Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
File: p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft (raw, json)
Hash identifier: UOHcn0UP87m1Dl9cdMJNDS1ImGuoNadVqot/uMpa2m0=
Subject key identifier: DA:CD:F6:76:93:EE:5F:23:F6:96:01:CB:AE:EC:3B:85:C1:69:41:AE
Authority key identifier: A7:77:20:C7:DC:1D:C3:ED:D1:D0:D4:7F:92:3B:CD:83:3F:06:AF:36
Certificate issuer: /CN=a77720c7dc1dc3edd1d0d47f923bcd833f06af36
Certificate serial: 01A181F492DEDDE0DF392D3D99462472DB2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
Manifest number: 0ACF
Signing time: Wed 28 Oct 2026 10:00:51 +0000
Manifest this update: Wed 28 Oct 2026 10:00:51 +0000
Manifest next update: Thu 29 Oct 2026 10:00:51 +0000
Files and hashes: 1: 8HLfSggRfCQKqxfP5-UeXb00I7g.roa (hash: Z2nghP6xwioSl3jH3QUVmpIFKFZILHts7G8PmuEqq+Y=)
2: CYXPumOChSdoMa-5o0FCbfSsOYE.roa (hash: Ki1vUDNQjiNnTFWXimQLwQJZU9YwEW1064X+1jbc6MM=)
3: p3cgx9wdw-3R0NR_kjvNgz8GrzY.crl (hash: DjtUgOqdjf27NqgJIZXopWAd7jtWwwVnNUCoZMSoLPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:f4:92:de:dd:e0:df:39:2d:3d:99:46:24:72:db:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a77720c7dc1dc3edd1d0d47f923bcd833f06af36
Validity
Not Before: Oct 28 10:00:51 2026 GMT
Not After : Oct 29 10:00:51 2026 GMT
Subject: CN=dacdf67693ee5f23f69601cbaeec3b85c16941ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:bf:0c:bd:b7:96:74:2c:66:a4:ae:07:dc:d3:
c3:68:49:d0:55:94:18:cd:42:ef:ad:89:83:52:63:
21:b0:aa:1e:a8:eb:85:0e:05:c7:87:13:45:7d:e7:
4a:8c:27:61:c7:0a:d3:5c:e8:6b:8c:6d:fa:5b:9c:
cb:1b:72:0b:8d:d8:13:3f:55:21:50:1d:7b:90:15:
8f:ea:38:99:d9:15:8e:be:5a:c5:9d:93:f2:36:11:
02:38:aa:24:06:de:8c:44:3e:1e:40:9c:b4:02:8b:
1a:8b:c6:a5:70:bf:c3:1d:e9:3d:b1:20:92:91:33:
ce:13:4b:86:ef:d3:53:1f:32:b9:13:1d:f8:13:63:
88:9f:2a:bd:a2:70:93:13:dd:15:61:69:17:b2:d0:
fb:9e:29:ef:6b:8a:fc:0a:6a:ef:24:fa:b5:98:c6:
5f:4f:a5:76:03:d2:82:1d:80:ef:10:b2:85:a5:42:
84:5c:51:63:6e:7a:43:b0:3d:bd:64:e1:cd:af:fc:
d9:ce:71:b8:c0:8d:41:c7:a6:c4:c4:b3:9f:80:8e:
b8:ae:e4:8f:59:75:9e:4a:fb:03:a4:af:9f:0f:74:
68:02:54:ef:27:69:d7:f3:64:e6:9c:fd:dc:dc:f9:
3c:f8:d0:65:b7:47:3b:e8:0b:4c:64:0d:2b:00:69:
ee:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CD:F6:76:93:EE:5F:23:F6:96:01:CB:AE:EC:3B:85:C1:69:41:AE
X509v3 Authority Key Identifier:
keyid:A7:77:20:C7:DC:1D:C3:ED:D1:D0:D4:7F:92:3B:CD:83:3F:06:AF:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:06:67:32:e7:65:88:63:d0:76:32:fc:b9:35:82:aa:5a:52:
26:86:54:d8:86:9e:45:de:6d:83:8d:1d:2b:0d:fb:7d:ca:9e:
ac:8e:e1:5a:0c:15:f3:13:08:85:16:d5:4e:8b:5e:0a:f8:b8:
f4:45:25:a6:e3:f1:cc:91:9e:89:20:74:2c:5b:ed:e7:e4:01:
be:24:31:95:b2:30:b3:21:bc:dc:8b:a6:d7:30:86:7f:1d:6b:
68:f1:6a:8f:9d:10:68:2b:fb:82:f9:59:c3:78:91:29:ca:c9:
69:8f:70:a3:fa:60:9d:e6:9f:5c:7f:c9:c7:4f:45:7e:a1:0d:
90:dc:1a:c4:f1:63:8f:5b:9e:4f:b2:4e:17:da:cb:73:38:dc:
cb:f7:77:a5:32:d5:27:fe:7d:34:24:3e:03:e6:e7:cc:c4:8e:
e0:17:03:cf:e3:43:a4:5d:4f:6b:a5:f3:8b:ac:b7:da:5d:c3:
0b:76:67:a9:e7:0a:7f:25:06:a2:0d:65:55:ba:06:34:d3:04:
b1:47:14:72:8f:ca:2e:59:01:07:dc:a3:be:e3:61:29:d8:3a:
0f:13:36:b1:ee:99:23:d8:3c:65:06:94:30:61:0a:3e:79:c0:
7f:0c:97:d2:9e:e0:dd:8c:30:64:c0:15:90:87:84:a3:56:4d:
86:6c:6e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:32:48 2026 by rpki-client