Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
File: PyixvqC1iXcj6nxfu918zSlSsFw.mft (raw, json)
Hash identifier: Hhhe9xw4SJ7cKU6foCP085fWJ/pjXgf2DtybeKjFWeU=
Subject key identifier: 11:B9:61:C1:03:CD:60:C1:FB:47:07:39:B1:C2:AD:B6:17:B8:3C:5F
Authority key identifier: 3F:28:B1:BE:A0:B5:89:77:23:EA:7C:5F:BB:DD:7C:CD:29:52:B0:5C
Certificate issuer: /CN=3f28b1bea0b5897723ea7c5fbbdd7ccd2952b05c
Certificate serial: 019D3909D4941AC89E36B1CBA141B5717547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
Manifest number: 0955
Signing time: Sun 29 Mar 2026 10:00:38 +0000
Manifest this update: Sun 29 Mar 2026 10:00:38 +0000
Manifest next update: Mon 30 Mar 2026 10:00:38 +0000
Files and hashes: 1: HFBIVRwGpzJll63ZQliW3YvEwfQ.roa (hash: PpccMH3E3902HeGqkwDft0ieaZ/z+dKhMdg631pjCEg=)
2: PyixvqC1iXcj6nxfu918zSlSsFw.crl (hash: pS3ukZ7UUvhTAZ/iDa7wkCtQQPIah7QWaqr3JJIrm6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:d4:94:1a:c8:9e:36:b1:cb:a1:41:b5:71:75:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f28b1bea0b5897723ea7c5fbbdd7ccd2952b05c
Validity
Not Before: Mar 29 10:00:38 2026 GMT
Not After : Mar 30 10:00:38 2026 GMT
Subject: CN=11b961c103cd60c1fb470739b1c2adb617b83c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:65:23:b9:bc:f6:84:75:79:81:81:66:cf:e6:
21:fd:7e:32:6a:af:b8:90:d8:36:b3:1e:a0:b1:ba:
79:aa:4b:ad:40:54:25:cf:af:d6:b2:a6:ba:9f:8b:
36:bd:92:1d:00:6c:1b:d9:73:81:5d:40:d9:00:12:
a3:8f:29:30:ab:c1:e5:c3:4a:10:27:14:a8:29:e6:
6a:08:85:b2:95:fb:7f:dd:05:03:35:6a:10:2e:fe:
b1:fe:35:38:1e:49:14:4a:72:d1:03:bd:05:f3:51:
d7:f6:95:33:21:e3:6c:1f:ca:d0:9e:66:60:78:ea:
9f:6d:89:af:13:12:81:58:e3:10:13:44:2d:3c:c8:
11:8e:f7:2d:7d:d5:18:9d:e4:74:d7:42:26:7c:fd:
ce:83:94:09:06:7d:40:e5:ef:42:1c:bc:a3:1c:fb:
79:d4:71:20:a4:24:92:7e:b5:4d:05:8f:b7:71:3f:
8c:79:03:d0:69:f7:ef:60:1d:c5:18:53:5d:22:b1:
26:85:93:9c:2a:f8:73:0a:00:2c:cf:60:5d:4b:52:
28:f2:8e:b2:a0:41:7a:6f:91:19:56:e8:e8:47:d0:
0b:3e:64:21:e1:f8:79:92:49:36:df:fd:f1:c3:d9:
01:11:25:f7:8a:d0:0d:e0:85:97:f5:8e:a2:82:41:
d4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B9:61:C1:03:CD:60:C1:FB:47:07:39:B1:C2:AD:B6:17:B8:3C:5F
X509v3 Authority Key Identifier:
keyid:3F:28:B1:BE:A0:B5:89:77:23:EA:7C:5F:BB:DD:7C:CD:29:52:B0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:28:55:d0:e8:e4:8e:da:3e:d4:45:b1:24:cc:2e:6c:cc:40:
16:28:48:0d:71:c8:1d:36:f2:ee:4a:71:49:e1:b6:10:d9:7b:
b7:21:0f:29:15:2f:d3:47:5c:38:2c:a4:d0:d0:e7:7d:2e:5b:
78:27:23:e7:99:f5:98:ce:e2:51:12:e2:c3:1f:6e:91:5d:15:
0f:d3:99:2f:6c:37:7a:53:46:4e:19:6b:fc:64:48:c6:84:20:
d1:9a:21:5e:6d:d1:f8:1b:ca:79:a4:c2:e8:bc:fa:ac:c3:95:
fe:12:0e:92:48:3f:60:4f:a2:44:66:cc:94:73:93:94:07:22:
9e:81:bc:56:98:76:82:8d:39:0e:b8:3d:f6:c7:69:c4:a6:8a:
11:9d:4e:0f:d1:58:60:e8:fc:11:b7:86:a2:e9:5e:3e:e9:a4:
32:dc:12:db:a1:d9:86:8d:11:c6:84:fe:50:f8:ca:b6:61:94:
3f:d7:05:f7:96:67:72:fc:35:f8:3a:f8:83:8c:f0:3d:ae:91:
0b:e5:d5:7f:8d:81:95:82:6a:3b:12:9e:4b:6a:47:64:72:24:
e5:d1:a5:ad:65:98:bf:e2:35:44:d1:13:bc:0c:e1:2e:69:af:
13:ee:33:ff:95:f2:4e:79:9b:0b:18:27:f0:8b:7c:5e:60:35:
73:36:4b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:00 2026 by rpki-client