Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
File: P__L7IiMEEfyIdfPk5a_FBKrr5s.mft (raw, json)
Hash identifier: gmXnoh8JETcBWqceNEgOHtTnt9SbUYYTRSZYQU9V/lo=
Subject key identifier: 3E:63:7F:DC:89:AA:A6:F7:D8:78:70:F7:72:55:53:7B:F2:8F:EC:C3
Authority key identifier: 3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
Certificate issuer: /CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Certificate serial: 019D37C03103218DFAFCC7A5B00AFACE06AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
Manifest number: 0E7B
Signing time: Sun 29 Mar 2026 04:00:35 +0000
Manifest this update: Sun 29 Mar 2026 04:00:35 +0000
Manifest next update: Mon 30 Mar 2026 04:00:35 +0000
Files and hashes: 1: P__L7IiMEEfyIdfPk5a_FBKrr5s.crl (hash: xaZXcoQd3LtDPkcpjueF0NEIrjEcKTkKrcvyd/yXVvY=)
2: SaGiZjjt90SX7-BzKCTX7bYUJCE.roa (hash: shQxuuEzemQfoeUgl6rxwi+Wbc4ekvnlLIFK68Q9YjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:31:03:21:8d:fa:fc:c7:a5:b0:0a:fa:ce:06:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Validity
Not Before: Mar 29 04:00:35 2026 GMT
Not After : Mar 30 04:00:35 2026 GMT
Subject: CN=3e637fdc89aaa6f7d87870f77255537bf28fecc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c6:dd:40:7e:5d:96:09:fa:34:32:24:a9:48:
6a:70:85:37:21:dd:7b:f9:4a:59:6a:68:4d:03:08:
71:8d:46:e5:b6:66:91:19:dd:2f:16:af:c0:5c:c2:
1f:ac:fc:bf:29:45:76:e8:8f:47:5a:bd:dd:f5:4f:
d5:a4:3c:f2:e7:57:96:9f:db:3c:ed:cf:dd:40:c8:
a2:8d:9b:00:7e:83:75:a2:f0:7f:72:39:db:15:56:
c3:f0:10:8a:76:3e:d0:10:96:a6:84:8a:e3:a8:76:
ad:e6:2f:4a:ab:60:bf:32:be:b5:9f:35:af:ee:4f:
1d:91:b8:c2:59:43:67:ac:bd:88:db:f7:84:62:0e:
58:e5:7e:c9:16:c7:fc:77:59:dc:22:7e:2e:25:7f:
2f:4e:ac:ef:f0:c1:72:ab:af:da:0c:b4:85:bd:87:
48:6f:dd:4e:06:47:b3:1e:0d:ad:b6:ed:aa:44:f7:
d2:93:73:7e:0f:16:34:3f:32:40:1d:d7:70:cc:cc:
51:01:6f:35:e6:10:62:e9:70:4d:0e:ba:4b:44:28:
c2:51:83:e7:64:a5:1e:49:2a:3d:5d:f7:12:f3:17:
9a:62:65:e8:05:43:0d:5e:07:60:3b:fa:4d:af:cc:
b0:87:0a:8c:be:88:09:d5:32:5d:85:f8:fc:3d:6e:
bc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:63:7F:DC:89:AA:A6:F7:D8:78:70:F7:72:55:53:7B:F2:8F:EC:C3
X509v3 Authority Key Identifier:
keyid:3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ad:46:e5:02:7f:cb:78:df:29:3b:b5:81:f2:ff:cc:59:a4:
13:bb:10:8b:6b:16:4a:6d:5c:31:bc:f8:93:33:cc:01:80:d7:
