Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
File: P1vEQBQoW28-KHKuz11PM-Jozos.mft (raw, json)
Hash identifier: EAPD3yCh9HfAP9IfxY0D427UPBYcPEBtQrVGgLhVmTE=
Subject key identifier: 43:62:A5:6D:3E:52:AC:EC:1C:34:64:C0:8F:F1:C5:58:CC:1D:17:A9
Authority key identifier: 3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
Certificate issuer: /CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Certificate serial: 019EC8CBC35AEE66976F180AC79C77E2110C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
Manifest number: 0A5D
Signing time: Mon 15 Jun 2026 01:00:57 +0000
Manifest this update: Mon 15 Jun 2026 01:00:57 +0000
Manifest next update: Tue 16 Jun 2026 01:00:57 +0000
Files and hashes: 1: Mr6edMVNczrnTD4fPbHhkJ_t0BI.roa (hash: B3H6ipVEXV+RUc2+4VXrDuLYCDQcw876zTiowv2ss50=)
2: P1vEQBQoW28-KHKuz11PM-Jozos.crl (hash: 57KiUte5s4wmMLLsfxRJEmUMUBWRP3lEHYxk81rZrQQ=)
3: UZU-y9KjwHBRwAFBMLEzFqF8gQE.roa (hash: 8IesYOSWF04JS1YDSdciYf6tHgm62U6HhGDalYAE7s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Jun 2026 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c8:cb:c3:5a:ee:66:97:6f:18:0a:c7:9c:77:e2:11:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Validity
Not Before: Jun 15 01:00:57 2026 GMT
Not After : Jun 16 01:00:57 2026 GMT
Subject: CN=4362a56d3e52acec1c3464c08ff1c558cc1d17a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e4:af:b4:86:b3:fd:ee:be:04:ae:0c:60:5b:
2a:bd:94:a5:d7:1f:87:24:f4:9a:4c:a9:63:28:bc:
99:97:2b:b5:f1:96:f3:80:01:32:18:2b:5a:92:05:
89:59:b6:cc:90:49:6d:f5:3c:c8:1d:c5:c8:95:d3:
bb:cb:95:c9:03:06:cf:8d:df:a2:35:43:7d:df:1a:
9d:2e:6d:7f:0e:28:06:10:f7:ff:04:6e:7b:a6:67:
44:e8:91:5e:6b:b8:64:f8:52:2a:e7:68:b7:71:bd:
4d:74:34:7e:fe:1c:41:49:71:0f:65:f8:2c:5a:1e:
18:4d:0c:45:fe:b4:ce:d9:cb:6f:9b:1f:e4:e9:20:
82:1a:97:c0:28:f8:db:e8:1b:6c:6f:e0:39:c4:3d:
ac:33:af:18:5e:fe:b8:0c:06:9d:b4:21:7e:f4:f5:
c5:8d:e3:29:33:ef:89:cb:28:7c:b4:1c:92:ff:eb:
aa:e5:19:d9:b8:d2:fb:24:9b:9f:b1:e6:4b:96:0f:
33:b5:74:02:f9:c1:df:27:63:24:bf:d3:29:5a:93:
3c:be:93:d3:9e:98:83:d2:60:a6:c9:22:10:81:f4:
a8:53:17:c9:bd:d9:06:67:a4:af:1b:9e:2a:ef:11:
f0:2c:d6:b8:90:05:9a:90:71:a2:a2:27:a0:fe:88:
c8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:62:A5:6D:3E:52:AC:EC:1C:34:64:C0:8F:F1:C5:58:CC:1D:17:A9
X509v3 Authority Key Identifier:
keyid:3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:6b:6c:b2:52:0f:ab:52:f9:6a:e9:0d:06:e6:bc:32:53:fc:
6d:1e:a9:5b:cb:cf:ca:6c:35:2a:5e:74:09:6e:68:db:76:ec:
e2:2a:e0:2e:a0:7c:37:8c:a6:3b:11:90:56:2b:11:6a:4b:9e:
94:19:a4:d1:20:92:16:57:99:4f:27:11:9a:62:06:88:86:c5:
1e:6c:2f:1a:3f:34:de:3f:8c:f6:74:5f:55:f2:b4:a8:07:b0:
5f:12:af:d3:c8:b8:be:55:58:3c:f8:24:6f:01:9b:98:e7:61:
82:cd:d7:be:83:1f:f2:61:59:c2:48:65:1f:5c:5b:38:83:63:
60:99:4b:67:03:2f:17:bb:f0:2c:fa:80:01:6e:dc:42:5a:8c:
c2:ee:52:90:98:f8:ed:cc:e9:63:f7:cf:61:8c:09:15:67:62:
c2:19:63:bb:5c:f3:56:eb:3e:d6:53:f8:06:5c:1c:22:08:4e:
09:63:0a:21:54:51:47:38:23:cb:9a:4d:bf:8c:31:bb:0a:b1:
42:e6:f9:a6:10:98:b4:37:0d:16:cc:59:7d:7a:6c:54:03:29:
ff:df:4b:00:62:ec:7d:ad:3d:d8:6f:12:90:9d:87:b1:5e:25:
ec:fb:d7:dc:44:ba:e9:ee:69:4a:5b:d5:2d:d7:b5:d0:68:1d:
40:86:3f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 09:52:47 2026 by rpki-client