Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/P2D25rQE4DQBrD10kbq2M_5qEp8.mft
File: P2D25rQE4DQBrD10kbq2M_5qEp8.mft (raw, json)
Hash identifier: wLeWJvRR7U4dJ59+neFNpVlbROqXjLZO4Do8vafD1tE=
Subject key identifier: 00:4B:F2:38:07:5F:C2:34:12:DD:D4:1D:1A:3B:8F:1A:96:50:FA:04
Authority key identifier: 3F:60:F6:E6:B4:04:E0:34:01:AC:3D:74:91:BA:B6:33:FE:6A:12:9F
Certificate issuer: /CN=3f60f6e6b404e03401ac3d7491bab633fe6a129f
Certificate serial: 01A010E216573413FC43D5D9D5B2CB3DD2F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P2D25rQE4DQBrD10kbq2M_5qEp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/P2D25rQE4DQBrD10kbq2M_5qEp8.mft
Manifest number: 82
Signing time: Mon 17 Aug 2026 18:00:47 +0000
Manifest this update: Mon 17 Aug 2026 18:00:47 +0000
Manifest next update: Tue 18 Aug 2026 18:00:47 +0000
Files and hashes: 1: P2D25rQE4DQBrD10kbq2M_5qEp8.crl (hash: iL1CzEMJ5qJXDpHwzPILS9rjpWNzXeZTNTj65qB3g6I=)
2: p3zDIjcAWzrwrNrpwE_PsccEM3A.roa (hash: jLiAzTfka0/Q0jf7zmlCDsBaadFbTH7kx2Q/ozkOt3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/P2D25rQE4DQBrD10kbq2M_5qEp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/P2D25rQE4DQBrD10kbq2M_5qEp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P2D25rQE4DQBrD10kbq2M_5qEp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:10:e2:16:57:34:13:fc:43:d5:d9:d5:b2:cb:3d:d2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f60f6e6b404e03401ac3d7491bab633fe6a129f
Validity
Not Before: Aug 17 18:00:47 2026 GMT
Not After : Aug 18 18:00:47 2026 GMT
Subject: CN=004bf238075fc23412ddd41d1a3b8f1a9650fa04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1f:0d:4c:0c:e9:c8:26:51:5d:b3:e2:ef:aa:
53:ce:04:df:7f:35:de:c8:5a:41:a5:53:9b:df:8b:
99:1a:c1:36:16:7e:80:03:39:ef:f7:3e:d8:eb:ea:
4c:69:63:bd:4e:c8:78:7a:a5:f3:4e:29:45:95:5d:
1e:0d:10:f6:1b:cd:f0:82:60:60:e7:87:f2:2a:10:
b6:77:9f:0a:35:95:f9:e9:63:d9:7d:e2:8a:3a:e5:
4c:d4:f3:b0:e1:29:0b:be:3d:90:07:94:5d:a0:c4:
95:19:a3:5d:28:08:43:73:ef:04:e5:3a:cc:ea:3c:
65:c9:76:3e:89:10:f9:8d:e9:2c:d5:0e:1f:5a:2c:
f9:b2:21:f9:15:e3:5f:80:46:37:ba:20:31:e6:c6:
a6:ba:f6:fb:c0:03:7f:86:4a:b1:61:5d:65:ec:a7:
a6:44:bd:5f:5f:08:26:6e:2b:49:51:80:b0:b8:e8:
8a:a2:e6:be:21:59:f3:05:ca:ab:d4:3a:84:e8:fa:
0e:cc:cf:46:1f:07:2e:0b:02:2a:a1:23:f4:ff:5a:
47:4d:e7:ce:8a:52:d9:00:82:2f:db:93:23:12:9c:
43:b0:6a:6b:4a:5c:2c:37:a9:9e:05:84:33:e6:d0:
3b:fe:1b:ab:24:54:f5:6e:3e:f4:d9:17:a2:be:bc:
cc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4B:F2:38:07:5F:C2:34:12:DD:D4:1D:1A:3B:8F:1A:96:50:FA:04
X509v3 Authority Key Identifier:
keyid:3F:60:F6:E6:B4:04:E0:34:01:AC:3D:74:91:BA:B6:33:FE:6A:12:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2D25rQE4DQBrD10kbq2M_5qEp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/P2D25rQE4DQBrD10kbq2M_5qEp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/P2D25rQE4DQBrD10kbq2M_5qEp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:63:c2:d7:57:b3:c2:f4:25:f4:b6:85:08:97:77:e5:5e:74:
ae:57:3b:f8:36:17:d7:f3:f7:72:a4:73:42:87:83:ba:2b:1b:
e5:5e:74:0a:d5:86:98:9d:f1:2a:fd:b1:d7:89:40:79:e9:1b:
2d:8c:97:6d:62:26:99:34:0d:ac:df:8e:5a:29:62:db:c0:06:
ff:7d:86:0d:6e:cd:5d:e8:d4:67:5c:ba:92:b6:af:77:4e:51:
02:46:15:8f:52:ad:2d:88:cd:c0:85:62:50:cc:5d:66:40:f8:
1e:e5:bc:66:80:86:31:a6:3d:a5:61:6d:9d:d9:cf:0c:ec:92:
6e:37:0c:74:20:3f:20:29:3d:d5:f8:1e:ad:4f:e4:d6:1b:fc:
0a:9a:fc:10:52:a6:40:42:87:73:2e:7e:c6:2c:71:fd:1f:90:
c4:f8:4a:ad:e2:5a:21:06:ee:8d:52:6a:a5:66:8a:20:0d:80:
45:3b:a6:70:5a:82:bf:e3:7d:6b:ce:2f:63:34:71:46:e8:f0:
35:c0:c5:19:53:59:50:dc:8c:9b:82:cc:b0:e7:53:96:ff:f0:
9b:02:93:59:2f:9a:49:88:a3:d5:7a:7d:bc:cf:83:eb:2b:b0:
f5:53:6d:a5:02:3f:b3:e7:40:f7:4f:fe:09:5a:4b:44:9b:a1:
e6:b9:6a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 21:17:12 2026 by rpki-client