Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
File: P1vEQBQoW28-KHKuz11PM-Jozos.mft (raw, json)
Hash identifier: PpJa9P+nmkXyT0hlLtj9PoZ74kGahq1Xq3p82jhSwuc=
Subject key identifier: 37:7F:16:07:A8:F5:58:5E:D2:FE:3C:4A:57:BE:25:88:F7:6C:31:E4
Authority key identifier: 3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
Certificate issuer: /CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Certificate serial: 019DDB43174E0CA18CE2A3FB92E059837354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
Manifest number: 09E2
Signing time: Wed 29 Apr 2026 22:01:40 +0000
Manifest this update: Wed 29 Apr 2026 22:01:40 +0000
Manifest next update: Thu 30 Apr 2026 22:01:40 +0000
Files and hashes: 1: Mr6edMVNczrnTD4fPbHhkJ_t0BI.roa (hash: B3H6ipVEXV+RUc2+4VXrDuLYCDQcw876zTiowv2ss50=)
2: P1vEQBQoW28-KHKuz11PM-Jozos.crl (hash: z7FLMzGaSWONm0e6sclJBPoau0+IBVTcStYt5/3dVmg=)
3: UZU-y9KjwHBRwAFBMLEzFqF8gQE.roa (hash: 8IesYOSWF04JS1YDSdciYf6tHgm62U6HhGDalYAE7s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 16:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:db:43:17:4e:0c:a1:8c:e2:a3:fb:92:e0:59:83:73:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Validity
Not Before: Apr 29 22:01:40 2026 GMT
Not After : Apr 30 22:01:40 2026 GMT
Subject: CN=377f1607a8f5585ed2fe3c4a57be2588f76c31e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:92:0b:2f:bb:78:04:7a:9a:5e:39:78:2f:35:
4a:02:04:13:e4:5d:b1:81:25:b1:ed:70:fc:dd:e6:
24:8b:ac:5a:18:64:4a:41:61:a6:fa:a7:54:ee:fa:
f2:26:95:24:27:7a:7c:96:37:0b:c5:75:b6:35:be:
55:98:c3:e8:53:36:3a:13:f7:63:de:2f:69:a8:43:
cc:72:de:c7:7e:12:48:17:a6:d8:80:bf:6f:72:85:
af:24:a4:e2:bb:c1:d6:eb:bc:51:fb:2f:69:78:7e:
e6:78:b6:8b:c6:61:96:75:8c:98:a9:9d:dd:9e:a0:
9d:ab:f4:22:67:d1:9f:ab:0c:b7:47:7d:76:2c:f9:
d1:aa:cb:a7:d2:05:cb:04:dc:e5:0e:93:f2:2d:36:
33:7a:4e:71:88:f6:81:ef:f4:14:13:de:93:26:03:
77:9e:2c:c7:2c:65:89:e4:8c:0d:39:ca:ce:19:66:
c6:13:16:fd:b8:8d:a8:b9:ad:f8:ae:48:c6:3d:f2:
6b:02:05:b7:99:b0:c6:74:46:8f:14:85:47:bb:07:
a2:39:20:6f:c9:a5:53:11:19:04:13:6a:ee:2b:bb:
33:1d:32:3e:ff:a8:37:eb:e3:ab:3b:8f:a8:4b:ec:
c4:ce:a3:ab:67:95:90:74:7b:20:f1:c1:72:53:96:
f1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7F:16:07:A8:F5:58:5E:D2:FE:3C:4A:57:BE:25:88:F7:6C:31:E4
X509v3 Authority Key Identifier:
keyid:3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:11:2f:4d:48:75:14:a5:cf:78:28:fe:a7:6e:97:1d:ff:1b:
6a:f9:13:14:f6:dc:7e:f3:c6:eb:d0:43:ee:e6:c3:4e:41:86:
d2:b6:fc:59:f5:61:78:b1:3e:ca:1e:d5:bd:46:c1:2e:af:bb:
5b:5c:27:bd:05:7a:ca:47:00:18:06:32:71:14:ee:2e:55:5a:
af:84:5f:ca:43:64:de:87:69:54:b7:83:be:0b:b8:9c:ba:00:
bf:c2:87:3a:da:24:27:fd:95:55:56:a7:31:52:a2:0e:dd:b5:
8a:ea:72:0c:50:f0:72:79:58:f8:83:86:a6:13:9a:08:a7:bd:
e5:3e:d8:65:fe:a3:a8:38:62:7f:ff:42:57:9a:f0:07:ae:af:
05:ae:79:e1:5a:a2:af:6d:b5:3b:11:fa:f4:44:4b:45:b3:97:
17:37:e9:71:4a:b2:74:ca:6b:c6:56:ea:43:f4:4a:fd:20:10:
45:cd:1a:4f:d3:d1:66:db:a0:51:50:de:9c:0e:b7:67:9f:d5:
53:ea:c8:50:33:da:f3:28:30:3c:9a:e1:1f:53:e6:d3:d3:3f:
fd:22:03:50:5c:3c:31:82:3b:ec:f1:31:ae:41:d9:f7:76:74:
e0:e6:c1:03:1e:ec:28:aa:e3:aa:d7:35:1c:65:71:aa:cb:bb:
fe:32:76:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 00:23:41 2026 by rpki-client