Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
File: P_xBJyHAxuekxXZ66YxFId71FQE.mft (raw, json)
Hash identifier: geEVV1yorHi2+AL52CqGdZ8BN6plZtGwawMv+WdifQs=
Subject key identifier: 77:8C:4C:05:EA:A0:06:7D:5C:CA:86:7E:4E:5B:48:79:2A:A9:56:FE
Authority key identifier: 3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01
Certificate issuer: /CN=3ffc412721c0c6e7a4c5767ae98c4521def51501
Certificate serial: 019D3940A4947D8FB77D1C0236260C2AFAE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
Manifest number: 179C
Signing time: Sun 29 Mar 2026 11:00:30 +0000
Manifest this update: Sun 29 Mar 2026 11:00:30 +0000
Manifest next update: Mon 30 Mar 2026 11:00:30 +0000
Files and hashes: 1: P_xBJyHAxuekxXZ66YxFId71FQE.crl (hash: Pl8f67xY0Rtztll4NRhK9K8W8M8uWoE1AVlYkuHnBGc=)
2: cJRtdE3GDxRyvg_Y9Tx3wuWjZfM.roa (hash: MkPveRr894uZyzuwskwU/N/yd8dG5AWBq5BdDGSD2o4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:a4:94:7d:8f:b7:7d:1c:02:36:26:0c:2a:fa:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ffc412721c0c6e7a4c5767ae98c4521def51501
Validity
Not Before: Mar 29 11:00:30 2026 GMT
Not After : Mar 30 11:00:30 2026 GMT
Subject: CN=778c4c05eaa0067d5cca867e4e5b48792aa956fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3c:13:5d:03:dc:45:e8:47:d2:0e:b4:26:fe:
3a:a7:76:fb:67:9a:3d:b4:e2:c0:4d:d3:e5:e9:2f:
a0:c1:db:2f:35:a8:e5:b6:63:4f:b4:c3:1d:bc:e3:
56:fe:b0:48:bf:d5:90:ff:51:40:e9:f3:34:4c:5c:
ae:05:af:c4:15:3d:c2:2e:48:cb:3d:94:2e:7a:9c:
53:3d:5a:42:c7:22:81:52:f4:f6:ae:e3:ef:91:06:
19:ae:eb:a7:16:15:6c:0c:26:f5:8d:a5:42:c4:d6:
70:c1:77:6d:01:6a:06:6c:4e:ab:5c:ac:b2:99:db:
d2:61:09:c4:97:c6:c0:24:f6:7f:53:54:07:6e:c4:
16:4a:60:45:8a:55:0b:d2:37:55:c3:13:be:0f:78:
f8:23:61:10:c5:8b:b9:a2:e8:8a:25:82:4f:38:78:
9f:3b:3e:cf:e4:bd:8d:38:b3:13:49:a6:c1:4c:45:
c6:eb:9c:b7:b0:36:3d:25:8c:89:88:ec:ed:17:60:
b1:24:63:3e:1f:7f:56:7e:56:ef:88:55:97:57:5f:
16:f8:47:1b:76:20:de:37:02:2b:ee:66:f4:29:ae:
3a:85:43:58:40:43:30:16:00:d4:39:8c:9c:e8:f5:
3f:a8:1d:37:24:66:15:c2:ff:80:2c:fa:61:39:28:
cc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:8C:4C:05:EA:A0:06:7D:5C:CA:86:7E:4E:5B:48:79:2A:A9:56:FE
X509v3 Authority Key Identifier:
keyid:3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:51:5c:b8:bc:7c:cd:6e:de:75:5b:8f:15:20:39:e6:cb:7f:
62:d6:70:a9:23:95:27:b1:2b:39:a7:8a:96:00:30:ce:63:90:
e6:36:7a:31:21:96:1b:f6:e1:03:34:eb:9a:4b:63:cb:16:64:
bd:87:28:ef:c7:a3:d1:bd:c6:dd:eb:8b:a6:d9:00:e9:64:13:
0d:95:f9:07:85:4e:45:36:ee:10:aa:cb:cb:45:fb:59:ff:d0:
a6:67:35:bf:f1:55:c8:1e:fe:a8:eb:0d:90:bf:de:c6:bc:74:
98:a4:37:a9:9c:fd:6f:86:10:74:a8:95:d1:d4:d0:98:58:40:
f2:71:25:07:06:04:c6:e4:8e:be:1a:7b:4a:5a:ae:6c:11:4a:
83:2d:cd:1e:8a:c8:37:e9:a2:85:35:62:bc:5f:99:91:18:24:
6e:64:01:a1:56:9e:60:7d:42:4d:44:fb:27:e2:e2:d1:fa:66:
b3:48:83:64:e9:fc:8e:2d:c5:38:c3:72:6a:0d:1b:66:67:3e:
cb:51:ba:da:b6:14:23:ba:25:ae:29:ae:ed:ac:ff:5d:7d:35:
1d:38:4b:32:62:b7:36:4d:f8:20:38:3f:1b:18:a8:aa:d1:26:
f1:ba:17:26:7c:64:93:36:c1:52:ef:f8:a3:09:b8:ad:a5:00:
9a:b4:86:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:12:54 2026 by rpki-client