Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/P1oa6clM3jczsUz3HS5FAjYCG-c.mft
File: P1oa6clM3jczsUz3HS5FAjYCG-c.mft (raw, json)
Hash identifier: mhIwMRyem66vM0U9Km4xkOenVBus/8gg7PXSXJnmjbc=
Subject key identifier: E2:94:64:6C:FE:42:66:AA:66:4C:89:7A:B5:AA:35:85:1A:77:6E:3E
Authority key identifier: 3F:5A:1A:E9:C9:4C:DE:37:33:B1:4C:F7:1D:2E:45:02:36:02:1B:E7
Certificate issuer: /CN=3f5a1ae9c94cde3733b14cf71d2e450236021be7
Certificate serial: 019F81F93F85AEF615DED66A08E8494D117A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1oa6clM3jczsUz3HS5FAjYCG-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/P1oa6clM3jczsUz3HS5FAjYCG-c.mft
Manifest number: 38
Signing time: Tue 21 Jul 2026 00:00:23 +0000
Manifest this update: Tue 21 Jul 2026 00:00:23 +0000
Manifest next update: Wed 22 Jul 2026 00:00:23 +0000
Files and hashes: 1: 5tvg6R-aNFHAmDm8hsBhHIkdM_o.roa (hash: oPbe4w173UuB1VDOYJqEbd8iNWC/h8MGEf5qvBqUZd0=)
2: P1oa6clM3jczsUz3HS5FAjYCG-c.crl (hash: WA8NJm43Q7V8G5LgDpcvprZOPNNdOWjFmBzPglRmoCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/P1oa6clM3jczsUz3HS5FAjYCG-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/P1oa6clM3jczsUz3HS5FAjYCG-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1oa6clM3jczsUz3HS5FAjYCG-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 00:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:f9:3f:85:ae:f6:15:de:d6:6a:08:e8:49:4d:11:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5a1ae9c94cde3733b14cf71d2e450236021be7
Validity
Not Before: Jul 21 00:00:23 2026 GMT
Not After : Jul 22 00:00:23 2026 GMT
Subject: CN=e294646cfe4266aa664c897ab5aa35851a776e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:61:51:84:90:80:da:66:6f:5c:8d:ac:4e:e4:
ad:55:a4:f8:c6:63:f7:28:23:ba:68:48:26:b5:ed:
44:f6:f7:96:cc:c7:b8:72:93:b2:c6:59:7c:a5:fd:
0b:10:f0:1f:12:49:7a:c1:e4:4e:d6:c6:ea:73:6b:
d0:6f:37:91:c5:76:90:4c:5d:d5:97:29:0a:ee:3a:
cd:f6:90:b1:d8:f4:ec:bd:a4:a6:a2:a8:e4:29:d7:
34:fd:86:88:bf:2f:fc:97:24:e0:9e:49:f0:68:e5:
06:03:e8:74:36:7a:b7:b3:30:f2:59:6a:dc:c2:4e:
ae:dc:b2:f6:cd:cf:a0:59:3b:d7:ab:7e:ab:e9:5f:
04:31:06:8d:e9:4b:93:bd:18:e3:14:ac:7c:68:e5:
1a:55:8f:b8:2d:63:83:a4:a1:ae:e4:96:36:f2:41:
8a:a6:af:03:9f:54:28:29:41:c4:61:e3:82:e5:b6:
f6:26:84:93:2c:70:99:e4:93:18:37:80:9f:ff:2d:
d7:58:1c:b6:f8:df:f5:6d:9c:24:8f:4f:a1:93:ab:
5d:ab:e3:10:4f:bf:08:84:ae:af:1b:b5:62:2d:76:
a5:b6:bf:7e:7a:eb:29:e4:bb:82:ee:9a:18:4c:b6:
81:a6:c1:07:2e:a9:74:a8:ac:af:37:0f:15:95:5e:
6b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:94:64:6C:FE:42:66:AA:66:4C:89:7A:B5:AA:35:85:1A:77:6E:3E
X509v3 Authority Key Identifier:
keyid:3F:5A:1A:E9:C9:4C:DE:37:33:B1:4C:F7:1D:2E:45:02:36:02:1B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1oa6clM3jczsUz3HS5FAjYCG-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/P1oa6clM3jczsUz3HS5FAjYCG-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/P1oa6clM3jczsUz3HS5FAjYCG-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:3a:f9:ff:a0:e4:2c:50:f1:7d:56:12:40:72:86:00:47:97:
ae:43:91:4a:28:a7:0b:89:5f:6c:9f:10:d5:51:5f:b0:61:e3:
12:c8:d3:9e:5d:d5:95:23:76:9d:09:80:2b:16:fc:e1:3a:7a:
ac:e5:b7:4a:c3:ba:ce:a6:d2:28:72:98:19:0e:ec:36:ba:c4:
c9:04:cd:99:00:4d:29:d8:8b:fa:de:ef:1a:f2:57:68:70:43:
5f:1e:c3:50:ba:b3:ca:f6:33:c8:7e:98:3a:ab:ae:ac:ae:14:
ce:4b:9f:d0:09:60:3b:0d:45:ac:33:4a:0d:cc:91:b2:75:fb:
41:85:fc:69:fe:b7:a3:1b:05:34:7e:65:ab:f8:69:2b:bd:e9:
37:0e:4a:87:25:0e:48:aa:4d:d2:6f:05:76:1a:96:9d:5b:ae:
62:80:5a:9a:ac:87:6d:7b:7a:eb:1a:34:24:5b:2a:53:21:94:
0b:0f:96:a1:2a:de:42:12:d6:2f:8a:b6:4a:f8:c6:39:08:f9:
16:ab:b0:2a:c5:9b:0f:5b:01:93:9d:99:8a:d6:cd:fa:98:4c:
92:63:59:f7:9b:ba:e8:68:2f:af:ac:e8:b4:6a:1f:79:92:d8:
f3:8e:d4:c0:3a:14:b9:5a:4b:72:7a:ea:7e:b6:1d:d5:ad:64:
cd:1d:4f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:59:48 2026 by rpki-client