Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
File: P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft (raw, json)
Hash identifier: rXANwrPxLc6q7v24QN2Xa87WdIfVfCYc9wHnzk83Tpg=
Subject key identifier: 3F:41:FA:95:10:AA:3D:6E:2E:4A:9F:12:61:02:77:E2:31:AA:30:BE
Authority key identifier: 3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4
Certificate issuer: /CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
Certificate serial: 019CC4BD32CA32A0CDE77E1344CDF327DC3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
Manifest number: 087E
Signing time: Fri 06 Mar 2026 20:00:59 +0000
Manifest this update: Fri 06 Mar 2026 20:00:59 +0000
Manifest next update: Sat 07 Mar 2026 20:00:59 +0000
Files and hashes: 1: P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl (hash: kB/mCyKvTy0+ZTzoBhHbJ78I+yRIE/POVNDzF9NXpL8=)
2: chpnAXFJwcK5gPySDUqDwv2KJTQ.roa (hash: d6pR8bXGH3hR06eFSNsTttirZQu9Egnz7/1ylze2N3g=)
3: w1VM5LXh7FEfVyRRuosBCx58msI.roa (hash: 80uaSD8iAl9E3bi1bc+SHSLnshKOTiNv4svzxGeVOX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c4:bd:32:ca:32:a0:cd:e7:7e:13:44:cd:f3:27:dc:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
Validity
Not Before: Mar 6 20:00:59 2026 GMT
Not After : Mar 7 20:00:59 2026 GMT
Subject: CN=3f41fa9510aa3d6e2e4a9f12610277e231aa30be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7e:46:63:b6:75:75:05:e1:39:59:1d:fb:13:
ee:20:70:75:9e:a6:95:29:2c:ee:c8:20:bc:6d:38:
93:db:a5:34:26:b7:7d:b2:42:15:83:d9:ff:f3:12:
f1:d1:8f:1d:32:c4:3f:5e:8a:87:01:24:ac:76:a9:
ec:aa:c4:b1:d3:8f:67:2f:01:54:27:36:97:3d:93:
c6:39:c8:d8:8a:77:dd:f3:b2:86:d7:54:60:1c:ab:
a7:d9:14:a4:85:4c:a7:50:db:c5:b4:81:88:b1:58:
90:d2:e4:d4:75:71:36:da:a0:a5:37:45:25:f8:a3:
68:f0:1e:40:db:8c:86:05:64:b5:a4:a7:ed:ab:12:
77:aa:f1:13:04:ef:0d:88:21:a7:ec:39:00:4a:89:
d3:b0:3f:db:7f:88:cb:d7:07:11:bc:a0:52:1f:89:
ae:69:42:fc:49:05:b6:2b:da:04:e5:60:b1:d2:c0:
c3:47:9d:40:06:4b:6b:8e:90:fd:a9:f8:5e:5f:ff:
a0:e4:e5:17:ad:ed:dc:a1:c4:6c:ef:ef:cc:59:33:
b2:59:e7:d4:62:92:38:da:ea:cf:2d:8d:ba:c9:79:
60:53:84:83:38:0a:a3:94:03:7e:1c:9e:30:b3:4f:
a8:f6:bc:12:46:47:bb:9e:1b:46:07:9d:0b:df:b5:
6d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:41:FA:95:10:AA:3D:6E:2E:4A:9F:12:61:02:77:E2:31:AA:30:BE
X509v3 Authority Key Identifier:
keyid:3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:fb:e8:a5:a1:90:88:35:42:aa:64:14:2c:fd:de:b0:88:20:
a5:72:9f:fe:d0:ef:96:80:9c:6e:54:44:2f:17:93:6e:b5:6c:
09:32:71:35:6a:80:0f:9e:9d:18:c8:c6:99:df:8e:fb:1e:ad:
6a:de:ea:06:76:11:ed:ec:5d:c1:7a:8f:20:b0:56:af:95:a4:
90:8a:01:cc:96:39:2d:e4:17:b0:6a:34:78:3b:a8:78:df:4d:
9c:c7:d8:89:dc:0b:cd:6f:e4:c8:66:d1:1d:a0:97:42:53:ce:
e4:3c:4e:b5:5b:47:a9:59:13:0d:7c:33:6e:a8:98:79:8a:39:
e3:49:40:08:b6:4a:3e:76:62:a2:cf:e5:0e:76:54:80:54:c6:
3f:75:7a:ee:ec:56:a7:7b:5f:08:56:c4:07:f7:5a:3d:d7:ee:
41:4a:fe:25:79:ef:a5:1f:35:bb:1e:0a:11:3f:35:6a:af:47:
d7:df:de:8d:81:31:5f:89:c9:4e:a1:5d:66:0f:b9:9f:23:3e:
e5:ab:21:86:78:ba:50:00:32:f8:31:98:ce:86:fd:32:63:fb:
2c:43:b6:5c:55:31:80:ee:40:01:b2:83:80:cb:94:43:c9:b3:
79:0e:cc:83:29:cf:28:8f:1b:02:11:d0:cb:2d:3f:33:12:8a:
e7:66:7d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 06:28:28 2026 by rpki-client