Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
File: Pv3irXEjs6hgCAWIBbsQFva3P7A.mft (raw, json)
Hash identifier: dMVAovMdP75L6gyiS+Jw3Cf094og75ToJktyNik+vGI=
Subject key identifier: 2D:78:13:54:54:DC:8B:FB:5A:4D:73:AB:B7:04:10:2E:49:42:81:74
Authority key identifier: 3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0
Certificate issuer: /CN=3efde2ad7123b3a86008058805bb1016f6b73fb0
Certificate serial: 019D37C01C9EACB34ACC3B2D3E1AEFAD662B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
Manifest number: 1419
Signing time: Sun 29 Mar 2026 04:00:30 +0000
Manifest this update: Sun 29 Mar 2026 04:00:30 +0000
Manifest next update: Mon 30 Mar 2026 04:00:30 +0000
Files and hashes: 1: 7v2ZUdL5cbvsxZ3SJ5Ih0L5h5Cw.roa (hash: Fh4U2aM1V+vRKIdMaRS0oiOF0z5hb7HFVxTHs/Kfn8g=)
2: Pv3irXEjs6hgCAWIBbsQFva3P7A.crl (hash: kZpZhj3rjAn+Sk9XehxzbHRwdAbHLb+FktKVDsnMGdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:1c:9e:ac:b3:4a:cc:3b:2d:3e:1a:ef:ad:66:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efde2ad7123b3a86008058805bb1016f6b73fb0
Validity
Not Before: Mar 29 04:00:30 2026 GMT
Not After : Mar 30 04:00:30 2026 GMT
Subject: CN=2d78135454dc8bfb5a4d73abb704102e49428174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:04:28:e9:11:01:dd:99:6c:b5:a8:0b:8a:53:
0b:32:fc:c9:49:9b:12:04:e1:6e:7e:d3:03:fe:2e:
d9:53:82:1e:69:1d:b5:3e:da:e2:e2:3d:c3:e4:06:
63:9d:4d:49:d3:a8:b7:ab:85:3b:8a:4d:c0:7c:dd:
12:6c:c1:93:78:6f:03:cc:75:39:a2:95:47:eb:f0:
85:3d:4e:3c:ef:15:3a:43:a5:5c:a1:f3:7d:13:49:
7b:5a:60:97:c2:14:a2:99:fd:46:4f:7b:9b:43:f6:
e5:9e:59:aa:77:1d:23:a0:09:41:b2:17:ad:82:72:
45:71:b8:18:1b:08:81:d7:71:3d:8d:3c:6a:24:0e:
9d:ee:77:4d:1b:75:c7:0a:f8:0e:21:17:7f:9f:a1:
6a:8b:33:6e:c2:4c:a4:a9:05:56:3a:79:4f:9f:6d:
ee:27:85:0b:df:f5:ed:91:d4:a5:76:6b:bd:7f:c8:
b9:a2:90:ea:60:62:c8:29:c3:5f:25:4c:66:7e:6f:
cf:4f:21:22:db:bb:47:c1:fa:03:38:4a:08:28:12:
3e:c3:4d:2d:7d:2d:7e:5e:c6:d0:87:fa:cf:21:83:
86:ff:1c:7e:57:6e:c4:d1:89:02:c8:9b:cb:2c:19:
25:39:17:58:de:85:d7:f3:49:a2:94:66:40:8c:30:
02:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:78:13:54:54:DC:8B:FB:5A:4D:73:AB:B7:04:10:2E:49:42:81:74
X509v3 Authority Key Identifier:
keyid:3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ee:3a:3d:ef:6f:f6:1d:8c:3e:6d:81:73:db:d1:7c:38:b4:
e0:17:52:9d:ba:42:9d:2f:94:b2:7b:a7:f7:34:e5:f7:28:b7:
19:c1:de:b2:d5:0d:62:9e:d3:eb:aa:84:54:df:10:1d:7f:cd:
96:5a:97:17:ce:e1:d2:cd:c3:6f:77:02:90:53:77:39:79:ad:
7a:d8:8d:d7:99:c0:b3:a9:5e:11:60:6b:35:0c:c2:b4:58:c8:
19:99:0d:1a:8f:e2:2a:e3:ac:bb:32:5a:5b:75:4e:56:7a:9b:
20:fb:1e:b1:dd:d5:a6:3f:e7:cc:c5:ec:fc:89:52:85:8e:69:
9f:a3:db:36:27:5d:96:5e:18:d8:a1:a4:41:7f:a4:2a:31:79:
73:f7:a7:3b:70:6e:fa:bc:f5:8b:65:59:2b:7d:17:cd:03:e0:
c2:46:2a:c5:5c:26:3c:69:18:f0:35:7d:58:c7:fe:09:a4:41:
a2:32:0b:e7:4f:fd:9d:8c:b4:7b:54:84:a9:94:e6:a7:96:85:
59:1b:ec:9a:9e:6b:e9:56:7c:5a:ab:3d:b8:b5:eb:fa:ff:58:
cb:5c:e8:b8:88:00:f2:01:21:25:66:3c:19:c2:bc:92:71:71:
92:ff:4b:dc:b9:9a:fb:b0:ec:bf:57:39:59:c8:e4:69:e5:71:
cc:a1:f0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:41 2026 by rpki-client