Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
File: PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft (raw, json)
Hash identifier: Q4pDQyTWgEaT+o3aP+6nI/ZWSuaJ/swJIkT6dEfzVW4=
Subject key identifier: 2D:EE:99:09:D6:D3:17:10:4C:EC:2E:BC:7A:64:63:E9:02:0C:C1:AA
Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
Certificate issuer: /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Certificate serial: 019DCD197DCC33FD1F20AC96A7221900CADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
Manifest number: 131C
Signing time: Mon 27 Apr 2026 04:01:32 +0000
Manifest this update: Mon 27 Apr 2026 04:01:32 +0000
Manifest next update: Tue 28 Apr 2026 04:01:32 +0000
Files and hashes: 1: PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl (hash: JcJGEbGlk1HMls+Fa3KayanTIHsrqC5DtSeUp00+PoQ=)
2: _b_jh41DtvYlyJbVt2vmUxy_03c.roa (hash: Y4f7kKKKelGhsZykUm6x2Et6p6M+4yMQNJ8fkfC21Wk=)
3: ggxxocqcTwq22NipEXSDZh95C_4.roa (hash: 1HSVk52TYwL3CTNvQK16vezfpvhjf/FZgW8yY/AHmMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:19:7d:cc:33:fd:1f:20:ac:96:a7:22:19:00:ca:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Validity
Not Before: Apr 27 04:01:32 2026 GMT
Not After : Apr 28 04:01:32 2026 GMT
Subject: CN=2dee9909d6d317104cec2ebc7a6463e9020cc1aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:61:b7:2f:f6:7f:19:16:27:33:4a:e7:e4:83:
ab:b3:f6:28:a9:ed:8f:33:95:19:46:e6:94:1b:9e:
64:25:46:25:b7:eb:0d:c5:37:7e:cb:d4:fd:93:03:
db:6c:79:a4:e7:58:f3:b5:58:82:f8:1a:77:9e:d0:
f5:90:03:99:34:d0:d7:7b:14:bb:07:e9:6c:a2:4f:
a1:37:1f:e9:0c:69:a2:4f:d2:ef:47:e3:0b:eb:70:
9c:29:16:2e:fd:d2:94:44:c2:14:88:c8:08:8e:dc:
bd:dc:f0:0b:ee:d7:fa:f2:ef:c2:21:63:72:77:2e:
f4:75:3b:5b:3e:30:e6:8f:c9:b6:bb:dc:91:1a:b0:
50:d4:62:24:37:37:2f:0f:43:55:f6:ca:dd:67:8e:
f4:93:f5:d6:34:df:25:df:81:7c:f6:52:13:06:2c:
43:e5:17:01:31:55:2f:cf:ed:a7:72:11:3f:b3:7b:
63:24:3b:ba:a7:64:ff:c7:de:2d:93:39:bb:4b:22:
08:5c:8e:e4:6b:86:b9:cc:0c:6b:db:60:62:ce:7e:
ac:6b:ca:fa:cf:91:b5:3d:1e:a1:02:b2:78:6d:93:
8c:e3:0c:51:47:7a:c6:dd:49:51:22:5d:91:1b:67:
0f:ed:f0:13:1b:28:ad:7d:8e:84:93:76:39:ce:d7:
9d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:EE:99:09:D6:D3:17:10:4C:EC:2E:BC:7A:64:63:E9:02:0C:C1:AA
X509v3 Authority Key Identifier:
keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:38:06:5c:d4:3e:cf:15:5f:77:17:98:04:c5:bb:ad:60:0a:
36:67:67:65:b0:37:9c:cb:90:36:85:09:95:fd:6a:f7:33:95:
d4:64:37:aa:f3:7c:72:e0:9f:bc:f1:13:11:16:59:ac:51:ec:
22:93:79:a2:b5:af:69:23:72:a0:e4:3b:1a:9a:31:86:68:7b:
bd:68:5e:59:1c:06:fb:a8:20:f2:ac:ff:7b:22:1c:ac:fd:8f:
d3:79:86:52:12:92:3d:bc:3e:98:cc:d7:a9:4f:4b:29:f6:43:
d1:da:98:25:55:cc:1d:61:90:ec:d3:99:4d:93:92:7a:b3:81:
d0:a6:db:a8:2a:33:52:93:0e:1a:62:1d:1f:3e:3b:67:40:ef:
fa:42:0d:44:6d:be:90:76:5e:41:ed:13:16:4b:cf:63:7c:c9:
26:91:24:21:83:6a:38:f9:8d:c5:62:dc:d9:2f:d0:23:62:df:
63:7f:4b:4a:ec:78:45:40:28:e2:7d:71:65:ae:ef:bd:c5:61:
58:00:bf:23:83:de:e3:6b:60:2d:5e:88:c0:0b:e6:2b:20:7a:
f1:9e:d7:7e:90:94:c6:0a:b4:03:e9:56:1b:81:db:d0:8d:06:
dc:42:2d:b3:d6:5d:49:39:fd:c0:f6:0a:e1:59:88:2c:c4:b6:
1a:ab:bf:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:18:29 2026 by rpki-client