Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft
File: P1amMzFVLvkdigAFozjsmC3zfIs.mft (raw, json)
Hash identifier: ArTyTilP4cIhga3l4Qf4aammFwGnktuwmyniPAb53F8=
Subject key identifier: 88:B1:A8:99:09:95:0D:04:F8:BB:38:92:FD:F0:B3:D8:4B:C3:E4:EF
Authority key identifier: 3F:56:A6:33:31:55:2E:F9:1D:8A:00:05:A3:38:EC:98:2D:F3:7C:8B
Certificate issuer: /CN=3f56a63331552ef91d8a0005a338ec982df37c8b
Certificate serial: 019D39AF6CEE39C70EAE368C93BEFFDB0234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft
Manifest number: 129A
Signing time: Sun 29 Mar 2026 13:01:31 +0000
Manifest this update: Sun 29 Mar 2026 13:01:31 +0000
Manifest next update: Mon 30 Mar 2026 13:01:31 +0000
Files and hashes: 1: P1amMzFVLvkdigAFozjsmC3zfIs.crl (hash: DV08XTslPoDdNjwdyxH0gVbg9WsFF1GhpOHylbt3/oM=)
2: hqL2_Cp_966-Nf1xdK0ELQH3lNQ.roa (hash: lMjEmScvr6aJ0unz4g+pWkszHQy3LFWSbgQbOr7UsIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:6c:ee:39:c7:0e:ae:36:8c:93:be:ff:db:02:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f56a63331552ef91d8a0005a338ec982df37c8b
Validity
Not Before: Mar 29 13:01:31 2026 GMT
Not After : Mar 30 13:01:31 2026 GMT
Subject: CN=88b1a89909950d04f8bb3892fdf0b3d84bc3e4ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9a:3a:da:6f:d8:70:52:72:b5:58:ba:06:a1:
fb:84:bf:cf:42:4b:7f:bb:57:b0:91:de:e6:71:a8:
3b:1e:0e:72:42:08:00:5a:f9:14:95:16:ca:43:d9:
66:95:f9:fc:1a:a2:27:fa:c9:7c:2f:b7:96:f2:56:
e7:d2:74:23:1e:35:a9:3c:80:88:b0:f1:ad:32:9e:
bd:55:de:de:c1:7f:59:72:b2:b4:5b:a2:6e:87:32:
3d:2c:84:3c:1a:d2:c9:4e:e2:3d:bd:b0:bc:f0:fc:
ea:3b:3c:89:16:c5:6b:8d:b5:f8:af:c4:55:d7:a2:
f7:07:8f:8a:71:52:33:a5:8d:c7:eb:8c:81:24:af:
a0:5f:0e:2e:a8:a5:db:58:e5:53:9f:2c:81:97:1a:
e8:b6:8c:ad:15:86:d7:b1:5e:33:34:9b:35:cb:a7:
02:43:48:59:ca:65:85:79:30:8b:8a:cf:55:d8:2f:
93:95:8e:3d:c3:ee:1a:85:d8:45:17:79:37:d9:70:
2c:e9:1c:03:c1:61:33:3b:90:bd:88:79:05:96:d3:
c2:73:cd:bf:69:f4:61:07:c0:0b:7f:4b:d9:a8:a4:
21:45:8a:49:f3:92:47:42:de:98:37:ab:44:73:2a:
44:33:34:09:98:be:a8:94:93:15:2b:74:ac:7b:97:
31:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B1:A8:99:09:95:0D:04:F8:BB:38:92:FD:F0:B3:D8:4B:C3:E4:EF
X509v3 Authority Key Identifier:
keyid:3F:56:A6:33:31:55:2E:F9:1D:8A:00:05:A3:38:EC:98:2D:F3:7C:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ea:9d:9c:54:a2:ee:89:e1:34:e3:d5:2f:ac:3f:52:28:cb:
12:1b:57:55:d3:7d:0c:79:2b:49:6b:96:87:3f:a5:71:2d:e7:
75:d7:dd:ac:86:24:82:b2:ff:f7:e6:74:e6:93:90:cf:05:a7:
51:f1:5f:76:bb:cb:49:2a:b4:2a:c5:0b:77:a8:e7:04:d7:2e:
7f:7a:0d:d9:f2:67:9c:10:40:b8:20:93:86:ea:99:f9:1c:e1:
02:b3:7d:e3:75:76:3a:f0:36:28:b9:6b:cb:48:a4:20:b2:ec:
5f:32:08:ad:69:f2:b9:7a:4a:cb:b2:55:6b:b2:ae:f0:2f:39:
27:49:7d:f3:92:77:d8:44:cd:5d:2e:ae:23:a8:14:57:d5:61:
b3:7e:dc:aa:bd:6e:48:4b:47:be:7b:32:10:8f:c7:9b:fc:d6:
13:28:15:36:96:20:fb:a2:82:df:e2:65:43:7b:7b:dc:51:d6:
77:90:df:3b:cb:43:78:b1:74:23:9e:f9:f0:fd:20:cc:1c:5a:
71:2d:f5:b1:39:3f:d4:38:2d:cd:d6:40:d4:8e:63:5e:76:4b:
56:a2:33:bf:19:dc:b0:ab:73:2c:94:ea:04:90:f8:b2:c0:81:
6c:4b:aa:9c:a9:5b:06:f6:76:f7:27:1e:c7:78:33:0d:2c:bb:
77:8c:aa:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:54 2026 by rpki-client