Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft
File: P591E-0Eyp_o96RU6CeY0E8agKg.mft (raw, json)
Hash identifier: P9l1RG8R2nfWWVbaoagF0+R9FfYWBLwjQwzfHxKKDCw=
Subject key identifier: C7:C2:40:4C:BE:84:EC:DC:AA:07:76:15:C9:0A:22:AB:BE:0C:D8:81
Authority key identifier: 3F:9F:75:13:ED:04:CA:9F:E8:F7:A4:54:E8:27:98:D0:4F:1A:80:A8
Certificate issuer: /CN=3f9f7513ed04ca9fe8f7a454e82798d04f1a80a8
Certificate serial: 019D3865B3EB112E5A4216A25DBAD36A5D37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P591E-0Eyp_o96RU6CeY0E8agKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft
Manifest number: 07B0
Signing time: Sun 29 Mar 2026 07:01:22 +0000
Manifest this update: Sun 29 Mar 2026 07:01:22 +0000
Manifest next update: Mon 30 Mar 2026 07:01:22 +0000
Files and hashes: 1: P591E-0Eyp_o96RU6CeY0E8agKg.crl (hash: 9vW2jC0VFboNqMssQ7AC/tZMrB3gW/q0kUIWQHw9gcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/P591E-0Eyp_o96RU6CeY0E8agKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:b3:eb:11:2e:5a:42:16:a2:5d:ba:d3:6a:5d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f9f7513ed04ca9fe8f7a454e82798d04f1a80a8
Validity
Not Before: Mar 29 07:01:22 2026 GMT
Not After : Mar 30 07:01:22 2026 GMT
Subject: CN=c7c2404cbe84ecdcaa077615c90a22abbe0cd881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9d:e9:6d:b2:f9:7a:1d:2d:e2:a2:2a:ce:ae:
a7:bc:03:aa:9c:1a:0f:6f:36:84:68:54:77:96:dc:
6a:ee:47:c0:5b:15:c6:ee:cc:19:a9:33:37:5a:e0:
5b:bb:d0:59:14:84:08:3e:0f:4a:26:01:67:ad:cf:
dd:9a:27:90:d2:77:19:00:86:5f:8c:38:60:a6:43:
f9:a5:c4:4d:38:d6:00:55:98:0f:68:66:f6:c5:f1:
47:7e:8c:4e:86:13:bf:8c:92:15:ba:de:0a:73:c4:
73:36:29:ed:65:9e:41:3c:42:42:ca:7c:6b:ef:1a:
de:43:ab:20:8c:02:58:d3:94:e9:ba:ca:c4:b6:b8:
c8:6d:ae:00:86:e7:9e:7e:c5:ec:04:81:a2:22:48:
61:6b:d3:24:0e:5e:09:2f:16:77:01:21:6b:3b:0f:
f2:b8:50:eb:79:14:a0:72:09:9f:8c:11:71:66:f9:
e6:7f:20:92:e7:7d:fc:56:52:5d:1c:b0:93:a3:ba:
ee:2d:d6:29:63:34:4e:bb:0c:12:d6:14:80:72:7b:
ff:00:9c:0f:fc:52:93:3d:c6:eb:f6:cd:41:34:8f:
24:55:ae:7a:04:99:3d:f4:f9:99:94:df:02:8c:e1:
4e:7d:7e:81:69:e7:10:63:17:30:7b:69:6d:d7:17:
11:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C2:40:4C:BE:84:EC:DC:AA:07:76:15:C9:0A:22:AB:BE:0C:D8:81
X509v3 Authority Key Identifier:
keyid:3F:9F:75:13:ED:04:CA:9F:E8:F7:A4:54:E8:27:98:D0:4F:1A:80:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P591E-0Eyp_o96RU6CeY0E8agKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:07:92:3d:30:82:f1:3b:c8:f6:11:37:19:c2:73:69:3b:30:
08:03:c6:2a:89:ec:b6:61:28:a0:c1:f3:3b:59:66:25:f2:aa:
a4:bb:f8:34:03:25:e7:98:7e:d1:00:54:56:08:00:7a:76:88:
ba:f1:cb:11:45:be:51:cd:16:de:c5:6e:4a:08:93:e0:ac:f4:
d8:2f:7f:79:83:91:29:df:f2:c5:6c:1a:d1:c6:32:56:66:8c:
a6:0b:84:56:84:a2:37:6d:c1:74:03:51:45:a6:7b:4a:eb:83:
a9:df:17:32:ce:96:49:14:d9:a4:5a:61:be:36:ee:b3:c8:15:
28:dd:52:44:0d:b9:e0:bf:f4:e5:ac:e9:4f:5b:49:0f:33:c9:
bb:4a:76:8f:cc:d6:1c:84:44:18:5d:b9:62:ea:d8:71:48:32:
ea:31:fc:23:6a:78:9b:31:75:e3:30:a2:f0:53:5f:9b:a0:81:
06:b1:a7:18:bc:c2:36:4c:bc:17:95:44:0c:0d:b8:9f:a1:73:
66:2b:10:85:2e:b7:74:7f:60:6d:c0:0b:3a:d5:51:7f:a3:1e:
f0:cb:7f:c7:51:5a:55:cc:33:e4:f8:7a:23:50:ad:4c:7a:9e:
10:44:05:ac:c9:47:f8:9c:4d:e2:7d:d2:a2:12:e4:8a:1f:a1:
b9:0e:b1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:12 2026 by rpki-client