Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
File: P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft (raw, json)
Hash identifier: /HOJWEVi6Tb2JsROsV5olw6wbwFl2jV6j+C9sPjV0xk=
Subject key identifier: 9C:9F:CA:E5:DF:52:2C:4F:E7:90:52:59:84:41:05:61:CC:8C:92:CE
Authority key identifier: 3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA
Certificate issuer: /CN=3f46c351ee89c9f5558167530704885b8be46eaa
Certificate serial: 019D3865D7036546003BFDFD8AA3A318059F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 07:01:31 +0000
Manifest this update: Sun 29 Mar 2026 07:01:31 +0000
Manifest next update: Mon 30 Mar 2026 07:01:31 +0000
Files and hashes: 1: 5L0ahpPNayrPxYi122Pi5vNAm_w.roa (hash: cz2iEH8qpiosJzyQ+ZNV5ATx1OTP4StLUP1VtKdnYPs=)
2: P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl (hash: gQ3uebNhuzpmxAjg+ZllkeIVxYkAT1Z7ifQ2FWp1Osw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:d7:03:65:46:00:3b:fd:fd:8a:a3:a3:18:05:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f46c351ee89c9f5558167530704885b8be46eaa
Validity
Not Before: Mar 29 07:01:31 2026 GMT
Not After : Mar 30 07:01:31 2026 GMT
Subject: CN=9c9fcae5df522c4fe790525984410561cc8c92ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3e:ef:d2:89:5c:a4:24:c2:c6:d4:28:e4:cf:
b4:a7:e3:6c:d9:21:de:cf:64:c4:c2:31:a8:80:13:
84:04:57:fe:2f:14:3b:ac:8e:07:7f:08:42:c0:89:
2b:4a:57:fc:08:d2:c6:48:fb:a8:db:11:b8:46:9c:
aa:46:d9:0f:e6:b0:87:5c:2f:bd:ba:11:ff:a0:39:
8f:fd:21:b9:c9:a3:66:c9:6f:ea:ad:0d:05:aa:95:
98:b1:59:76:d5:cb:c5:f3:04:be:b3:53:57:f6:eb:
81:9f:7c:53:c8:c6:ec:b1:70:14:be:4c:1e:5f:dd:
4e:e7:12:83:48:3b:0a:d1:a4:40:37:2f:c8:a1:71:
c6:4e:a7:08:a1:b2:b5:19:ca:43:70:d7:4f:d4:21:
f8:37:2f:a5:ba:41:2e:a3:11:03:43:85:26:9b:be:
20:2e:e9:0a:53:5f:43:88:f6:c2:fb:9d:8e:21:c8:
f6:96:1c:fe:8f:23:30:52:dd:d4:7d:b7:1f:dc:4e:
fc:54:72:37:12:ac:62:e2:7f:8c:59:48:94:96:2a:
04:38:b0:eb:16:7f:59:48:01:a5:6a:31:96:10:6c:
19:5d:b0:8b:69:a9:2e:1c:5e:b8:17:2d:7b:66:70:
a0:61:6a:31:c8:98:a0:30:85:f6:3e:41:21:9c:12:
86:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9F:CA:E5:DF:52:2C:4F:E7:90:52:59:84:41:05:61:CC:8C:92:CE
X509v3 Authority Key Identifier:
keyid:3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:2d:c3:9e:e0:c8:f3:35:3f:7e:41:4a:39:da:81:4a:8d:64:
12:1f:52:d0:0e:95:8f:c8:c2:66:8a:f4:f5:e1:08:30:5b:64:
fc:86:d7:01:a7:5a:31:cb:86:00:c0:b8:5c:3a:4b:f5:90:79:
74:07:1c:03:76:db:0e:c2:0e:5d:90:81:a2:5a:92:a7:b9:02:
1f:44:2f:53:8a:40:0b:6e:6d:f8:dc:80:91:09:54:06:15:25:
cc:d0:db:d4:57:7f:02:35:96:4c:29:b6:c1:ae:48:bc:2d:f0:
f1:68:18:55:f4:58:62:5f:fd:71:01:8f:7f:77:70:b0:92:f9:
56:4c:5a:9d:67:c1:e9:76:7f:4c:22:60:f2:f0:2b:83:17:a1:
f7:d2:20:f1:25:a4:dd:c7:2d:b4:ba:6d:bd:ff:88:7a:23:83:
2e:61:1d:ef:45:e9:51:9e:a5:17:f4:ff:2b:27:7d:ab:a4:dc:
50:22:98:ba:ec:99:33:c1:96:a7:d8:56:f0:60:67:37:06:ea:
6e:ac:03:6d:5d:2c:ad:e6:10:7b:5c:be:e8:05:92:c8:ae:70:
f4:9a:d0:3d:d7:c5:00:02:2d:35:8d:b2:ec:cc:6a:4c:4a:d1:
a7:c6:c3:9e:50:f9:dc:f2:a4:4d:26:72:d5:ba:07:1d:9d:59:
2f:32:25:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:50 2026 by rpki-client