Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/934670-cea1-4659-9d11-d2f98c7aab19/1/P2pJtJ3ArZj3BhUSlD8TqyM1qo8.mft
File: P2pJtJ3ArZj3BhUSlD8TqyM1qo8.mft (raw, json)
Hash identifier: C3MSXH4Zc6SRtdcg4x1ALxh1bC6fTpDAKCmFiKPzspc=
Subject key identifier: F2:5E:72:ED:F7:E2:47:D8:F5:BF:B6:E0:CF:A6:27:5B:FA:DE:72:AA
Authority key identifier: 3F:6A:49:B4:9D:C0:AD:98:F7:06:15:12:94:3F:13:AB:23:35:AA:8F
Certificate issuer: /CN=3f6a49b49dc0ad98f7061512943f13ab2335aa8f
Certificate serial: 01A1829A0FE52C3A1748A3122E3B008817E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P2pJtJ3ArZj3BhUSlD8TqyM1qo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/934670-cea1-4659-9d11-d2f98c7aab19/1/P2pJtJ3ArZj3BhUSlD8TqyM1qo8.mft
Manifest number: 12
Signing time: Wed 28 Oct 2026 13:01:36 +0000
Manifest this update: Wed 28 Oct 2026 13:01:36 +0000
Manifest next update: Thu 29 Oct 2026 13:01:36 +0000
Files and hashes: 1: 4hXoOLlewsEKQGOcnAk00Dqbzmc.roa (hash: OxxXbHPKVHz5GWS8dZJlwPJiOA3dYYyBj1rCAFvFkfs=)
2: P2pJtJ3ArZj3BhUSlD8TqyM1qo8.crl (hash: NjvG151IxhnZF681ahu7bnQHxTpDURIe/5NJU3q6URA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/934670-cea1-4659-9d11-d2f98c7aab19/1/P2pJtJ3ArZj3BhUSlD8TqyM1qo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/934670-cea1-4659-9d11-d2f98c7aab19/1/P2pJtJ3ArZj3BhUSlD8TqyM1qo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P2pJtJ3ArZj3BhUSlD8TqyM1qo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:9a:0f:e5:2c:3a:17:48:a3:12:2e:3b:00:88:17:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6a49b49dc0ad98f7061512943f13ab2335aa8f
Validity
Not Before: Oct 28 13:01:36 2026 GMT
Not After : Oct 29 13:01:36 2026 GMT
Subject: CN=f25e72edf7e247d8f5bfb6e0cfa6275bfade72aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ca:ac:58:f7:e0:78:92:9e:c3:78:8a:c0:5e:
c8:1f:c7:09:3a:76:1c:94:32:7f:01:93:2d:5f:6b:
4b:39:7d:77:04:e6:77:a0:56:6d:df:a3:4d:26:17:
cd:eb:1f:f2:b0:22:4f:be:08:74:e3:0f:c5:8a:93:
62:c6:69:5d:02:e7:c2:ca:0d:07:71:df:55:6d:aa:
01:99:ad:54:9d:5e:6c:b7:0e:6c:d6:ae:33:d9:39:
57:a5:a5:8c:67:24:ce:06:ba:93:5f:d3:55:78:5e:
32:98:79:e3:bd:15:70:cf:c4:21:c6:48:d5:c9:5d:
c6:a9:05:2d:86:98:4c:17:7d:f9:26:7d:3a:20:ab:
02:3a:70:24:1d:04:3b:64:f3:ad:f8:c2:1c:b4:5c:
8a:03:64:e9:3f:03:6b:25:a3:a1:ca:26:3d:cd:14:
b4:1a:ce:07:2e:37:fb:fe:8c:c4:b1:d9:82:f1:77:
68:34:0a:a0:f4:d8:58:60:68:3f:fd:46:a9:98:3f:
98:f0:e4:25:e7:06:87:9b:11:43:b6:90:1d:94:34:
ab:fa:ac:6d:20:93:49:d3:95:46:1a:ef:f6:0d:f6:
a2:8b:6d:39:42:ec:90:ed:ae:5d:e7:a1:6b:b3:c9:
1d:19:70:33:a5:36:b2:22:a2:37:6f:b5:b0:e4:34:
34:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5E:72:ED:F7:E2:47:D8:F5:BF:B6:E0:CF:A6:27:5B:FA:DE:72:AA
X509v3 Authority Key Identifier:
keyid:3F:6A:49:B4:9D:C0:AD:98:F7:06:15:12:94:3F:13:AB:23:35:AA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2pJtJ3ArZj3BhUSlD8TqyM1qo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/934670-cea1-4659-9d11-d2f98c7aab19/1/P2pJtJ3ArZj3BhUSlD8TqyM1qo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/934670-cea1-4659-9d11-d2f98c7aab19/1/P2pJtJ3ArZj3BhUSlD8TqyM1qo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:7e:fc:27:47:a5:48:b0:7c:9c:ad:b9:1f:1b:2c:d3:f3:fa:
48:37:a4:e0:0f:07:8d:c9:37:93:11:a3:9a:ad:41:8e:3f:56:
c8:55:e7:5b:cc:13:a7:a6:ae:64:05:eb:e7:4b:38:e9:52:6c:
91:62:89:2b:b2:b2:64:50:74:79:e6:59:7e:dc:07:77:78:b0:
55:5f:6c:bf:26:65:f3:2c:60:a3:b1:a8:e4:01:95:19:69:c1:
6c:72:9e:4a:b0:89:e9:1a:31:be:2b:c3:fd:76:dd:91:19:14:
70:46:b5:90:aa:24:91:84:b3:8c:7d:03:0f:0d:e0:71:7b:c5:
39:42:c2:6e:f6:9d:62:cc:8f:cc:3a:60:a9:e8:d2:f8:3b:86:
29:71:f7:86:d4:a1:f0:c1:99:02:71:e7:0d:32:87:74:76:dd:
b1:1a:fb:63:ab:b5:59:9a:42:c0:eb:7f:f2:5a:b0:ea:bc:86:
88:f8:b3:6f:b1:97:8c:b8:dd:eb:c3:49:01:87:5a:f3:f6:cd:
a4:97:8c:c3:d1:d2:cc:f6:8a:ce:e6:03:3a:8a:20:d3:26:03:
65:8f:c7:99:4a:e6:7a:d2:c8:7f:85:80:94:b3:7e:ff:e1:8a:
0e:e3:0a:c9:29:ac:a6:b6:d5:ad:45:c8:1d:cf:c5:47:6c:e1:
8c:f1:71:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:29:58 2026 by rpki-client