Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7e2ce3-3fc4-473a-a3d6-694868091883/1/P6NM0-FkjlyNMFRd65qVqtul5sE.mft
File: P6NM0-FkjlyNMFRd65qVqtul5sE.mft (raw, json)
Hash identifier: 1tkP+Oe7O7O0tHOZg3Bl9M2LQBhBkGfp8a4B9qLAVzs=
Subject key identifier: B0:EB:73:17:E1:5C:EA:14:E1:7C:5C:59:4E:D4:40:83:D4:55:D3:50
Authority key identifier: 3F:A3:4C:D3:E1:64:8E:5C:8D:30:54:5D:EB:9A:95:AA:DB:A5:E6:C1
Certificate issuer: /CN=3fa34cd3e1648e5c8d30545deb9a95aadba5e6c1
Certificate serial: 019D37524AAC789482E08680FFC01D5E9DC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6NM0-FkjlyNMFRd65qVqtul5sE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7e2ce3-3fc4-473a-a3d6-694868091883/1/P6NM0-FkjlyNMFRd65qVqtul5sE.mft
Manifest number: 80
Signing time: Sun 29 Mar 2026 02:00:32 +0000
Manifest this update: Sun 29 Mar 2026 02:00:32 +0000
Manifest next update: Mon 30 Mar 2026 02:00:32 +0000
Files and hashes: 1: P6NM0-FkjlyNMFRd65qVqtul5sE.crl (hash: 0c/ZUS0euOdneGkRgF3Wz4yH7m80mpJZAi/IldaXZZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7e2ce3-3fc4-473a-a3d6-694868091883/1/P6NM0-FkjlyNMFRd65qVqtul5sE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7e2ce3-3fc4-473a-a3d6-694868091883/1/P6NM0-FkjlyNMFRd65qVqtul5sE.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6NM0-FkjlyNMFRd65qVqtul5sE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:4a:ac:78:94:82:e0:86:80:ff:c0:1d:5e:9d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fa34cd3e1648e5c8d30545deb9a95aadba5e6c1
Validity
Not Before: Mar 29 02:00:32 2026 GMT
Not After : Mar 30 02:00:32 2026 GMT
Subject: CN=b0eb7317e15cea14e17c5c594ed44083d455d350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3c:41:2f:81:13:10:72:0d:13:05:66:9d:ae:
ea:62:87:d6:ce:29:08:6f:10:74:a6:e8:e4:f4:05:
92:83:b5:2b:01:73:19:89:04:64:14:b5:7c:b4:7e:
f8:80:c3:4b:58:24:ed:4e:ac:e2:9d:88:55:65:de:
7f:c9:05:ad:77:31:75:55:ad:3b:7e:b4:19:30:2c:
71:62:ae:77:ae:28:ad:d5:4d:a5:02:20:8a:7e:50:
25:86:91:01:62:37:f4:60:d9:9b:78:b7:43:6c:b9:
c6:09:5e:72:77:c9:f0:47:94:52:0d:b1:78:86:37:
f3:85:65:ff:66:40:ff:d7:30:90:79:3c:16:44:13:
0c:32:c7:52:35:2b:d2:be:3a:10:af:86:b0:34:64:
70:c5:22:74:67:eb:d3:5b:e8:c6:e5:39:e3:1b:0c:
81:36:5a:0f:ca:92:54:9f:a2:c8:bf:1c:88:d2:ef:
53:49:18:7b:4f:f4:3b:e9:d7:4e:08:70:4e:5d:b1:
2c:1e:ab:6d:a9:58:92:2e:72:f5:81:c3:51:c0:fe:
a8:1c:1d:d2:b0:fb:2e:1f:70:26:24:f0:81:0f:f0:
b5:0c:9a:90:df:5c:77:d8:68:75:09:5e:96:44:b9:
df:d2:9a:9e:6a:2c:4b:35:b0:84:48:c1:15:e8:34:
8f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EB:73:17:E1:5C:EA:14:E1:7C:5C:59:4E:D4:40:83:D4:55:D3:50
X509v3 Authority Key Identifier:
keyid:3F:A3:4C:D3:E1:64:8E:5C:8D:30:54:5D:EB:9A:95:AA:DB:A5:E6:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6NM0-FkjlyNMFRd65qVqtul5sE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7e2ce3-3fc4-473a-a3d6-694868091883/1/P6NM0-FkjlyNMFRd65qVqtul5sE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7e2ce3-3fc4-473a-a3d6-694868091883/1/P6NM0-FkjlyNMFRd65qVqtul5sE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:cd:69:d4:36:7e:b9:8a:d3:48:dd:3d:93:d7:5c:5a:08:80:
4e:63:1b:e2:55:08:13:00:20:5d:2a:12:b2:94:e9:75:c0:93:
c7:af:b7:a4:ee:51:24:5b:7d:1b:1d:22:d5:9b:a8:86:ba:2d:
0a:8a:cb:4d:a7:c5:e4:37:8d:b4:f0:6e:83:2a:f1:ee:5f:22:
5f:2f:0c:05:42:b6:d7:ed:a2:31:b4:21:b2:03:53:4e:e3:23:
f8:c6:fc:e0:3b:5e:64:0f:15:13:15:f1:50:3f:d4:5e:35:7d:
9a:9b:c1:14:bc:fc:15:54:19:b1:2b:3a:fb:9b:e0:71:d1:5f:
a0:28:71:27:13:f1:5c:7e:22:05:49:5b:bd:3f:67:dc:0e:7a:
0a:9c:1d:fc:75:82:77:d3:53:14:6f:25:ae:9f:ca:64:17:4b:
9c:f0:7d:0b:c2:5a:28:67:a1:01:cf:31:92:c2:dc:69:4a:b1:
5c:9f:fd:33:21:df:5c:20:eb:cc:93:db:da:2e:2a:e8:d6:2f:
81:09:9b:41:13:27:fd:b3:9e:bf:34:79:41:50:07:34:2e:de:
76:ea:64:f5:34:e0:af:c4:0f:c0:d4:f6:48:b4:b4:d2:30:7b:
d2:9c:b6:60:d1:10:3c:05:4a:1a:19:2a:b1:dd:6d:16:4c:2c:
c7:e0:12:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:27:38 2026 by rpki-client