Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
File: P6xo-RIFxE5zAzbmALYzT4yB6MI.mft (raw, json)
Hash identifier: 22XSpCOyWxYQL2h7ZuTO9Cnoi/9H0sTzc6xz4PQckAk=
Subject key identifier: 06:8A:76:45:64:E5:77:54:7F:E4:D6:BF:CB:CC:78:AF:D5:2E:7B:0E
Authority key identifier: 3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
Certificate issuer: /CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Certificate serial: 019D37F71BEBC82CE1D673215366F18AA0A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
Manifest number: 0480
Signing time: Sun 29 Mar 2026 05:00:34 +0000
Manifest this update: Sun 29 Mar 2026 05:00:34 +0000
Manifest next update: Mon 30 Mar 2026 05:00:34 +0000
Files and hashes: 1: B70dl_4-b5eVhvQvZuPSWgvFpmU.roa (hash: PEnqRbyIXEVxwwcn6v1NmFYPEb0k725A2k724/MK0vI=)
2: Ka34B6rBgIn3gd6cXePqD35HsVc.roa (hash: /Qd0BtNspWGLKcZicxcHQ+co2KBYSO2WlY4JEiRzWAo=)
3: P6xo-RIFxE5zAzbmALYzT4yB6MI.crl (hash: feY7k4dPkb7XaeP1FjV17LVaBa0UauPdbckG882CiZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:1b:eb:c8:2c:e1:d6:73:21:53:66:f1:8a:a0:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Validity
Not Before: Mar 29 05:00:34 2026 GMT
Not After : Mar 30 05:00:34 2026 GMT
Subject: CN=068a764564e577547fe4d6bfcbcc78afd52e7b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8f:c4:30:c8:45:4e:2e:35:34:2c:1c:4d:42:
7d:1e:b2:ab:7e:65:75:ea:67:e2:60:0a:2c:6e:c6:
fd:ef:32:00:b2:6e:6d:11:0e:23:2c:27:67:4a:21:
fe:c7:0e:e7:3b:a8:ba:ca:19:ef:6b:55:92:c6:b5:
aa:fb:32:2f:f7:23:f9:e3:0d:cf:4c:d8:7b:5e:17:
67:e1:9c:89:0d:67:bf:63:41:d1:c7:a2:85:3e:c1:
5d:8d:ab:8a:f7:84:78:33:65:8a:73:bb:a9:8a:4f:
81:5f:d0:3e:fa:4b:f4:98:22:d4:ed:47:44:c4:02:
0c:e3:35:0e:e9:f8:5e:d8:3d:6a:da:be:00:6e:2b:
e9:86:7c:75:76:74:23:c6:4e:61:32:70:61:45:90:
ed:2c:03:d0:1f:ce:55:46:1f:9b:64:e0:6b:9c:a7:
a4:e3:e7:43:24:12:d9:be:e9:34:82:c6:fd:27:22:
de:5e:2f:16:94:3a:60:df:84:be:e0:52:54:08:7f:
36:0b:79:69:a0:93:60:3a:57:69:e0:61:aa:d8:a2:
05:d9:08:64:48:22:b4:7a:cf:9f:76:d6:55:48:60:
d2:2e:06:fa:5e:80:31:61:7c:df:66:db:0e:d1:59:
8f:11:56:9a:dd:f0:f2:ef:b6:5b:82:a5:1d:b4:9c:
18:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8A:76:45:64:E5:77:54:7F:E4:D6:BF:CB:CC:78:AF:D5:2E:7B:0E
X509v3 Authority Key Identifier:
keyid:3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ec:bb:2d:66:19:40:d4:81:1f:a2:c9:be:fc:d6:fc:d5:33:
1e:ff:e0:10:2b:65:f0:b6:7f:c3:ff:d5:84:1b:3d:75:19:2c:
df:34:b1:a4:1d:e3:7a:7d:2e:22:0a:c8:9a:ef:e9:e1:30:5a:
b4:8a:00:94:6e:76:b4:ee:82:a9:c7:ef:ad:10:9e:b8:fb:32:
13:42:0d:7a:ed:49:96:c7:be:a9:2b:7e:48:0a:45:ba:a5:10:
7a:36:8a:4d:42:c3:51:b9:01:9d:82:5c:f1:b4:71:1c:cf:b9:
a5:fb:53:58:d2:0e:b9:36:04:28:f6:63:f0:09:bd:df:a5:8d:
3b:88:79:4e:53:2c:90:35:03:f6:37:c3:de:fc:9d:38:bb:51:
96:65:a9:bb:ba:84:ba:6d:ce:28:19:83:12:fd:6a:00:a3:63:
65:30:c2:ed:05:8a:85:5c:dc:53:72:1a:ed:de:bc:93:61:60:
3d:5e:75:eb:0d:6b:35:49:4d:59:71:88:a6:bf:1d:96:57:a9:
5a:72:ab:1c:eb:d0:8d:c3:93:c1:28:03:4b:93:99:a4:79:8d:
9f:96:9c:c6:50:23:99:2b:7e:b5:d9:c2:85:0b:6c:37:fb:ca:
c0:c5:d2:df:d6:ab:7c:28:7a:e9:1d:55:7e:69:1d:4e:ed:92:
f1:66:3d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:53 2026 by rpki-client