Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/P2D25rQE4DQBrD10kbq2M_5qEp8.mft
File: P2D25rQE4DQBrD10kbq2M_5qEp8.mft (raw, json)
Hash identifier: vgVs2j7Nou2dfwv7ql1149KY+RVkYoIqKVoIUjTT9KE=
Subject key identifier: F3:72:B2:AC:9C:AC:89:01:7F:79:AD:02:75:74:8D:45:DC:26:D2:93
Authority key identifier: 3F:60:F6:E6:B4:04:E0:34:01:AC:3D:74:91:BA:B6:33:FE:6A:12:9F
Certificate issuer: /CN=3f60f6e6b404e03401ac3d7491bab633fe6a129f
Certificate serial: 019F273609AD011674A16619172BF1F281C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P2D25rQE4DQBrD10kbq2M_5qEp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/P2D25rQE4DQBrD10kbq2M_5qEp8.mft
Manifest number: 09
Signing time: Fri 03 Jul 2026 09:01:20 +0000
Manifest this update: Fri 03 Jul 2026 09:01:20 +0000
Manifest next update: Sat 04 Jul 2026 09:01:20 +0000
Files and hashes: 1: P2D25rQE4DQBrD10kbq2M_5qEp8.crl (hash: GrL3FrYT+pJzHMbCXJqDHo4Ua7edOqTUOEaQ44wlPyk=)
2: p3zDIjcAWzrwrNrpwE_PsccEM3A.roa (hash: jLiAzTfka0/Q0jf7zmlCDsBaadFbTH7kx2Q/ozkOt3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/P2D25rQE4DQBrD10kbq2M_5qEp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/P2D25rQE4DQBrD10kbq2M_5qEp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P2D25rQE4DQBrD10kbq2M_5qEp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:27:36:09:ad:01:16:74:a1:66:19:17:2b:f1:f2:81:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f60f6e6b404e03401ac3d7491bab633fe6a129f
Validity
Not Before: Jul 3 09:01:20 2026 GMT
Not After : Jul 4 09:01:20 2026 GMT
Subject: CN=f372b2ac9cac89017f79ad0275748d45dc26d293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d8:3f:b5:1b:7f:86:6d:21:de:fd:b0:e6:46:
2c:11:b6:8b:db:cb:e4:6d:d3:7b:7a:cb:35:46:8b:
9b:b0:2e:ea:a3:7f:36:90:81:c4:5c:fe:37:01:1d:
14:d7:c2:93:cf:17:51:e2:de:2a:be:39:f0:11:9b:
47:90:27:9c:95:fb:5b:66:1c:7a:90:15:b3:5c:c3:
96:82:fd:f9:b2:d5:82:a1:ec:c5:57:b4:09:fb:b3:
3d:95:70:5d:af:04:33:9e:82:0e:7d:a3:7a:e5:24:
d6:de:97:7c:96:5e:89:2b:4e:b4:1b:3b:90:fd:60:
5e:82:74:2b:95:16:3a:c5:24:c6:73:a8:8d:f0:00:
62:f1:2d:09:05:a9:a1:db:03:74:d0:d2:01:54:3d:
c3:d9:61:bc:b7:96:0b:21:81:84:30:ab:1b:a5:2a:
83:43:b8:60:a5:1f:d0:e9:a0:89:fe:eb:9b:6b:71:
ab:69:62:8a:2f:28:47:44:ff:80:c6:b2:d3:41:a5:
51:83:bf:b5:31:33:55:1e:7b:82:33:20:5c:76:1d:
e9:e1:10:7c:27:29:b7:c0:dc:61:d9:00:67:16:4a:
87:ab:a5:e7:06:7f:ec:25:c6:d8:d8:bb:ca:b3:bc:
28:56:a3:09:78:e3:70:60:d7:5d:31:de:a6:5f:c0:
1f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:72:B2:AC:9C:AC:89:01:7F:79:AD:02:75:74:8D:45:DC:26:D2:93
X509v3 Authority Key Identifier:
keyid:3F:60:F6:E6:B4:04:E0:34:01:AC:3D:74:91:BA:B6:33:FE:6A:12:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2D25rQE4DQBrD10kbq2M_5qEp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/P2D25rQE4DQBrD10kbq2M_5qEp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/P2D25rQE4DQBrD10kbq2M_5qEp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:fa:35:d5:59:f9:80:9f:6b:4c:31:07:7f:eb:fa:24:af:b5:
c4:0f:20:f6:ce:ad:4d:d1:e3:78:67:76:08:7e:9f:08:97:e4:
d3:fe:c0:36:01:e2:00:75:b6:94:cf:8a:3f:c8:86:9d:38:74:
91:6b:e5:66:a3:ff:be:f5:80:c8:13:50:b9:73:0e:6e:6a:c4:
51:5b:8d:48:2a:c4:22:ac:e1:60:a6:0c:1c:55:d8:1b:4f:13:
e1:b9:27:37:8d:6d:f1:ad:ab:92:f9:fb:14:8c:f9:e3:16:b3:
cb:49:f1:c4:35:72:81:1e:03:36:1e:c3:22:9f:97:14:70:89:
09:db:49:05:a8:5c:18:42:fe:01:ee:e5:34:ee:9f:b0:bd:9a:
64:57:ce:e6:48:be:21:4a:78:ba:1b:b8:15:c3:5f:17:af:c7:
79:a1:23:91:09:cb:66:d0:2c:8d:ba:9e:38:c4:34:5b:6e:b1:
24:3e:e7:ba:90:2a:c7:d2:7f:c4:c2:fd:36:d4:51:b6:09:d4:
b8:95:e7:65:b4:fc:3f:10:82:0c:34:be:1a:36:23:44:0d:d5:
b3:24:b5:2e:13:44:a3:8b:8c:cb:ba:79:70:a3:0d:eb:d0:3d:
3a:b5:4d:55:8f:96:26:bd:02:65:52:f2:42:1f:d8:da:92:4d:
88:66:9e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 17:33:53 2026 by rpki-client