Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
File: P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft (raw, json)
Hash identifier: R/WQKQH5F+VmM41sVy18s1oGn06Wwh6p+dsg4G0s6RM=
Subject key identifier: 88:05:6D:50:9C:C9:8B:E4:B5:6B:94:ED:0E:EC:A6:9C:90:57:1E:3B
Authority key identifier: 3F:8B:0D:CB:79:FE:0A:E4:8B:A8:32:69:EC:12:83:84:70:CA:E9:0A
Certificate issuer: /CN=3f8b0dcb79fe0ae48ba83269ec12838470cae90a
Certificate serial: 019FA0DFAA854D1AF5C6EC036D9D61EE91AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
Manifest number: 01C3
Signing time: Mon 27 Jul 2026 00:00:40 +0000
Manifest this update: Mon 27 Jul 2026 00:00:40 +0000
Manifest next update: Tue 28 Jul 2026 00:00:40 +0000
Files and hashes: 1: P4sNy3n-CuSLqDJp7BKDhHDK6Qo.crl (hash: JpOTs0X/RDgbVBbqifk0kwDAk9+LeKNiiSP3BKnE8dI=)
2: Z2hi7ItQ4ePG-89oC3NsOmcwohk.roa (hash: hpOgQ0YBy/9da8UmbyZyoarOicwd5QMZEwe4cjjhqvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:df:aa:85:4d:1a:f5:c6:ec:03:6d:9d:61:ee:91:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8b0dcb79fe0ae48ba83269ec12838470cae90a
Validity
Not Before: Jul 27 00:00:40 2026 GMT
Not After : Jul 28 00:00:40 2026 GMT
Subject: CN=88056d509cc98be4b56b94ed0eeca69c90571e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:97:5b:c9:9a:57:80:7a:db:7f:ca:37:9d:8c:
59:0f:ce:fc:8e:6b:e7:1b:a9:58:7b:e2:99:95:f9:
38:d5:eb:0a:41:f3:6c:00:ca:be:24:48:26:f7:ea:
76:23:f0:76:a3:3b:f7:56:37:87:88:4b:72:f0:5f:
c4:3f:d8:ad:0e:01:fc:80:be:f7:f8:2b:da:d7:9f:
df:99:9b:56:7b:31:23:c5:bf:53:98:4c:f0:8d:ea:
c1:1a:82:48:80:de:f4:70:ad:e5:0a:4b:d8:ce:3f:
82:d7:85:81:2b:bd:95:df:90:3f:40:be:91:ff:64:
c0:2e:19:ab:2e:1b:3d:d7:85:75:42:cf:9c:38:16:
6f:5c:0a:8a:47:e3:73:e7:9b:89:e8:a7:18:80:5c:
54:47:cc:7c:ab:0d:58:54:a9:c3:07:39:9f:bf:7a:
bb:65:d6:e0:56:64:e8:6c:32:84:b2:e3:24:64:5a:
eb:3e:67:83:43:2f:6c:78:04:aa:42:f4:fb:54:7a:
e9:ca:15:5e:29:23:24:47:f6:2d:bd:07:7d:21:ba:
86:a7:29:00:f3:3f:45:e7:58:d8:7f:a0:25:55:25:
c5:2e:be:7b:0d:2e:5d:a4:1d:f9:a6:5f:79:88:ed:
74:9c:bb:67:85:e6:a2:c5:20:fb:a9:1e:8c:08:a8:
d3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:05:6D:50:9C:C9:8B:E4:B5:6B:94:ED:0E:EC:A6:9C:90:57:1E:3B
X509v3 Authority Key Identifier:
keyid:3F:8B:0D:CB:79:FE:0A:E4:8B:A8:32:69:EC:12:83:84:70:CA:E9:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:10:49:b5:cb:e2:90:85:8c:8f:cb:73:2b:35:32:96:ed:81:
cf:9b:13:cd:02:e2:7b:2c:f5:3f:0b:ea:6e:60:0f:1a:59:1d:
23:83:44:78:a9:04:73:0c:06:df:13:f3:49:a2:2c:0a:82:f0:
3b:2f:a4:37:d4:3f:a3:e5:4a:b3:26:8b:1c:2d:88:6b:80:80:
68:f1:85:bd:de:16:8b:6b:8d:02:a3:25:62:4e:81:5d:eb:31:
40:7a:b3:89:da:82:3c:ea:9e:9d:8d:42:ec:67:84:01:9a:b2:
a0:3f:14:37:91:4a:e5:c5:ba:1c:cd:f0:84:44:da:d9:f7:4f:
c5:05:c1:48:28:d9:22:22:7e:39:4f:45:3c:cb:32:b1:a7:b7:
fb:75:2e:6b:6c:2a:89:28:91:c8:c3:ab:97:eb:3f:fb:58:56:
bd:5f:3f:4a:08:ed:5d:c2:f5:4a:54:cf:23:12:f6:1b:01:53:
9a:83:e4:07:bb:67:44:15:59:02:2e:3b:5b:87:8d:bd:21:f1:
29:f5:dc:ea:16:9a:2a:ac:7c:b5:80:98:86:cf:ac:6f:56:e4:
5f:c7:a6:21:ca:07:44:53:7d:d1:f8:bb:6a:8f:75:37:ff:22:
02:82:00:2a:39:8c:5f:25:7d:a0:ea:69:75:a6:bc:50:97:01:
50:4e:8f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 01:45:51 2026 by rpki-client