Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
File: PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft (raw, json)
Hash identifier: rOtjq/jsRCm4zla8Wmh/hHpg4+3xkJNcnU1SpfG7D1w=
Subject key identifier: 46:FB:A5:D9:26:7B:D7:AD:64:9F:E5:17:25:6B:24:16:31:9A:38:7A
Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
Certificate issuer: /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Certificate serial: 019CE5239B49FAF7DA01E6779B488E6FD991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
Manifest number: 12A3
Signing time: Fri 13 Mar 2026 03:00:41 +0000
Manifest this update: Fri 13 Mar 2026 03:00:41 +0000
Manifest next update: Sat 14 Mar 2026 03:00:41 +0000
Files and hashes: 1: PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl (hash: PgmKaLQi922L98HwpJCRTuw7KQo3r85y2i8jTvPegKA=)
2: ggxxocqcTwq22NipEXSDZh95C_4.roa (hash: 1HSVk52TYwL3CTNvQK16vezfpvhjf/FZgW8yY/AHmMs=)
3: v2V88seM-Nwzh5wj9f_9IQhYFX0.roa (hash: XYFFs6E41zM0dNU5XXPXTg3Z5qY8tv1UZybspVMB9NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:9b:49:fa:f7:da:01:e6:77:9b:48:8e:6f:d9:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Validity
Not Before: Mar 13 03:00:41 2026 GMT
Not After : Mar 14 03:00:41 2026 GMT
Subject: CN=46fba5d9267bd7ad649fe517256b2416319a387a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3c:ff:15:5a:7a:5a:8a:2d:92:8c:dd:cb:22:
66:e4:c9:41:a7:dd:a1:00:04:5d:7e:65:15:5f:29:
20:be:bb:10:e6:98:0b:96:20:22:9a:65:7b:6b:1a:
82:1d:90:a1:86:14:8a:00:64:7a:09:72:60:a5:04:
cf:58:88:e3:50:80:82:e1:f6:ad:b3:41:76:c4:5b:
d5:c0:05:a6:5f:cf:4b:01:92:8a:b3:bd:dc:7e:b2:
4d:0b:78:b3:3f:7d:bc:d7:c8:3e:65:fa:62:f7:c4:
c3:c0:e3:57:bd:56:c7:48:1d:cd:9a:a3:b3:87:67:
43:b8:42:1c:ee:e9:6e:24:56:d3:c9:bc:50:0b:70:
69:71:af:34:ee:6c:1c:e1:36:36:60:1c:87:04:ba:
04:d1:e0:f6:34:6e:4b:a3:e7:ca:05:32:ae:f5:8c:
b0:7e:f2:90:db:4e:fa:ca:3f:11:11:8b:6b:3f:49:
96:b6:3f:68:66:c9:ae:96:7c:29:70:d0:fc:dc:3a:
a9:ad:5d:77:60:33:3e:12:59:88:05:29:45:c2:3b:
58:bd:d1:c5:fe:0a:78:d7:cd:b6:4d:00:16:2c:ed:
50:b6:8f:0d:18:1d:50:51:6b:36:a0:f8:e0:32:a9:
09:89:9c:68:1d:ff:18:b1:1e:72:11:7f:e1:f1:57:
89:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FB:A5:D9:26:7B:D7:AD:64:9F:E5:17:25:6B:24:16:31:9A:38:7A
X509v3 Authority Key Identifier:
keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:06:21:90:9f:26:ba:4c:da:ea:18:fe:43:2b:99:fe:93:c4:
78:f1:be:27:9d:0f:c0:3e:c7:d8:9c:4d:17:83:1b:e2:69:1d:
4d:c0:10:f6:1d:39:c6:1a:40:25:8e:11:6b:ed:6c:d3:7e:d1:
4c:77:a2:90:50:75:7f:40:65:f0:51:b2:7d:5d:3a:1d:ce:03:
7d:36:9a:d1:2c:67:6e:5c:55:5f:bc:35:3e:a5:2a:4c:cf:35:
18:42:6e:6e:ca:fe:b2:49:86:d1:52:f7:9a:66:ac:3b:e3:8c:
82:56:c5:a7:84:78:2b:8e:b0:8c:3d:45:4e:f9:f4:c2:6c:b9:
41:e4:b3:b5:c5:82:c6:df:df:f6:ff:33:b4:05:ad:12:04:06:
8f:30:75:09:eb:50:f4:ce:6b:0b:87:49:31:f9:f1:44:d2:ef:
4b:b8:64:82:e7:d7:8c:31:65:c4:ec:cc:60:04:12:b3:2f:5e:
f3:41:a3:25:3f:b5:ab:ea:0c:fd:35:68:9c:f4:4b:c1:03:23:
c7:d0:81:f6:83:9e:88:0c:02:26:72:1d:1b:76:c1:fa:99:4f:
51:30:ce:6a:cf:35:56:8c:88:83:ac:e2:d8:68:88:49:a6:53:
6e:29:f3:8c:54:e2:1b:d6:53:f7:7d:b6:ed:3a:d2:e3:fc:9f:
05:2d:0b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:21:13 2026 by rpki-client