Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
File: PD9FAh1us0CkKy5d0fv3IaGmbWE.mft (raw, json)
Hash identifier: Sew3es+H0LXYra5C7q6XEB2wK+8MydBbMEdNNyv/YiU=
Subject key identifier: 1E:6F:EA:A8:6F:D5:0E:B5:FB:74:A8:F9:11:AC:73:34:72:54:3F:BF
Authority key identifier: 3C:3F:45:02:1D:6E:B3:40:A4:2B:2E:5D:D1:FB:F7:21:A1:A6:6D:61
Certificate issuer: /CN=3c3f45021d6eb340a42b2e5dd1fbf721a1a66d61
Certificate serial: 019CE55A7B4BC859AF566FC2FEBEAC81A642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
Manifest number: 0F4B
Signing time: Fri 13 Mar 2026 04:00:38 +0000
Manifest this update: Fri 13 Mar 2026 04:00:38 +0000
Manifest next update: Sat 14 Mar 2026 04:00:38 +0000
Files and hashes: 1: KuWWtknOGKLAtEUJQ2qfl_jNlmg.roa (hash: W5TqBGi3Id1AxwKzwqUslwR28wws2MIYj5VeG6wq05Q=)
2: PD9FAh1us0CkKy5d0fv3IaGmbWE.crl (hash: sU8xzmSqXnrFpXyWhbMruaHyxNoW878nIrcKQCF8FZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5a:7b:4b:c8:59:af:56:6f:c2:fe:be:ac:81:a6:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c3f45021d6eb340a42b2e5dd1fbf721a1a66d61
Validity
Not Before: Mar 13 04:00:38 2026 GMT
Not After : Mar 14 04:00:38 2026 GMT
Subject: CN=1e6feaa86fd50eb5fb74a8f911ac733472543fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d3:c6:c9:68:2a:9a:8d:c6:84:65:56:6e:db:
bc:9b:82:3d:30:6f:c9:c4:84:5a:b3:a6:a2:33:e3:
1d:2b:18:1c:08:07:9c:a6:b8:48:41:16:56:81:7e:
f1:cd:a1:a5:35:1c:5d:ca:90:a7:3a:28:db:20:b0:
28:07:55:e0:2a:7b:18:1f:37:1e:e4:3e:97:4e:87:
52:9b:d2:1d:88:09:72:cb:90:75:8b:1f:c9:33:30:
94:c0:d8:d2:a4:3d:94:4a:34:10:a0:49:8b:7b:f1:
7b:5f:1e:9f:a7:80:0a:03:e5:b2:57:c6:fa:d9:30:
4e:70:80:75:8b:14:f1:05:6e:0e:7d:69:f1:56:22:
63:9e:bf:f2:89:29:80:c7:4b:4f:04:46:d7:dd:13:
94:8e:3e:c1:01:57:4d:73:d4:8c:f3:ca:4a:df:ec:
d2:83:cd:46:7a:f7:8e:e5:d4:ca:37:39:2b:25:64:
ef:85:e8:8c:99:28:e2:df:c9:c4:a9:8c:d9:58:86:
22:54:b2:36:99:a3:95:70:11:b5:06:85:95:ca:7f:
ec:6d:cc:10:5d:f0:7e:9e:bf:39:dc:e0:89:b3:36:
10:c6:3b:61:45:e2:90:7e:3c:64:d3:ec:36:6b:bb:
03:b4:78:63:0a:ac:01:74:87:fc:be:c0:a1:f5:17:
80:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6F:EA:A8:6F:D5:0E:B5:FB:74:A8:F9:11:AC:73:34:72:54:3F:BF
X509v3 Authority Key Identifier:
keyid:3C:3F:45:02:1D:6E:B3:40:A4:2B:2E:5D:D1:FB:F7:21:A1:A6:6D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b2:02:15:6b:36:bf:fc:40:9c:89:8f:ac:94:2f:37:81:e5:
ac:08:43:2f:fe:58:bb:e1:d6:b7:6b:cd:7d:b9:b4:8a:4f:20:
4d:4e:2d:0d:c9:1e:87:db:4f:a5:39:8e:ee:b2:4d:82:d9:25:
28:cd:2d:dd:11:90:93:48:c3:01:f8:c2:57:bf:dd:da:ef:fc:
6e:04:3a:4d:d3:7b:ff:84:72:88:5e:83:7f:8d:6f:30:cf:5b:
9a:b0:a7:49:88:49:bd:12:52:c4:56:ec:f9:da:a4:e1:51:f6:
a4:1c:d7:d1:85:2f:66:3f:51:52:ec:a6:f8:07:66:23:87:8e:
4d:8c:86:a2:bc:61:5e:e7:f8:9c:46:c5:38:6b:3f:0f:bc:42:
7a:4c:32:fd:8b:09:6b:35:bf:a5:b0:e5:ca:da:fe:fd:68:90:
ae:ce:c6:05:dc:69:32:45:5a:b5:89:bb:f9:e4:6f:55:34:89:
2b:27:5b:9e:91:f2:82:42:34:8f:28:db:d8:06:72:7e:e2:de:
ed:1e:da:e3:2a:17:8c:20:36:b7:6b:da:5c:9d:f8:d9:46:f1:
2e:1c:27:c0:f6:1c:5a:99:80:23:d5:38:22:1e:8f:d9:a7:94:
ab:51:a5:1a:98:1e:d6:e6:9e:51:b2:9f:17:94:bd:e8:e6:99:
2e:07:52:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:56:34 2026 by rpki-client