Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
File: P1jM0LF5IrWNXoss8uV5zmmrOGM.mft (raw, json)
Hash identifier: 6fgjI8SYz3me8e+pwxbN8iRVus104eXqGjv1ty9nqdg=
Subject key identifier: 01:DB:6A:A9:A2:CB:6C:B2:5D:E9:2B:62:6D:AD:87:26:7E:DA:22:73
Authority key identifier: 3F:58:CC:D0:B1:79:22:B5:8D:5E:8B:2C:F2:E5:79:CE:69:AB:38:63
Certificate issuer: /CN=3f58ccd0b17922b58d5e8b2cf2e579ce69ab3863
Certificate serial: 019D371B217A1AA819883888B8116E6DCBC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
Manifest number: 02CD
Signing time: Sun 29 Mar 2026 01:00:18 +0000
Manifest this update: Sun 29 Mar 2026 01:00:18 +0000
Manifest next update: Mon 30 Mar 2026 01:00:18 +0000
Files and hashes: 1: P1jM0LF5IrWNXoss8uV5zmmrOGM.crl (hash: r/mZ0thDjW3htTv5IjTr1RZk4tYXSrfeFvlPQy8X+6o=)
2: pwkOfI0N-Tqs6EWE-ZLxQ2pD3ZM.asa (hash: 76UHeLcM+om1iT2qZCwO5q94A8qOQbIQ5FrClESA93w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:21:7a:1a:a8:19:88:38:88:b8:11:6e:6d:cb:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f58ccd0b17922b58d5e8b2cf2e579ce69ab3863
Validity
Not Before: Mar 29 01:00:18 2026 GMT
Not After : Mar 30 01:00:18 2026 GMT
Subject: CN=01db6aa9a2cb6cb25de92b626dad87267eda2273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5e:90:ae:24:2d:30:dc:f5:68:a6:48:89:1c:
e6:24:8f:83:bd:22:10:fd:b5:c0:d6:b7:e0:46:b7:
f5:39:2b:5c:a5:66:28:0c:67:e8:c5:2d:91:a6:4a:
84:3c:64:b3:63:cd:22:b9:13:82:6c:40:13:e2:04:
09:e1:16:21:06:da:bc:9d:0e:a8:46:2f:93:cb:c8:
ca:9d:a2:cf:bb:95:e0:61:b6:8d:bf:f9:09:bc:24:
b3:e2:52:b8:ef:b3:ad:94:2e:2c:9b:c0:d4:0c:42:
fa:97:e2:a6:2a:f6:29:d5:46:87:2b:c3:bb:f9:5a:
70:1b:df:62:c4:c9:85:b4:5f:1f:7f:46:88:66:c2:
b0:a3:24:0f:0a:5a:53:df:e4:2a:04:4a:0a:58:f0:
3d:61:eb:80:ce:b6:7b:1a:c6:b1:18:8e:b1:a7:fe:
37:71:02:8a:1b:9b:95:1a:4d:39:27:f4:97:23:63:
e6:1d:e6:ad:13:ad:89:71:a9:12:2d:64:68:bf:2e:
41:6a:9d:28:f8:71:bb:8e:e1:2c:4d:a9:78:67:13:
d3:04:6f:4b:c2:6f:5a:76:a8:a4:5a:ea:b6:ac:59:
94:f9:85:07:94:75:d0:ee:9a:25:54:ba:53:b0:f5:
98:14:f1:f4:d7:fa:77:dd:94:a1:39:d2:39:62:64:
87:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DB:6A:A9:A2:CB:6C:B2:5D:E9:2B:62:6D:AD:87:26:7E:DA:22:73
X509v3 Authority Key Identifier:
keyid:3F:58:CC:D0:B1:79:22:B5:8D:5E:8B:2C:F2:E5:79:CE:69:AB:38:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:fa:59:13:cf:19:bd:b4:3a:22:8d:60:6e:6a:6d:ba:ad:48:
4f:18:fe:88:8f:bc:f3:29:35:b8:d8:cb:08:e4:15:1c:36:89:
29:c1:21:cb:5a:af:46:59:38:69:83:e1:d2:9c:0b:ee:0f:78:
41:d2:2c:46:38:ad:0d:39:cc:a1:ca:cb:99:dd:6b:83:88:0e:
5d:22:2c:f1:32:4a:40:fe:3b:24:1c:9c:28:28:f9:d5:13:c3:
59:21:df:b8:18:50:64:b3:4c:1a:80:86:9a:10:b1:2c:fa:b4:
79:21:6e:69:89:f9:f8:c2:75:c1:e3:3c:27:a9:53:b9:1e:e0:
ca:cf:72:28:dd:1c:06:13:1c:68:f3:e7:f8:34:5d:d2:b7:5a:
61:a0:0c:bd:82:0e:b2:a5:59:3a:fd:f2:16:de:13:7b:4a:4a:
02:ab:a5:d9:a3:dd:8e:81:34:20:5a:53:ea:18:33:4b:3a:ea:
7c:37:d3:aa:a8:b1:55:de:e6:90:1c:6b:6b:14:6f:2f:02:e9:
43:f9:d2:54:d9:12:e1:77:4c:7b:37:65:80:50:4b:ee:47:88:
56:d5:c9:3e:96:8c:b2:ec:c6:be:2d:b3:a1:7b:ef:5f:a5:95:
68:ef:b5:e1:22:07:d4:6c:7f:4a:65:9e:37:10:dc:a1:64:1f:
35:94:2b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:32 2026 by rpki-client