Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
File: P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft (raw, json)
Hash identifier: IY32FEpwH2jmVP/fPZ2tYPqyT9XP4KWVcVqgE5HsKAc=
Subject key identifier: 94:6B:29:1A:4A:43:67:60:F3:04:46:CA:34:4A:9D:9C:1F:9B:FC:C5
Authority key identifier: 3F:F5:8D:FF:BA:4D:F6:AC:34:BD:9F:48:11:9A:E1:1C:FE:F8:A7:6C
Certificate issuer: /CN=3ff58dffba4df6ac34bd9f48119ae11cfef8a76c
Certificate serial: 019F0EF708A9B2A9E65D5D1F0BBC31707944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
Manifest number: 1714
Signing time: Sun 28 Jun 2026 16:01:38 +0000
Manifest this update: Sun 28 Jun 2026 16:01:38 +0000
Manifest next update: Mon 29 Jun 2026 16:01:38 +0000
Files and hashes: 1: KZNB7lWAg2ccw6OEH22PfuTr474.roa (hash: oNpR7vBBKKyNPGUa7GkD8mmfi4bNftZfBrk2/MA9hZw=)
2: P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl (hash: yq9JZvuRjsEZ5GQb51Bf80/BdDW5riOeDj2DvsXPsl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0e:f7:08:a9:b2:a9:e6:5d:5d:1f:0b:bc:31:70:79:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ff58dffba4df6ac34bd9f48119ae11cfef8a76c
Validity
Not Before: Jun 28 16:01:38 2026 GMT
Not After : Jun 29 16:01:38 2026 GMT
Subject: CN=946b291a4a436760f30446ca344a9d9c1f9bfcc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:00:8a:5e:95:31:70:1d:12:25:15:e7:30:58:
dc:dc:0d:12:a6:a1:eb:91:7b:58:9f:50:ad:db:a1:
38:d5:ab:99:e5:18:81:4c:ea:b5:40:2e:14:dd:0b:
60:87:2b:c5:7d:f1:c2:e8:05:83:3d:f3:30:2a:2d:
7f:d7:23:b0:1a:e8:20:92:30:85:e7:ab:93:fd:77:
77:f2:28:b9:cc:d7:a6:00:04:e1:b8:b6:9a:80:61:
c2:a3:3d:00:8e:9c:e9:bd:d7:93:7c:66:32:2f:58:
cb:40:96:b7:d0:bf:ab:67:9a:6b:2e:85:7f:63:f0:
43:b6:1a:88:e3:bc:ab:f3:bd:6e:af:35:ae:7d:2c:
da:ec:6c:ae:1c:b6:92:a1:f0:37:28:06:6c:a6:23:
57:06:b9:e3:ec:9c:db:ba:f1:b3:4d:05:c7:6e:b6:
56:0d:93:fc:3c:4a:c8:c2:c5:39:e6:37:08:8f:d8:
00:bc:ac:9e:a6:c0:83:d5:38:7c:79:55:c3:5a:c3:
22:ba:0d:ff:13:f5:5d:0b:ee:f3:16:41:c6:26:94:
0e:24:75:f9:23:e8:c3:cb:a7:61:a4:e6:54:5d:32:
9e:38:32:37:61:64:53:2a:c8:75:be:9a:9d:3b:ee:
b7:84:a4:3b:49:3b:61:ff:2d:2a:80:63:21:e1:7a:
ae:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6B:29:1A:4A:43:67:60:F3:04:46:CA:34:4A:9D:9C:1F:9B:FC:C5
X509v3 Authority Key Identifier:
keyid:3F:F5:8D:FF:BA:4D:F6:AC:34:BD:9F:48:11:9A:E1:1C:FE:F8:A7:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:dd:c4:a4:99:fe:9e:f4:e3:ed:79:5d:e5:34:53:c3:5e:6a:
fa:31:b7:d5:98:54:b2:7f:77:29:a9:fe:0d:8c:69:4b:5c:cb:
3e:69:e7:c8:40:38:66:e1:8b:b6:95:f5:49:c0:9a:78:13:73:
a7:29:ff:59:8f:d9:33:f0:c4:97:25:ce:23:e0:22:08:b7:22:
55:7d:86:6c:78:c5:72:ed:32:74:d8:0d:2e:af:ad:0f:2d:ba:
44:73:46:fa:a3:4e:aa:5f:dd:27:2c:d8:ca:e1:44:39:11:2b:
0a:c0:29:18:27:52:ff:a7:73:b1:84:3e:9c:fa:68:1a:67:bc:
d8:83:25:af:b7:22:19:53:45:3e:9f:d0:dc:92:6b:06:5c:1a:
b0:11:10:fc:e9:1f:56:8b:0e:be:10:c1:50:00:16:d1:28:ec:
86:ed:e0:f5:a6:af:e9:e4:c6:da:79:dc:73:f9:48:d3:34:75:
93:5a:cb:5f:16:bb:d9:f4:61:54:ba:2a:06:66:87:47:1b:7b:
c1:03:e3:23:ae:cd:3d:6e:bd:9c:57:de:eb:8a:a3:e2:ac:09:
8e:ba:4d:4d:b9:52:f0:96:3e:4b:c5:38:49:59:d7:95:a7:d9:
86:d3:dd:8b:75:49:e9:37:4b:6a:75:fd:e8:84:84:e8:ba:a0:
cf:55:ff:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 19:53:20 2026 by rpki-client