Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.mft
File: P6xpra8ADdd6SwAYd8JYoh0f9qA.mft (raw, json)
Hash identifier: IMjfDB6FBrgG65yzR4lkeoojWMzSKnXxxGVIeOu7DUc=
Subject key identifier: 52:27:49:4C:77:55:EF:5D:9A:14:0F:ED:1E:79:63:CE:D2:0A:97:48
Authority key identifier: 3F:AC:69:AD:AF:00:0D:D7:7A:4B:00:18:77:C2:58:A2:1D:1F:F6:A0
Certificate issuer: /CN=3fac69adaf000dd77a4b001877c258a21d1ff6a0
Certificate serial: 019D37899ABA956CBC764CD1B3DC2FC66032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xpra8ADdd6SwAYd8JYoh0f9qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.mft
Manifest number: 118C
Signing time: Sun 29 Mar 2026 03:00:57 +0000
Manifest this update: Sun 29 Mar 2026 03:00:57 +0000
Manifest next update: Mon 30 Mar 2026 03:00:57 +0000
Files and hashes: 1: 8D_ccDz42u65hn5tAyiWo2rvV-A.roa (hash: gCz0hnm5CuNzouguXR5BztNrJ9eKVm7fQbCynx2RDCw=)
2: P6xpra8ADdd6SwAYd8JYoh0f9qA.crl (hash: x9Bc+FRqq/DtjJSXInucjzraXKVboAenUm2zxhSL9J4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6xpra8ADdd6SwAYd8JYoh0f9qA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:9a:ba:95:6c:bc:76:4c:d1:b3:dc:2f:c6:60:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fac69adaf000dd77a4b001877c258a21d1ff6a0
Validity
Not Before: Mar 29 03:00:57 2026 GMT
Not After : Mar 30 03:00:57 2026 GMT
Subject: CN=5227494c7755ef5d9a140fed1e7963ced20a9748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8e:76:78:83:75:47:d1:b7:67:6a:25:85:95:
1b:61:68:b3:78:ab:ca:07:45:c9:f9:df:2d:0b:7a:
c0:53:93:52:5c:18:ee:ac:22:8d:ae:fb:16:01:cd:
f1:3b:d5:20:58:a2:87:8e:52:a3:18:2e:b9:c7:5b:
96:5d:03:c6:42:8b:83:7c:df:95:25:db:34:4f:67:
32:99:84:a3:66:7a:19:ed:f5:97:77:14:48:ef:20:
30:59:53:b0:ea:06:af:89:87:f0:4d:08:53:e7:43:
9c:05:fd:fd:f7:2e:ea:f0:01:19:97:fd:c9:08:7f:
39:a0:bc:2d:50:85:82:cb:66:68:30:18:08:a8:c8:
ca:f1:e6:e9:68:96:51:ee:78:8a:1a:e9:f8:72:d0:
76:12:dc:e9:f8:95:3c:76:67:6b:e0:32:a1:88:c4:
ac:d1:9d:48:8b:5c:c6:ad:19:0c:21:22:98:cf:36:
2a:c7:e8:35:22:c4:55:6d:b5:5b:df:e0:31:c2:90:
03:87:a9:fb:40:5b:30:af:f7:55:67:cb:f7:3e:f3:
ad:79:7f:11:b1:be:23:11:fa:0a:75:2b:d7:c9:cf:
a5:48:1c:09:89:24:4c:4c:a8:a7:8f:e5:19:1b:e9:
17:5d:6b:b3:b9:28:ca:30:ec:e2:68:ca:4f:a6:9c:
22:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:27:49:4C:77:55:EF:5D:9A:14:0F:ED:1E:79:63:CE:D2:0A:97:48
X509v3 Authority Key Identifier:
keyid:3F:AC:69:AD:AF:00:0D:D7:7A:4B:00:18:77:C2:58:A2:1D:1F:F6:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xpra8ADdd6SwAYd8JYoh0f9qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:95:15:c6:f1:d8:e4:9a:3c:ca:4b:b0:97:ce:0a:95:51:a7:
f7:33:fa:95:f3:54:30:f8:97:ed:16:b2:90:df:7c:22:af:f4:
77:2c:ea:a8:e2:77:28:86:81:3a:2e:ed:44:31:30:ad:a9:c3:
dc:8f:0b:ea:e1:95:fd:59:69:56:0e:92:b6:6e:c5:1e:c6:45:
fe:af:95:0b:3c:75:a3:e0:7a:53:81:ad:31:b1:c2:f2:81:c5:
3e:a9:d1:e8:0f:c7:38:5a:26:e7:4b:34:66:87:d1:52:b2:0c:
91:3a:e3:c5:6a:c5:e0:68:9f:5e:c3:51:f3:f4:94:bd:bb:25:
bc:0d:ed:93:a3:c6:9a:ad:a9:d2:d1:d7:c5:03:8f:8e:cc:32:
60:59:2e:c9:37:ab:7d:37:9e:1e:4d:07:86:f0:13:3d:21:72:
70:43:3d:c0:42:b7:82:7b:33:ea:bb:d1:85:e0:a1:83:a5:02:
9a:90:ff:57:6b:89:0e:13:a2:40:81:69:0b:c3:12:a7:59:9d:
e7:59:81:ed:a6:ef:b2:68:6c:46:7c:b0:91:19:c1:4d:a2:91:
34:f2:9a:5b:e9:c3:45:98:fc:ab:07:2a:fd:bd:e8:dd:90:f5:
2c:d2:3d:dd:20:89:3e:02:d4:3b:3e:67:7f:88:e3:77:ea:1a:
4f:df:d4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:23 2026 by rpki-client