e5:87:08:9a:6a:3f:30:3a:99:d8:b5:51:70:f1:9c:11:3f:ac:
f2:23:56:d5:ff:54:d9:0e:d5:4a:5d:be:82:73:8f:67:8e:9e:
8c:c0:0f:a3:59:f0:ee:2a:a2:e6:7a:d9:71:e8:1c:16:88:1e:
a5:23:45:1a:9f:7d:4b:c7:98:6d:16:c4:8a:01:d0:b0:63:ab:
dc:f9:72:13:c3:2a:f2:b8:57:9c:f4:27:6d:3f:54:7c:f1:db:
65:28:c1:ce:0f:ee:1f:c9:bf:f3:9d:78:72:00:71:7d:6b:91:
5b:f4:0e:b5:05:d1:fb:b1:f3:a4:8c:0b:4d:8c:e5:db:36:22:
66:65:63:d6:ee:70:cc:94:99:c6:5a:9e:ec:a3:ce:e4:43:af:
88:00:d5:79:56:95:a5:f8:64:fc:6e:f9:db:95:09:98:cd:db:
ba:40:cc:b6:08:3d:b4:b1:8b:47:6b:16:57:da:19:54:ff:61:
78:3a:05:c6:1c:4b:d1:4d:8d:a3:c0:98:97:53:01:9a:17:37:
ab:fa:2f:ce:00:c0:c0:16:c5:35:50:fa:bd:52:82:47:c6:a8:
a4:b4:8d:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wDEDIY36/MelsAr6zgasMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZmZjYmVjODg4YzEwNDdmMjIxZDdjZjkzOTZiZjE0MTJh
YmFmOWIwHhcNMjYwMzI5MDQwMDM1WhcNMjYwMzMwMDQwMDM1WjAzMTEwLwYDVQQD
EygzZTYzN2ZkYzg5YWFhNmY3ZDg3ODcwZjc3MjU1NTM3YmYyOGZlY2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8bdQH5dlgn6NDIkqUhqcIU3Id17
+UpZamhNAwhxjUbltmaRGd0vFq/AXMIfrPy/KUV26I9HWr3d9U/VpDzy51eWn9s8
7c/dQMiijZsAfoN1ovB/cjnbFVbD8BCKdj7QEJamhIrjqHat5i9Kq2C/Mr61nzWv
7k8dkbjCWUNnrL2I2/eEYg5Y5X7JFsf8d1ncIn4uJX8vTqzv8MFyq6/aDLSFvYdI
b91OBkezHg2ttu2qRPfSk3N+DxY0PzJAHddwzMxRAW815hBi6XBNDrpLRCjCUYPn
ZKUeSSo9XfcS8xeaYmXoBUMNXgdgO/pNr8ywhwqMvogJ1TJdhfj8PW68iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5jf9yJqqb32Hhw93JVU3vyj+zDMB8GA1UdIwQY
MBaAFD//y+yIjBBH8iHXz5OWvxQSq6+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUF9fTDdJaU1FRWZ5SWRmUGs1YV9GQktycjVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9iYmI3YjYtM2VlNS00NmQ5LWIzN2It
NjE2NjdjNzY5MWIyLzEvUF9fTDdJaU1FRWZ5SWRmUGs1YV9GQktycjVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9iYmI3YjYtM2VlNS00NmQ5LWIzN2ItNjE2NjdjNzY5MWIy
LzEvUF9fTDdJaU1FRWZ5SWRmUGs1YV9GQktycjVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYa1G5QJ/
y3jfKTu1gfL/zFmkE7sQi2sWSm1cMbz4kzPMAYDX5YcImmo/MDqZ2LVRcPGcET+s
8iNW1f9U2Q7VSl2+gnOPZ46ejMAPo1nw7iqi5nrZcegcFogepSNFGp99S8eYbRbE
igHQsGOr3PlyE8Mq8rhXnPQnbT9UfPHbZSjBzg/uH8m/8514cgBxfWuRW/QOtQXR
+7HzpIwLTYzl2zYiZmVj1u5wzJSZxlqe7KPO5EOviADVeVaVpfhk/G7525UJmM3b
ukDMtgg9tLGLR2sWV9oZVP9heDoFxhxL0U2No8CYl1MBmhc3q/ovzgDAwBbFNVD6
vVKCR8aopLSN6w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:10 2026 by rpki-client