Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
File: P1jM0LF5IrWNXoss8uV5zmmrOGM.mft (raw, json)
Hash identifier: DVkalKA7yf2c7KV7pTX7BScitxRheRex8FjDGAo4AYI=
Subject key identifier: E3:B4:63:19:4B:4C:1B:14:B1:8D:A8:FF:BB:85:8D:37:7D:5A:4E:B2
Authority key identifier: 3F:58:CC:D0:B1:79:22:B5:8D:5E:8B:2C:F2:E5:79:CE:69:AB:38:63
Certificate issuer: /CN=3f58ccd0b17922b58d5e8b2cf2e579ce69ab3863
Certificate serial: 01A08D8D48F0FC06F316D101E735570FD573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
Manifest number: 0488
Signing time: Thu 10 Sep 2026 23:00:41 +0000
Manifest this update: Thu 10 Sep 2026 23:00:41 +0000
Manifest next update: Fri 11 Sep 2026 23:00:41 +0000
Files and hashes: 1: P1jM0LF5IrWNXoss8uV5zmmrOGM.crl (hash: a1rfCfUs7iVNC+/yRBS4PQw3WAJntDX4xn3i5EwC9Hw=)
2: jn6gJ9TowbVjY_54Vpm75wNDrsQ.asa (hash: ZmyieK/8MNfMxMHwBvTE99lNasjY/ja265//nNbVVVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:8d:48:f0:fc:06:f3:16:d1:01:e7:35:57:0f:d5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f58ccd0b17922b58d5e8b2cf2e579ce69ab3863
Validity
Not Before: Sep 10 23:00:41 2026 GMT
Not After : Sep 11 23:00:41 2026 GMT
Subject: CN=e3b463194b4c1b14b18da8ffbb858d377d5a4eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d5:79:aa:6e:4a:33:93:94:45:e5:fa:71:cb:
b4:c4:48:d3:d8:8f:9a:6a:dc:39:2b:94:49:1c:e7:
59:de:30:69:e2:14:d7:99:fd:2a:91:6c:71:cd:16:
79:a8:f6:fa:43:31:30:9f:df:a5:e0:3a:94:5b:2a:
4e:9b:8f:5b:03:4b:14:0b:d6:46:f9:8e:92:3c:92:
85:0d:d1:1d:d6:94:97:0f:58:29:a0:83:a8:03:77:
cd:dc:7d:52:18:44:60:22:f9:09:d4:1d:ae:76:11:
fc:99:7a:c2:eb:48:81:b8:7d:04:39:61:f3:e4:3d:
eb:f4:7f:8c:8e:ed:7a:e5:d4:e9:0f:d5:0b:d3:10:
2d:91:77:91:d5:41:da:87:ec:1f:94:18:cf:95:75:
9f:8c:39:4a:fe:83:77:32:42:7f:45:03:c7:56:6c:
7f:72:e8:41:17:cc:64:3f:ba:99:4f:84:e5:a9:ab:
61:db:b5:95:d8:73:8f:05:c5:0a:2c:00:7f:fc:13:
3f:26:52:d0:a4:d3:12:c1:a3:54:8a:d8:f4:0d:fb:
85:ee:f3:ca:f9:fe:1c:4d:f6:a4:3b:da:49:27:4b:
74:c0:2b:77:fd:60:68:88:b5:7d:82:ec:56:39:d5:
87:e7:a5:dc:aa:26:c1:b3:bc:8c:79:21:24:b4:d6:
51:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B4:63:19:4B:4C:1B:14:B1:8D:A8:FF:BB:85:8D:37:7D:5A:4E:B2
X509v3 Authority Key Identifier:
keyid:3F:58:CC:D0:B1:79:22:B5:8D:5E:8B:2C:F2:E5:79:CE:69:AB:38:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:fe:37:26:65:59:58:44:09:16:22:7e:19:5e:d7:04:96:3b:
db:86:b8:30:52:2f:95:dc:80:4b:ff:a6:2f:71:d1:49:87:39:
d7:92:21:87:f0:7a:b7:b2:30:e5:a1:df:34:b6:ca:31:f0:5a:
06:39:f1:ee:28:e9:ed:3d:67:6f:37:7d:92:a5:46:82:3a:fd:
84:2f:10:fd:08:04:04:a4:65:a3:b7:af:58:e6:cc:07:d8:88:
70:37:12:3b:d5:66:60:53:df:80:b1:34:db:42:29:85:75:4e:
f2:e7:01:20:a2:d5:dc:42:e0:68:5f:9c:bd:58:3b:79:8f:76:
0e:7c:b4:23:ec:18:73:04:e1:94:4f:3c:b0:02:a4:f9:be:e7:
92:8f:0a:4a:64:3f:7f:32:b5:20:6e:cc:5d:46:a2:d4:64:29:
e7:84:1d:c2:72:c7:71:11:ec:4a:61:9c:b9:6f:3e:c3:b6:3e:
65:72:b6:43:0d:b8:11:90:b7:14:37:ed:ac:08:c9:47:5b:73:
f8:e3:e2:1d:32:d1:59:87:db:45:5e:e5:d3:fc:0a:cd:54:37:
57:3f:1b:b7:b6:80:2e:f9:11:ec:ba:22:a1:a9:60:d2:1c:6b:
11:45:0b:08:d1:aa:af:f7:58:a5:36:8b:b4:72:51:0f:3b:22:
68:75:31:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 04:14:50 2026 by rpki-client