Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
File: P1KMlfYICrE8sEl4PpJE0z2cSzI.mft (raw, json)
Hash identifier: epyboObkrUkgJrFrcWSfii2BZn5Eevqg6FqT6p2YcrE=
Subject key identifier: EF:4A:D1:31:4B:DF:30:BA:CC:93:DC:F9:A9:38:09:03:61:C2:6C:A2
Authority key identifier: 3F:52:8C:95:F6:08:0A:B1:3C:B0:49:78:3E:92:44:D3:3D:9C:4B:32
Certificate issuer: /CN=3f528c95f6080ab13cb049783e9244d33d9c4b32
Certificate serial: 019D38D2EA9929D2EF18F538642E28BD60DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
Manifest number: 17A2
Signing time: Sun 29 Mar 2026 09:00:39 +0000
Manifest this update: Sun 29 Mar 2026 09:00:39 +0000
Manifest next update: Mon 30 Mar 2026 09:00:39 +0000
Files and hashes: 1: KDUP0PXVl9D07OvoTzwN-8-72ew.roa (hash: T2WlXoHTDqACvTk8Ydhf12NbDhvdjynMl0xLzY+ru0M=)
2: P1KMlfYICrE8sEl4PpJE0z2cSzI.crl (hash: IozvMP52PhRC97B8SVqcW4B7vrwBu/PsSOJovE83R3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ea:99:29:d2:ef:18:f5:38:64:2e:28:bd:60:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f528c95f6080ab13cb049783e9244d33d9c4b32
Validity
Not Before: Mar 29 09:00:39 2026 GMT
Not After : Mar 30 09:00:39 2026 GMT
Subject: CN=ef4ad1314bdf30bacc93dcf9a938090361c26ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:79:94:43:84:ae:4b:18:98:8d:dc:92:b5:1e:
da:13:18:83:98:93:1a:9b:02:3c:61:97:0a:b4:2d:
7b:db:55:c3:0e:15:af:83:d4:74:55:44:33:0f:54:
36:81:93:d1:ee:52:59:54:ea:0c:ee:93:3b:79:35:
99:69:cb:3c:92:4f:4d:66:5e:b2:8b:f0:8f:46:fc:
11:b8:12:c3:1d:ce:f4:f1:6d:14:78:f6:1d:fb:b7:
51:65:97:42:58:0c:ad:0a:b4:48:bf:2f:69:37:0d:
55:33:2d:5a:44:25:cc:63:bc:fe:99:ba:fd:5d:55:
68:b3:a0:ee:d2:0a:61:33:85:28:25:84:3c:8b:aa:
24:01:d5:1f:2e:5b:5d:a0:1b:7d:12:9d:da:f3:7b:
2d:d9:9a:ff:3c:8f:c1:ea:e7:a7:a2:43:67:74:0d:
42:40:54:7e:67:f1:1b:41:e7:bf:6f:cf:b9:91:12:
6d:c4:b7:b1:b0:95:d7:c9:d0:a2:9b:d6:5c:45:2d:
14:10:65:6d:e5:0e:20:79:83:df:ea:c3:a4:eb:4d:
3a:5e:eb:64:0f:02:6a:cd:87:2d:e0:74:2e:bf:7f:
44:19:25:c2:89:5d:ab:6c:08:37:c1:42:4f:86:5e:
34:8a:b7:93:5d:b9:6c:7a:e8:a1:ef:63:19:e5:4a:
0b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4A:D1:31:4B:DF:30:BA:CC:93:DC:F9:A9:38:09:03:61:C2:6C:A2
X509v3 Authority Key Identifier:
keyid:3F:52:8C:95:F6:08:0A:B1:3C:B0:49:78:3E:92:44:D3:3D:9C:4B:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:de:19:c2:b2:32:ba:f2:9a:1f:78:16:a0:d8:b7:96:28:fe:
b9:c3:a5:cc:88:8a:62:39:f9:ff:11:1e:83:98:04:f1:ca:35:
68:d9:21:82:10:2b:fe:75:9c:08:65:ed:c3:6b:1b:f9:28:83:
ac:3e:f7:01:01:0d:e3:4e:09:cf:8b:0a:bf:93:96:fb:30:f4:
ad:bd:e5:42:b6:cf:f6:58:2d:a3:a4:16:9d:f6:3d:42:00:a2:
6a:c8:d9:ea:31:4e:f8:8c:63:3b:70:95:1a:c0:5d:78:29:7c:
e8:b2:a4:4f:af:5a:3b:d4:eb:e2:53:ea:e0:90:a8:c0:06:93:
b1:7b:f9:a6:cc:04:8d:76:41:ac:bc:3d:cb:ac:6e:7a:df:67:
28:f8:34:05:16:c2:8d:6f:9e:ff:67:26:54:f1:50:32:cc:ae:
f4:66:87:ae:46:85:a4:f4:86:7c:f8:a4:d1:bb:35:71:b4:9b:
00:81:14:30:8f:83:f9:54:10:a9:b2:66:e2:cf:4a:83:99:32:
1d:3b:29:ad:12:1f:47:88:df:9d:65:81:de:78:2e:19:25:67:
af:e3:95:4e:e0:13:02:9b:92:4a:49:9b:63:b7:2d:56:92:c5:
6a:6b:4c:d1:f1:a6:ec:30:cf:55:bb:f8:37:34:3d:d5:d4:e9:
db:25:b1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:13 2026 by rpki-client