Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.mft
File: Pt97LWi6dqC9G6fp0p-sWFIxa5w.mft (raw, json)
Hash identifier: 420ieffCBi+wOhJJqPjp+XgIWqrvm9ejSW2RtExX5Eo=
Subject key identifier: 5B:EC:B0:63:64:B6:CD:9C:2D:4B:92:88:34:E3:C7:EA:05:9F:CB:23
Authority key identifier: 3E:DF:7B:2D:68:BA:76:A0:BD:1B:A7:E9:D2:9F:AC:58:52:31:6B:9C
Certificate issuer: /CN=3edf7b2d68ba76a0bd1ba7e9d29fac5852316b9c
Certificate serial: 019D389C58890AAA066C4022B309FC1E9C75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pt97LWi6dqC9G6fp0p-sWFIxa5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.mft
Manifest number: 1333
Signing time: Sun 29 Mar 2026 08:01:03 +0000
Manifest this update: Sun 29 Mar 2026 08:01:03 +0000
Manifest next update: Mon 30 Mar 2026 08:01:03 +0000
Files and hashes: 1: EsVKmOu6uyxuiNYOoPvvDwlXKWQ.roa (hash: ZJQ/gzwRRi9pvpHLyfjBfpX4ec0DDSgkEdKketimbco=)
2: HlDrFhE-0fmgWal__tHIEXBrV6Y.roa (hash: 0n+iwbGZ5id6XfahOr8AcTWOIpNGaPq/75qxuHkAIik=)
3: Pt97LWi6dqC9G6fp0p-sWFIxa5w.crl (hash: lT+hUGOJ+xU9j/JbL9mMSUQkuz3G8lAWwr87RvQnuPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pt97LWi6dqC9G6fp0p-sWFIxa5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:58:89:0a:aa:06:6c:40:22:b3:09:fc:1e:9c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3edf7b2d68ba76a0bd1ba7e9d29fac5852316b9c
Validity
Not Before: Mar 29 08:01:03 2026 GMT
Not After : Mar 30 08:01:03 2026 GMT
Subject: CN=5becb06364b6cd9c2d4b928834e3c7ea059fcb23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a2:2c:20:0b:1e:5e:2f:51:2c:11:17:09:0d:
b0:76:e9:f4:f5:dc:3a:00:a0:73:71:4b:ab:5e:bb:
0f:5b:58:6c:0e:95:37:54:20:ac:1e:ef:2b:3f:f7:
c1:5e:43:58:f4:a5:e3:8b:88:39:6d:1a:d7:ca:7f:
3c:07:15:02:8d:9c:dd:3f:79:69:e1:68:ab:bb:00:
60:b7:59:1b:3a:6a:9a:0a:b3:d1:2c:ae:38:08:5b:
72:ea:2f:1b:b6:75:29:bd:8e:28:04:8b:d9:70:3c:
65:bd:ce:06:5f:a5:0d:0a:2b:ec:b9:5a:e4:e3:85:
8f:b9:00:52:2e:32:d1:98:72:6e:21:38:7e:aa:d0:
dc:b0:94:b7:0e:5c:27:0c:ad:04:f3:1b:56:f0:ae:
5d:d3:80:f2:44:b8:e6:8f:c1:70:d2:22:98:6c:75:
d1:a9:a1:7d:ae:61:d6:dd:7e:7e:ac:08:ee:2d:bc:
ca:de:d7:d3:6b:d8:35:68:c1:bb:24:21:6e:52:76:
b3:b9:34:9e:03:da:bd:cd:b1:af:c7:ca:ca:2f:fa:
8d:aa:91:1b:e6:cd:d2:f4:51:cd:41:99:2c:8b:91:
38:e3:fa:60:c7:c4:96:3e:23:98:3c:76:a4:c7:de:
14:5c:71:87:a7:30:dd:b3:36:50:2c:29:ff:df:13:
eb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:EC:B0:63:64:B6:CD:9C:2D:4B:92:88:34:E3:C7:EA:05:9F:CB:23
X509v3 Authority Key Identifier:
keyid:3E:DF:7B:2D:68:BA:76:A0:BD:1B:A7:E9:D2:9F:AC:58:52:31:6B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt97LWi6dqC9G6fp0p-sWFIxa5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:0b:40:f6:6e:f2:ae:d8:ce:6c:23:9d:2a:d4:db:45:0c:37:
36:9f:df:e2:18:a4:df:a2:2d:8d:f6:2b:a0:9f:ac:93:b5:9b:
8e:6c:77:5c:8a:4f:86:39:86:dd:d0:8d:12:61:c2:c6:c1:5c:
7a:7b:48:c4:69:70:c6:91:3a:07:55:f7:2b:6a:6c:16:01:54:
a5:53:1e:c3:f4:c5:0d:20:4a:ef:9e:43:d7:f3:e5:de:6f:e4:
65:c2:e8:c1:29:ed:8e:29:40:47:f0:03:bf:62:89:ee:74:2c:
06:46:f5:51:d2:2f:1a:c7:5f:a8:1e:e1:d5:45:e0:69:66:79:
72:ea:82:f9:96:c1:4e:3b:ca:b5:9c:fb:27:ae:e7:a7:5e:e3:
8e:b6:e6:c5:a3:9e:19:83:d4:e9:2c:2b:0f:a1:29:6d:69:57:
6c:60:fe:e3:c1:c4:b6:81:96:81:09:c1:e5:3c:f3:b7:05:0d:
6b:15:d3:b5:9d:24:3d:a6:83:b9:47:26:c5:5d:0d:99:b5:cb:
83:8a:80:40:fb:e8:fb:d8:a9:1d:d4:7a:38:76:d2:3b:ca:cb:
f4:9c:16:a2:e7:80:b3:85:76:9c:7f:aa:53:e1:0f:0b:c8:c3:
6d:1a:be:42:d6:a5:13:8b:4d:47:13:97:28:f4:14:05:61:0b:
a1:8d:02:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:33 2026 by rpki-client