Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
File: PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft (raw, json)
Hash identifier: 6n069g5ZmgMPJsRac2XYwroig2v4ne6rhoKiqYfzmYM=
Subject key identifier: 6D:53:88:10:0A:A3:B5:7D:55:0E:AA:A5:B5:7A:FD:66:3A:55:86:48
Authority key identifier: 3C:8D:FE:10:9D:E8:31:D3:2F:D7:8A:58:CC:5C:1D:14:9A:45:53:D2
Certificate issuer: /CN=3c8dfe109de831d32fd78a58cc5c1d149a4553d2
Certificate serial: 019D3865B4673C514FCC9F2190F021E96F74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
Manifest number: 120D
Signing time: Sun 29 Mar 2026 07:01:22 +0000
Manifest this update: Sun 29 Mar 2026 07:01:22 +0000
Manifest next update: Mon 30 Mar 2026 07:01:22 +0000
Files and hashes: 1: OW3GzUlbWQENnbfu4RMR0Aal4tU.roa (hash: T8dOCgn615KaYC2W+2ZIkt7KqeRP31QpTplo42gs07s=)
2: PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl (hash: IR09jY2AD3Co5r7Dnivwi4zKZN63H3n20f5jom5DbiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:b4:67:3c:51:4f:cc:9f:21:90:f0:21:e9:6f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8dfe109de831d32fd78a58cc5c1d149a4553d2
Validity
Not Before: Mar 29 07:01:22 2026 GMT
Not After : Mar 30 07:01:22 2026 GMT
Subject: CN=6d5388100aa3b57d550eaaa5b57afd663a558648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3d:3d:bb:09:05:ed:2c:9d:9c:91:0e:aa:a5:
b7:87:c4:39:eb:f9:de:c3:de:5e:e0:16:e8:b6:43:
eb:7e:bc:1f:93:0f:ea:0f:fd:a3:f6:c6:40:68:f0:
2e:6a:6f:8f:ff:00:86:37:bf:3f:3f:82:99:b4:94:
64:b5:c5:87:fc:00:82:af:54:fb:5c:12:99:62:99:
c8:2b:a8:71:f2:38:d4:5a:1e:3f:4e:d0:7a:7b:03:
d4:d5:6d:a1:be:d2:76:f9:ab:ee:1f:e8:65:5f:ab:
4e:c4:de:fc:e5:e6:28:91:0e:2b:19:7b:7a:68:16:
52:c6:25:00:bd:b7:0c:c1:48:33:f8:45:a5:ea:2e:
9f:b9:cf:58:46:2d:72:78:8c:8a:9d:6c:30:b6:4a:
c9:cb:05:d3:ac:b8:70:b5:ad:a2:c3:f7:9d:d0:04:
7d:a6:2e:7f:1d:8e:70:0d:68:40:67:de:94:4d:f8:
b2:bc:d8:b8:54:0e:0e:f7:c9:07:89:04:c9:7e:df:
70:38:cd:81:c1:78:64:e4:4c:42:7e:29:00:9e:c2:
dc:38:10:0f:14:36:4f:61:32:59:34:44:53:f0:dd:
cb:0e:4d:64:5b:7c:af:45:c7:b8:57:85:13:14:32:
68:9b:97:34:c7:c7:26:d6:5e:f3:b0:af:05:84:aa:
9e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:53:88:10:0A:A3:B5:7D:55:0E:AA:A5:B5:7A:FD:66:3A:55:86:48
X509v3 Authority Key Identifier:
keyid:3C:8D:FE:10:9D:E8:31:D3:2F:D7:8A:58:CC:5C:1D:14:9A:45:53:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:9b:7c:ee:a8:23:55:a1:36:66:89:aa:26:05:d1:b3:98:1f:
05:53:21:37:2b:0f:6f:bd:59:ae:66:05:c5:b4:f6:f3:b1:8b:
3c:78:47:50:a7:c0:11:f5:62:9b:65:25:37:03:59:52:a2:09:
dd:cc:e5:21:c1:21:71:e3:fb:7a:62:20:91:cc:99:51:ea:e4:
3d:57:1e:d6:f7:be:5b:21:a7:ea:9e:ed:70:0b:74:60:4e:84:
ca:e0:87:07:fd:1d:a2:4d:4f:f7:91:cb:58:e2:40:ee:5c:9e:
94:89:e7:09:46:67:85:eb:9a:49:6d:7d:0f:50:f6:67:73:77:
71:e9:3f:72:0e:91:5f:07:ef:d3:21:30:21:70:39:19:88:29:
36:0c:29:6f:2d:9b:9a:8f:63:d3:2a:dd:ef:1e:64:d4:50:b2:
af:9e:5d:26:eb:ef:1a:cf:81:f7:c2:94:e9:5a:d7:4e:80:b5:
b4:ba:98:36:dd:12:fd:24:0b:43:62:d6:e3:52:f0:76:7c:fb:
26:2e:08:b5:ba:bb:2e:d4:1f:cc:16:0e:0d:77:78:dd:f9:ce:
49:45:e7:91:1f:6f:ad:19:8a:fd:ba:4c:21:5b:ca:2e:b3:06:
94:28:f1:6c:5d:47:37:bf:1b:d6:13:ab:1f:43:8d:5b:31:89:
25:2e:36:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:04:59 2026 by rpki-client