Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
File: P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft (raw, json)
Hash identifier: 9QtMJjp8otGpvKOq02U5HbA+I+hXEOMUpgnyLWqbA5I=
Subject key identifier: 1C:E5:F4:28:D8:5E:FB:FE:39:87:3F:84:BD:CE:B0:28:E1:7D:E0:E0
Authority key identifier: 3F:DA:63:02:13:CD:42:38:80:F9:FE:F1:6D:78:FB:43:6E:08:F2:47
Certificate issuer: /CN=3fda630213cd423880f9fef16d78fb436e08f247
Certificate serial: 019D37891B030008C16F5CF3792C8EA09919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
Manifest number: 0F6F
Signing time: Sun 29 Mar 2026 03:00:25 +0000
Manifest this update: Sun 29 Mar 2026 03:00:25 +0000
Manifest next update: Mon 30 Mar 2026 03:00:25 +0000
Files and hashes: 1: P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl (hash: dHc/KiBRrETDanzRHxXZGJOH+V2Efp5SzNEW4/3b+u0=)
2: qVEqTtkKfrVc5YzchSUNgfDRorc.roa (hash: K5fpw+GM90GMUvrPrbhqWZwOZsGaqvdsEI7pyNmXxYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:1b:03:00:08:c1:6f:5c:f3:79:2c:8e:a0:99:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fda630213cd423880f9fef16d78fb436e08f247
Validity
Not Before: Mar 29 03:00:25 2026 GMT
Not After : Mar 30 03:00:25 2026 GMT
Subject: CN=1ce5f428d85efbfe39873f84bdceb028e17de0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:44:0c:34:08:a4:c6:6b:d3:a4:0e:ab:31:0c:
bb:51:a9:dc:84:64:c6:da:83:3d:4b:80:ab:10:13:
cb:a6:89:7c:f9:72:17:6f:23:22:47:09:db:03:73:
7c:25:0d:42:32:5f:27:bd:91:64:0a:1c:bf:fc:ea:
aa:21:10:79:da:ed:47:f5:7e:35:f0:0a:4d:21:8f:
57:7a:66:fc:f7:02:dd:32:8c:0b:c6:69:c2:bf:20:
29:80:d0:93:59:a0:3f:18:37:b1:d1:02:70:1a:bd:
da:30:97:fd:3d:08:8d:a8:76:d6:71:e6:b9:66:d5:
5b:ed:7c:7c:a2:97:7d:2b:4b:79:fe:4b:f3:77:77:
54:37:03:06:10:a1:25:15:ab:cf:81:99:1f:e1:be:
15:c7:61:46:74:36:f0:0c:9d:3d:52:71:ad:4b:36:
47:c4:e2:e6:ce:a9:cc:99:22:89:8e:7d:65:4a:42:
ac:81:5e:39:36:93:3d:b4:84:6d:58:09:5d:ee:1c:
73:f6:fd:f0:34:8b:70:5c:51:64:bc:6a:21:af:73:
0a:ac:65:25:09:a1:5c:16:bf:aa:aa:66:40:67:92:
ad:c2:e5:3f:a3:57:6b:e5:b0:fc:79:a9:1b:56:dc:
bb:97:5f:96:11:ed:bb:17:b4:03:4f:ff:b8:e8:af:
e7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E5:F4:28:D8:5E:FB:FE:39:87:3F:84:BD:CE:B0:28:E1:7D:E0:E0
X509v3 Authority Key Identifier:
keyid:3F:DA:63:02:13:CD:42:38:80:F9:FE:F1:6D:78:FB:43:6E:08:F2:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e6:85:18:bb:de:08:6a:f0:bf:35:df:05:e6:e6:db:65:79:
b9:21:2c:d6:99:1f:de:ed:1c:22:2e:fe:8a:39:eb:81:4d:cd:
b0:64:f5:bd:8e:0d:be:62:e5:ec:fd:10:31:bb:fd:78:76:e7:
86:50:84:0b:7b:f4:de:af:8f:e8:12:4c:94:c5:0d:ca:2d:c9:
a5:b0:a7:86:cf:25:57:cb:a3:0a:16:07:8f:e3:50:0a:f6:9c:
d6:82:c7:bd:50:a1:36:3d:55:3f:56:ab:6d:23:89:9d:64:7f:
37:78:79:15:95:51:6f:1e:48:17:57:96:e6:bf:ef:f0:7f:41:
e4:bc:f3:da:f1:d2:0d:bc:c0:37:57:b9:c3:1f:04:7a:8d:91:
c5:69:2c:4b:3a:79:c1:58:e2:b2:a3:ac:fc:de:f7:60:3d:1f:
e7:e8:b6:22:50:a7:33:98:ad:a3:da:7c:62:a5:46:3a:cb:7e:
e9:a5:59:3b:60:f7:32:d4:8f:dd:9b:a9:9d:75:f8:74:80:69:
27:a3:ed:61:49:84:9f:5a:e4:37:42:7a:fe:7c:a2:b0:db:e8:
c3:66:06:4b:f2:0d:22:36:40:03:da:51:fa:6a:09:7b:bf:ec:
28:b7:8c:54:6c:cb:ae:cf:39:9c:a9:ab:d4:9f:c4:7e:28:fc:
73:6c:32:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:09 2026 by rpki-client