Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/P3XgDVc45b4rCWaNJ5EUDu8zIKU.mft
File: P3XgDVc45b4rCWaNJ5EUDu8zIKU.mft (raw, json)
Hash identifier: GULjVyXRm5QgKmKFrmtfrVg3joD90th7PXOimSIa+ns=
Subject key identifier: C0:81:8A:1F:FE:FE:75:A7:E3:F1:26:61:68:AB:5C:93:02:05:87:91
Authority key identifier: 3F:75:E0:0D:57:38:E5:BE:2B:09:66:8D:27:91:14:0E:EF:33:20:A5
Certificate issuer: /CN=3f75e00d5738e5be2b09668d2791140eef3320a5
Certificate serial: 019FA6AC08DF6732F13D7242324C0DAB602D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3XgDVc45b4rCWaNJ5EUDu8zIKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/P3XgDVc45b4rCWaNJ5EUDu8zIKU.mft
Manifest number: 4B
Signing time: Tue 28 Jul 2026 03:01:59 +0000
Manifest this update: Tue 28 Jul 2026 03:01:59 +0000
Manifest next update: Wed 29 Jul 2026 03:01:59 +0000
Files and hashes: 1: 9IDvg1m6FIQbcRd8cJ6Kz2ePInE.roa (hash: u6Pgg+TL8fBUrMeamu9qvumoJ5B+GURrCIvuw0aOKdI=)
2: Luquwxy5MmMCtghrD0bo5fP54_k.roa (hash: Bl2RpJjzTlgY54x2PqQ2Lom0vkyRv1xgE+degACJfHc=)
3: P3XgDVc45b4rCWaNJ5EUDu8zIKU.crl (hash: fn3TZaZ4d2YHVD1E9F6lFsOJ/Lc96hupH2v41baUdcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/P3XgDVc45b4rCWaNJ5EUDu8zIKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/P3XgDVc45b4rCWaNJ5EUDu8zIKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/P3XgDVc45b4rCWaNJ5EUDu8zIKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 03:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a6:ac:08:df:67:32:f1:3d:72:42:32:4c:0d:ab:60:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f75e00d5738e5be2b09668d2791140eef3320a5
Validity
Not Before: Jul 28 03:01:59 2026 GMT
Not After : Jul 29 03:01:59 2026 GMT
Subject: CN=c0818a1ffefe75a7e3f1266168ab5c9302058791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:14:b6:72:e7:af:a3:5c:25:f6:b9:be:89:69:
a2:5c:4a:a4:25:f2:15:ea:f4:65:8c:57:77:de:a3:
85:98:22:09:27:43:92:a7:8a:7d:0f:a5:bf:e9:2c:
1d:de:a4:88:4a:a8:06:bb:10:a4:c1:50:c5:b9:bd:
d7:0d:eb:4c:30:48:a1:d4:60:eb:dd:ec:e7:e3:c3:
ae:6b:1c:a4:00:98:92:a1:0a:ee:c8:e7:ee:b8:0b:
28:12:1c:d4:12:44:09:27:49:89:d6:77:af:90:10:
2b:da:33:01:f9:8f:fc:29:0f:cb:5e:c9:c0:56:da:
4d:e9:6a:f1:1a:78:60:f7:a6:93:d6:fd:f7:93:36:
56:e5:7c:f1:cc:7f:78:c2:15:c8:d9:b5:13:03:d1:
53:4b:17:6b:fa:99:e6:11:7b:b2:8d:1b:4a:9f:2a:
3a:e5:93:08:2d:8f:33:68:aa:ee:5b:7f:5a:31:2e:
d1:89:3c:2a:54:93:bc:5d:6a:d4:83:87:11:dd:9c:
1a:fa:c4:e2:ec:9b:4f:48:0d:20:83:75:5f:77:1d:
02:3a:80:18:af:c9:46:66:e5:60:38:60:92:63:a7:
23:c8:75:72:cf:c0:c0:8c:5e:45:34:3c:e4:3c:98:
9b:c3:eb:18:8a:10:dd:d2:18:5d:70:2d:86:d6:43:
de:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:81:8A:1F:FE:FE:75:A7:E3:F1:26:61:68:AB:5C:93:02:05:87:91
X509v3 Authority Key Identifier:
keyid:3F:75:E0:0D:57:38:E5:BE:2B:09:66:8D:27:91:14:0E:EF:33:20:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3XgDVc45b4rCWaNJ5EUDu8zIKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/P3XgDVc45b4rCWaNJ5EUDu8zIKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/P3XgDVc45b4rCWaNJ5EUDu8zIKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:5d:ca:84:eb:6d:74:5f:99:8e:57:63:bd:ef:79:c9:33:07:
33:ae:18:cf:66:54:b0:84:22:69:a3:17:06:8a:7d:0b:01:04:
c4:6a:7b:6c:76:9c:02:f7:77:73:a3:66:91:51:88:b1:9a:ca:
f8:fd:0e:e1:9e:dc:14:b2:32:b4:24:54:8a:05:5f:74:43:eb:
1b:c2:f3:f3:0b:22:84:c2:27:4b:45:38:67:9f:0d:2c:53:7c:
9d:1f:40:ab:50:7d:51:7c:8e:27:9d:a1:09:76:85:95:36:ea:
86:ee:c4:ef:48:5d:0f:e5:c0:c8:7d:cc:12:b0:d9:3b:31:04:
ea:d7:29:2e:25:4a:9e:08:fe:7e:41:92:d3:70:8a:e6:63:ca:
6c:51:36:1d:a8:13:73:8a:d3:63:2f:7c:15:9d:db:6e:1b:04:
6c:eb:0a:3d:dc:24:6a:bc:f6:ed:1d:db:9d:ce:e2:0d:cc:16:
ce:6c:6d:e0:b4:5d:01:bc:96:36:02:4b:eb:40:51:cd:0e:23:
f9:a3:60:04:cd:a0:f1:e8:ce:b2:95:db:37:8e:13:7a:47:bd:
ef:3c:41:6e:e9:8f:f8:dc:45:14:cc:e1:7b:63:a2:79:33:87:
d3:c8:67:17:74:c2:d2:11:17:29:dc:a7:ea:7b:1a:d0:a3:7d:
ff:6e:93:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 10:29:28 2026 by rpki-client