Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
File: PetYF7vn5aHF-xMFUbhKtIgBb5I.mft (raw, json)
Hash identifier: QseudDeX0plEjtNLOOonYPvCaMJSRTWKM6x4ZY79S74=
Subject key identifier: 33:26:38:8A:D5:DB:0E:C1:9F:B7:4E:6B:43:01:2C:4B:F8:6C:58:46
Authority key identifier: 3D:EB:58:17:BB:E7:E5:A1:C5:FB:13:05:51:B8:4A:B4:88:01:6F:92
Certificate issuer: /CN=3deb5817bbe7e5a1c5fb130551b84ab488016f92
Certificate serial: 019D375301A0837FA4DD050B80C080B0301B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
Manifest number: 04F0
Signing time: Sun 29 Mar 2026 02:01:19 +0000
Manifest this update: Sun 29 Mar 2026 02:01:19 +0000
Manifest next update: Mon 30 Mar 2026 02:01:19 +0000
Files and hashes: 1: 09Idh6750rzqiPUR4c726kV5rOk.roa (hash: mc1V6hIQgSw8lLoVocREyrEscnS5kZmkg0rvjeUzfkM=)
2: PetYF7vn5aHF-xMFUbhKtIgBb5I.crl (hash: dqZ4u+5w2I9cE9xInNRit+7flZmQleOKrc++R+Ht8Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:01:a0:83:7f:a4:dd:05:0b:80:c0:80:b0:30:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3deb5817bbe7e5a1c5fb130551b84ab488016f92
Validity
Not Before: Mar 29 02:01:19 2026 GMT
Not After : Mar 30 02:01:19 2026 GMT
Subject: CN=3326388ad5db0ec19fb74e6b43012c4bf86c5846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:10:bc:f7:03:62:f3:bf:88:3d:94:ed:2e:42:
e9:ff:83:3d:07:6e:23:f4:1c:a0:dc:db:6f:fd:1b:
49:22:61:ef:a4:76:97:95:38:7f:ea:09:7d:5b:e5:
8f:91:bb:ff:10:6e:7c:c1:8a:26:b4:9f:70:fc:d6:
8e:aa:38:f9:8d:d3:80:05:84:b9:76:28:3b:6b:65:
2b:0d:58:ee:39:9d:be:ec:2d:ce:ee:2c:64:10:27:
a3:8b:cf:ae:f1:22:56:d0:af:71:f0:03:a1:3b:45:
c8:ce:7a:cb:75:a7:99:19:8f:32:dd:85:f1:b8:c3:
1a:80:6a:8b:ae:fb:0c:e5:dc:c3:53:dc:94:b0:20:
17:23:f6:07:a2:f8:e9:c7:14:67:9a:ef:47:90:b8:
c3:5e:47:4b:1f:c1:80:6c:cb:e6:f0:c1:1d:6f:90:
61:0b:1a:13:6c:12:d8:e9:c2:57:e1:10:b5:5e:48:
ec:13:be:e1:32:f1:6e:88:b1:ec:b2:51:e8:87:20:
bf:c6:61:c4:ad:e2:dd:5c:35:69:44:38:45:3e:aa:
a8:0c:a4:b4:80:2b:6b:1e:1f:96:3a:ca:da:66:73:
d9:4c:ba:f2:a6:0b:2b:64:ba:48:b8:11:10:3b:22:
59:d4:61:ed:42:27:c7:6a:5c:aa:8a:95:91:1d:c0:
64:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:26:38:8A:D5:DB:0E:C1:9F:B7:4E:6B:43:01:2C:4B:F8:6C:58:46
X509v3 Authority Key Identifier:
keyid:3D:EB:58:17:BB:E7:E5:A1:C5:FB:13:05:51:B8:4A:B4:88:01:6F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:2a:5e:25:f1:57:7c:f8:d1:4c:4f:16:80:ea:0c:91:b3:07:
0a:05:5e:ed:a9:1a:ef:85:f1:14:d1:1b:32:5e:84:57:d1:d1:
bc:78:7f:9d:21:c7:da:e2:ab:0d:76:df:61:6d:f6:f9:8e:c5:
b9:aa:7a:60:25:1f:5a:17:37:17:aa:33:9b:49:c8:47:02:14:
f1:42:b9:6e:5a:b4:f1:77:47:20:dd:13:66:70:67:78:3a:9f:
60:f6:b8:78:43:a2:d3:58:7f:28:45:a2:97:ef:37:11:25:b2:
2b:aa:d1:16:89:09:c6:4d:d9:54:91:2f:46:11:05:f4:c8:33:
31:ec:c9:7a:8c:31:f3:71:6f:9f:eb:f9:71:1e:1b:cc:00:a1:
74:c5:a7:a2:5a:46:03:52:7a:4b:12:f1:e5:4b:7b:da:eb:90:
d3:d7:39:2c:fd:54:fe:9c:48:b2:7c:d0:11:1e:98:b6:a7:34:
24:c8:b8:1f:ed:31:af:42:4a:59:be:35:22:31:43:cb:37:0b:
b2:4b:2b:f6:29:03:04:03:a2:85:8a:c4:38:27:b2:dc:10:c9:
ce:d6:f7:bb:97:69:9a:57:03:f3:2b:cd:62:a9:10:c0:7f:78:
77:87:c8:46:4c:80:52:af:fc:2f:20:b8:02:ed:14:23:4d:09:
63:5b:09:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:59:17 2026 by rpki-client