Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
File: P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft (raw, json)
Hash identifier: LtqLDsoXxsdZYpdWJ9jTi5e+dxXkwsFc9ddDpZIsJIk=
Subject key identifier: 14:3C:A0:3D:E0:2F:D6:95:27:C9:A3:C1:3C:B6:36:93:DE:1B:65:DB
Authority key identifier: 3F:8B:0D:CB:79:FE:0A:E4:8B:A8:32:69:EC:12:83:84:70:CA:E9:0A
Certificate issuer: /CN=3f8b0dcb79fe0ae48ba83269ec12838470cae90a
Certificate serial: 019D38D3D1C2FBB85B92CAE022456A5074F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
Manifest number: 84
Signing time: Sun 29 Mar 2026 09:01:38 +0000
Manifest this update: Sun 29 Mar 2026 09:01:38 +0000
Manifest next update: Mon 30 Mar 2026 09:01:38 +0000
Files and hashes: 1: P4sNy3n-CuSLqDJp7BKDhHDK6Qo.crl (hash: YjlY50Tq1cac+sDtlW39N4djWGRGmRjpsAMLCUHAoWI=)
2: Z2hi7ItQ4ePG-89oC3NsOmcwohk.roa (hash: hpOgQ0YBy/9da8UmbyZyoarOicwd5QMZEwe4cjjhqvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:d1:c2:fb:b8:5b:92:ca:e0:22:45:6a:50:74:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8b0dcb79fe0ae48ba83269ec12838470cae90a
Validity
Not Before: Mar 29 09:01:38 2026 GMT
Not After : Mar 30 09:01:38 2026 GMT
Subject: CN=143ca03de02fd69527c9a3c13cb63693de1b65db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ff:78:78:70:be:d2:15:34:71:ac:9f:03:2d:
00:bf:19:c2:dd:40:3e:fb:68:cd:63:d9:62:3a:c6:
6d:ae:a9:44:da:ff:87:08:b2:76:aa:ae:35:6a:34:
59:cd:51:f7:47:12:83:fc:c5:3e:eb:97:cf:62:e3:
c9:6c:d8:31:51:b8:75:e7:1c:47:34:a6:ca:33:79:
53:e9:42:4a:f9:cd:03:a5:d6:fb:5c:e7:35:87:a1:
b8:95:7f:85:f3:38:d6:82:85:74:97:5a:14:04:4c:
db:21:c6:2d:0f:53:f2:05:2b:68:54:91:6f:77:83:
8d:2b:d8:db:b6:8a:a4:d9:f0:5c:ef:f4:e4:06:2b:
e0:4e:1b:5c:ad:e5:aa:f1:04:32:16:dc:61:35:f4:
3f:ca:90:5a:7c:d4:21:b4:a2:fb:63:47:c1:c1:65:
c9:e7:64:37:56:c9:56:93:75:78:99:0c:84:59:9c:
06:53:9f:05:ad:c8:f4:ec:07:18:22:32:02:36:69:
dc:2c:5e:37:02:26:7c:5d:5e:bf:c6:0a:e4:53:ca:
ae:71:68:44:a6:d8:d5:ed:eb:89:5e:65:8c:05:3b:
d0:22:33:b9:01:d4:a4:a4:82:10:94:2b:0c:b7:56:
ce:17:ee:4a:d0:ee:79:f2:0a:74:0a:e2:fa:03:b5:
93:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3C:A0:3D:E0:2F:D6:95:27:C9:A3:C1:3C:B6:36:93:DE:1B:65:DB
X509v3 Authority Key Identifier:
keyid:3F:8B:0D:CB:79:FE:0A:E4:8B:A8:32:69:EC:12:83:84:70:CA:E9:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:6f:30:1c:b4:11:dc:1a:58:b7:47:a1:ca:97:fe:63:c7:bb:
14:02:14:5e:86:4b:1c:35:75:10:ca:3f:9d:be:b9:7b:fe:b2:
02:fc:1c:a2:c0:d0:55:54:87:c1:7f:ee:42:89:ea:3a:f0:01:
f7:c4:4c:da:38:78:0a:ff:8f:27:1b:17:c0:cb:4a:3c:28:0f:
1c:bb:9e:5b:90:2c:a3:a2:d1:71:41:be:3a:66:b0:5d:0a:21:
5d:f8:60:ac:4a:10:d4:ad:c5:8e:76:e1:5d:e2:b3:c2:fd:d4:
55:85:46:74:bd:14:6e:e0:d4:99:e3:64:64:40:89:3f:95:5b:
d5:65:d9:c0:64:5c:a3:64:fe:19:b0:16:22:39:a6:b0:a6:f2:
e5:7b:8a:62:e0:78:4d:be:86:01:a9:c4:6e:0f:44:cc:ce:d1:
5b:f0:68:dd:35:50:1d:42:f4:69:b8:84:59:76:82:54:83:cf:
78:2f:2f:56:b0:fe:0d:bd:13:00:3d:fc:b8:d4:d7:39:1c:9c:
71:e7:66:c2:f8:27:ff:a3:fc:ba:bd:0d:86:51:a5:53:7b:40:
9e:24:73:e0:31:b5:91:f6:98:67:37:46:54:29:98:c5:a7:88:
77:19:67:0f:9a:4e:96:3d:91:ea:3c:bd:19:7c:08:96:3d:66:
3f:89:0b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:37 2026 by rpki-client