:e7:8e:36:e7:1c:d2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53d8fea2298ff3542a6dc0890b108c922183635
Validity
Not Before: Mar 2 00:01:31 2026 GMT
Not After : Mar 3 00:01:31 2026 GMT
Subject: CN=0532f7eac968f13fcb79eaa5d03104025a642606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ca:29:24:8e:0e:b4:93:ff:5a:3b:9d:82:43:
00:75:bf:3e:99:ec:ee:da:c3:94:a4:e5:d0:f9:5e:
55:5e:ad:51:04:fa:e8:2a:fe:e0:ca:49:6b:96:9e:
e1:af:68:ce:62:6d:9e:e7:a3:3c:73:fa:59:f3:74:
a1:45:ea:55:f9:34:bc:97:0e:d9:4e:9f:78:eb:97:
6e:fe:8c:70:a7:3b:b7:8b:a2:d1:e1:25:6c:6e:b5:
22:8c:73:73:89:2d:f1:b8:e2:74:68:72:e2:4a:7a:
78:1c:97:69:36:f3:da:4d:09:20:a6:73:79:ac:33:
48:25:53:c3:cf:0f:8a:ca:7b:41:47:dc:e7:e0:aa:
b3:d2:fd:f5:88:c9:76:1c:2a:e4:9a:78:23:f8:b9:
46:65:91:3f:d7:0d:73:43:14:f6:9e:5d:9e:b6:54:
5f:aa:c6:3d:2a:a1:be:96:a6:77:2c:1c:4d:2b:c9:
97:a7:e2:98:e7:e1:e5:1c:5d:60:fc:7a:39:45:3c:
3c:91:d3:da:1e:21:41:5b:b0:2b:29:ba:a5:d7:a2:
cd:5e:b4:93:17:e2:e2:6c:ad:9a:85:07:6a:cb:b2:
52:48:c6:bf:98:4b:03:91:a4:50:02:93:7e:6b:85:
ce:6b:5b:04:18:62:22:6a:fb:a0:1c:c7:cd:c0:35:
a6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:32:F7:EA:C9:68:F1:3F:CB:79:EA:A5:D0:31:04:02:5A:64:26:06
X509v3 Authority Key Identifier:
keyid:A5:3D:8F:EA:22:98:FF:35:42:A6:DC:08:90:B1:08:C9:22:18:36:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b2:58:84:e9:b0:da:d8:9a:39:a9:f1:f4:2e:bf:cd:73:45:
38:58:7d:e8:bc:97:23:4b:a8:8d:2e:3e:c3:7d:14:88:1f:3a:
99:5e:e4:4c:52:7a:fd:67:73:1b:d7:29:4e:24:c8:1d:fa:f7:
f3:9c:36:ed:d5:13:0a:57:6b:23:39:a6:37:b1:d2:56:ff:52:
21:7d:6a:a7:b3:33:84:49:eb:76:a8:bf:aa:8c:cd:f6:75:bd:
b9:38:89:96:bc:02:6f:b4:d7:0a:9f:4c:de:c3:90:44:88:6c:
9e:43:07:58:bd:d6:6c:ea:53:1b:60:60:1c:33:e6:5c:07:69:
b4:36:1e:9e:b2:d8:84:47:ec:c5:a2:9c:01:93:8d:86:8e:85:
da:ed:ec:7d:ca:6f:1d:c1:c6:23:cb:21:c8:3a:4e:0e:d6:77:
5a:78:74:b3:36:6d:e7:57:48:58:eb:e1:15:e5:55:72:a9:42:
1a:91:ec:9f:76:d0:b0:31:f4:bf:cc:5c:ee:9d:41:38:13:dc:
34:67:cf:46:61:b0:0f:6c:39:b6:20:af:29:82:1a:d1:d4:b0:
a4:e6:79:4f:cf:59:03:9c:61:52:ed:27:76:8d:74:05:ce:a2:
19:ab:b5:0e:86:54:d3:ad:cc:03:4e:65:16:74:8f:d6:b1:33:
2d:68:99:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:47 2026 by rpki-client