Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.mft
File: PT7Ypi7oWbzmjUAWMZ4IKiBIRac.mft (raw, json)
Hash identifier: vbyx3zaF1Cd2WhHU5Ke9xidlXqvy++OAPSS17/xvIRo=
Subject key identifier: 90:A0:2C:4C:D3:80:F5:94:86:59:7E:9C:E4:F3:09:AC:7A:16:1F:01
Authority key identifier: 3D:3E:D8:A6:2E:E8:59:BC:E6:8D:40:16:31:9E:08:2A:20:48:45:A7
Certificate issuer: /CN=3d3ed8a62ee859bce68d4016319e082a204845a7
Certificate serial: 019D386676AFF79DBF9E715F4721BE5BFC53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.mft
Manifest number: 0358
Signing time: Sun 29 Mar 2026 07:02:12 +0000
Manifest this update: Sun 29 Mar 2026 07:02:12 +0000
Manifest next update: Mon 30 Mar 2026 07:02:12 +0000
Files and hashes: 1: PT7Ypi7oWbzmjUAWMZ4IKiBIRac.crl (hash: Eaeu72t/1EI3yG4Q0T6pKe7lqwJy9phht3gP9BocT9Q=)
2: X_SK-cz3TKw7b7-is_Q-Ji4uRec.roa (hash: Xdw2xwjPivVwaHJjO+HBoTF0UNKMpoYwZBd/kG4I8fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.mft
rsync://rpki.ripe.net/repository/DEFAULT/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:76:af:f7:9d:bf:9e:71:5f:47:21:be:5b:fc:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d3ed8a62ee859bce68d4016319e082a204845a7
Validity
Not Before: Mar 29 07:02:12 2026 GMT
Not After : Mar 30 07:02:12 2026 GMT
Subject: CN=90a02c4cd380f59486597e9ce4f309ac7a161f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6c:72:20:04:f2:fd:6b:1c:15:62:55:8a:33:
fa:1c:2b:93:1d:2e:9d:fe:6d:5e:3e:e7:21:d5:46:
c7:8f:56:4e:6f:2a:33:7d:3c:bc:a8:96:26:ee:4d:
4a:2e:88:7b:82:ab:50:7b:7a:39:aa:48:7a:aa:cd:
5e:c3:fd:8f:5f:ac:3a:29:2f:a1:82:b0:c0:66:8b:
cd:d3:1b:5a:3f:cc:b2:50:37:e9:90:58:5c:25:97:
d5:7a:f5:8c:76:7e:7d:a4:6f:a6:68:b8:37:cb:27:
a1:18:f6:ee:c1:06:c7:cb:53:c1:1e:47:66:90:c7:
ab:dd:87:b8:f1:c3:92:a1:fb:16:6c:7f:04:ed:31:
93:cb:d2:3c:a8:38:35:be:b8:73:86:78:4c:e8:d5:
88:67:ee:36:66:fc:78:ab:7f:2d:a8:08:0c:ef:7c:
59:da:1b:88:5a:e6:74:d4:8e:be:ab:ed:18:40:ff:
9e:fd:b7:b6:95:7d:9a:1d:51:ea:ab:2d:91:03:c7:
e7:ea:cd:90:df:dd:1d:3c:78:3b:57:fc:66:72:ad:
d9:61:7b:94:7d:22:1e:a8:14:50:58:21:7e:d2:98:
20:63:4b:a5:8f:2f:ed:6b:27:50:ba:43:44:1a:13:
55:e8:61:6f:5e:59:09:37:2a:c9:8b:e2:d7:7f:d7:
4e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A0:2C:4C:D3:80:F5:94:86:59:7E:9C:E4:F3:09:AC:7A:16:1F:01
X509v3 Authority Key Identifier:
keyid:3D:3E:D8:A6:2E:E8:59:BC:E6:8D:40:16:31:9E:08:2A:20:48:45:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:5c:bc:11:6e:d0:3d:7f:a3:70:07:35:6d:7c:f0:f5:db:75:
2c:b9:fc:d8:e3:16:39:aa:84:ba:60:fb:62:ee:e4:19:7b:e7:
d6:14:c0:1c:f5:bc:04:89:9d:58:1d:58:f2:e5:30:2a:f7:41:
62:ee:96:65:18:cb:87:e0:a9:a3:f7:bb:d3:e9:72:34:73:7d:
97:04:ca:fc:e4:84:92:82:21:ce:36:e5:e3:fa:39:86:00:12:
42:92:13:0b:20:40:5a:f0:19:6d:fe:d0:cc:2a:10:3f:d8:b3:
59:4a:c2:52:48:f5:38:c2:03:77:0b:3b:0d:41:f3:b8:82:2a:
a7:89:2e:c2:28:b7:f0:1c:be:65:d6:a9:bb:17:95:95:f0:b9:
72:0a:9d:70:51:00:8d:ea:dd:b6:61:5d:7c:5f:04:25:10:28:
cc:03:de:67:b1:59:39:1a:de:87:87:54:2b:ef:d2:82:73:10:
9b:e9:12:65:53:4c:6d:0c:3e:6e:f7:7c:f8:a9:41:46:49:1c:
02:5d:af:0d:b4:02:78:62:b1:4f:ad:c8:85:c0:6e:cd:dd:02:
98:95:20:4c:72:20:c2:db:15:92:f8:61:b5:16:f7:5a:c7:04:
42:13:6f:d8:f4:c6:01:ab:0c:0c:89:a6:ba:55:77:70:61:01:
69:bb:5c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:24 2026 by rpki-client