Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
File: P1vEQBQoW28-KHKuz11PM-Jozos.mft (raw, json)
Hash identifier: mPLf6TYST+U05pvkDpd99Zk3r1JzaPA8CSULmwJBoHc=
Subject key identifier: 1F:83:32:57:B4:B0:7A:DB:4F:25:40:20:C0:52:48:FE:E8:4F:CF:C2
Authority key identifier: 3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
Certificate issuer: /CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Certificate serial: 01A0F11E0BB233AA10533EFDB7B1293149BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
Manifest number: 0B7B
Signing time: Wed 30 Sep 2026 07:01:13 +0000
Manifest this update: Wed 30 Sep 2026 07:01:13 +0000
Manifest next update: Thu 01 Oct 2026 07:01:13 +0000
Files and hashes: 1: Mr6edMVNczrnTD4fPbHhkJ_t0BI.roa (hash: B3H6ipVEXV+RUc2+4VXrDuLYCDQcw876zTiowv2ss50=)
2: P1vEQBQoW28-KHKuz11PM-Jozos.crl (hash: RTSrizarrLx4Wq18pq+yFefzXIdmdNXpHKhVV9f/0OY=)
3: UZU-y9KjwHBRwAFBMLEzFqF8gQE.roa (hash: 8IesYOSWF04JS1YDSdciYf6tHgm62U6HhGDalYAE7s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:1e:0b:b2:33:aa:10:53:3e:fd:b7:b1:29:31:49:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Validity
Not Before: Sep 30 07:01:13 2026 GMT
Not After : Oct 1 07:01:13 2026 GMT
Subject: CN=1f833257b4b07adb4f254020c05248fee84fcfc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a2:3e:b0:5c:9c:e0:46:c1:06:7d:60:bd:8d:
77:4a:16:61:95:44:23:6d:44:46:c1:3b:a4:6f:a4:
78:59:d7:44:32:55:54:d1:5c:2c:0a:63:4f:11:fa:
eb:ee:0b:d4:24:6e:8d:33:f7:e5:5c:ec:5c:7b:51:
e4:4c:6b:6a:6f:85:75:df:b7:b1:80:2b:8d:4a:0b:
4a:7d:a3:f8:8f:91:49:76:67:b8:67:50:40:6e:bb:
09:02:bf:71:52:0f:3e:c4:06:67:71:4e:84:a0:dc:
d2:8c:da:87:25:4e:15:62:ee:7d:30:20:e2:18:ab:
68:ff:90:24:61:9b:75:35:69:5d:6d:a1:3f:47:d3:
43:36:73:57:9a:19:d8:0b:2b:db:a5:b3:cf:4b:b5:
63:18:68:1b:3d:75:7d:b4:a9:b9:fc:5d:7a:a5:6e:
50:5d:47:b1:ff:d1:e1:67:b9:f4:ae:fd:40:a4:88:
3d:cf:73:c0:27:51:1d:82:eb:8e:06:e0:b9:0e:f9:
a6:1c:92:47:0e:d0:6b:d1:2b:30:87:4c:db:bd:c4:
82:6f:36:6d:43:ba:a8:da:1f:86:ea:96:77:62:10:
5d:2c:45:98:27:59:ad:24:42:c8:18:45:e9:02:1f:
e9:de:2c:75:ae:49:41:1e:a1:17:19:d4:31:a8:3a:
86:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:83:32:57:B4:B0:7A:DB:4F:25:40:20:C0:52:48:FE:E8:4F:CF:C2
X509v3 Authority Key Identifier:
keyid:3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:46:a3:d6:d2:76:3f:08:20:e3:24:a0:5a:da:41:60:f9:f0:
6a:b0:51:ba:f2:6a:05:16:83:80:55:fc:af:c9:e8:8c:05:31:
66:ff:d9:fa:d1:3d:bf:ef:a1:ed:43:2d:c9:ad:e0:e9:60:3b:
ca:0b:06:aa:33:38:d2:b2:90:ab:98:03:9c:2f:7e:a8:1f:2d:
5b:59:ab:dc:40:12:83:c5:8c:9b:fd:aa:e6:1e:03:67:a3:2d:
30:00:5d:06:81:f7:38:41:19:18:d5:19:c3:de:ba:c1:d2:b6:
58:b5:6c:bf:13:78:95:1a:28:24:7b:a5:07:40:19:81:21:f7:
38:41:50:64:fa:08:ce:2a:4c:4a:c8:9f:8c:19:63:6a:72:60:
4e:1a:0b:bb:a8:c8:2c:98:60:d7:27:81:7c:a4:67:90:c7:53:
32:24:21:5a:6e:31:68:6d:72:bb:e6:bb:10:35:f2:a5:21:11:
6c:4a:92:14:12:02:b5:eb:53:2d:fa:f7:50:07:11:65:7f:b5:
e4:25:a6:6d:c9:23:17:3f:13:0d:b7:b0:49:6f:3c:36:0f:8e:
37:29:37:0f:c0:a8:e4:c4:81:7e:9f:18:aa:b5:73:65:eb:b5:
d0:54:9f:a4:3c:58:43:d2:ea:65:b5:30:eb:a5:c2:26:26:59:
e2:13:fe:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 15:51:11 2026 by rpki-client