Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
File: P__L7IiMEEfyIdfPk5a_FBKrr5s.mft (raw, json)
Hash identifier: bHayrH7qMBtxsVdOwDbQqZHSilIRVKXCSNpLDU/EcVI=
Subject key identifier: 0E:FD:3C:D3:DC:FD:14:E6:20:70:03:02:A0:01:A7:EE:D2:BA:82:00
Authority key identifier: 3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
Certificate issuer: /CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Certificate serial: 01A0E43E36BB5374CE457C2E1F4DEB64EA5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
Manifest number: 1062
Signing time: Sun 27 Sep 2026 19:01:17 +0000
Manifest this update: Sun 27 Sep 2026 19:01:17 +0000
Manifest next update: Mon 28 Sep 2026 19:01:17 +0000
Files and hashes: 1: P__L7IiMEEfyIdfPk5a_FBKrr5s.crl (hash: eafqE9efbBaZjLCDpsgwLWvKC4he1PvT6RoaPelh7p4=)
2: SaGiZjjt90SX7-BzKCTX7bYUJCE.roa (hash: shQxuuEzemQfoeUgl6rxwi+Wbc4ekvnlLIFK68Q9YjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:3e:36:bb:53:74:ce:45:7c:2e:1f:4d:eb:64:ea:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Validity
Not Before: Sep 27 19:01:17 2026 GMT
Not After : Sep 28 19:01:17 2026 GMT
Subject: CN=0efd3cd3dcfd14e620700302a001a7eed2ba8200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e2:89:91:85:b9:a8:30:e5:08:51:69:ee:ed:
cd:71:a3:49:1e:8d:06:b0:72:82:67:d4:33:98:0f:
83:61:11:a0:6a:2f:74:cc:46:db:e7:93:62:ed:5d:
ca:a4:15:5e:45:1d:a7:59:64:30:78:e4:f5:e5:10:
91:9a:d5:bd:cf:27:ed:aa:85:c1:88:42:d1:14:09:
3d:0f:e5:1f:8f:de:4e:f7:50:79:9d:da:af:7e:70:
13:d4:63:db:76:92:bf:0d:a1:33:c9:d3:78:88:8d:
64:69:dd:44:24:c4:52:28:1f:14:0d:2a:b3:e6:70:
a9:a0:00:f1:10:2b:ac:75:2d:38:db:f0:4d:88:51:
9f:36:b6:56:d2:d7:a7:62:2e:54:8f:bd:99:2c:3a:
2a:2a:fe:01:8f:b6:92:2a:5b:dd:ac:d1:cd:f0:37:
21:b5:6e:37:e5:f7:42:f6:dc:6d:36:a9:d9:11:ff:
58:2d:00:fc:b5:07:c5:51:5c:2f:84:5b:01:77:46:
ad:97:89:ad:f1:83:79:74:74:72:7d:23:57:98:d0:
53:38:4e:fd:81:44:0a:3e:6c:07:d5:87:a1:45:cd:
f5:80:da:11:cb:0b:21:93:64:87:97:94:1c:e4:72:
03:59:75:dd:d9:ec:26:60:99:a1:6a:89:b9:82:82:
bc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FD:3C:D3:DC:FD:14:E6:20:70:03:02:A0:01:A7:EE:D2:BA:82:00
X509v3 Authority Key Identifier:
keyid:3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:0f:fe:bb:59:b9:bb:64:ea:f0:1a:20:ad:24:8c:ea:4f:40:
1f:51:1e:c1:69:6b:31:7d:3c:c2:3d:9a:d2:7f:bc:ad:28:e5:
d0:ba:70:b6:4c:6f:72:9b:6e:5a:e1:ca:96:26:0f:56:5f:37:
4f:89:5a:ea:cd:d3:fe:90:18:08:94:e4:a5:eb:29:64:ec:66:
9d:c1:39:86:76:19:d3:9c:a2:e8:ec:88:d1:7c:53:4a:c5:2b:
a5:f5:87:3c:ad:96:58:0c:bd:c3:c5:c6:70:26:22:98:4c:80:
67:b8:b8:77:1d:28:96:1f:bb:67:21:ff:22:03:af:15:2c:cf:
0f:d9:4a:33:02:49:0c:d1:0d:47:53:7e:bf:1e:63:50:d3:91:
40:ab:c7:ac:34:d2:d9:f9:b3:85:39:26:fd:eb:d3:1d:a7:aa:
33:a6:95:d8:25:a3:df:22:be:ba:0c:cc:16:0f:0c:cf:0d:f7:
ed:6a:eb:40:21:50:92:a4:09:d8:bb:b9:93:08:50:06:a3:37:
d2:9c:92:b4:52:aa:e6:66:59:cf:61:ee:78:c3:14:b2:9a:f2:
1f:6a:41:0d:a2:8c:44:44:0d:dd:88:f5:f7:32:ff:d0:2e:88:
af:e7:5d:14:83:05:f4:f5:ec:67:d3:e9:99:32:f4:ff:b9:11:
cd:fb:d3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:57:30 2026 by rpki-client