Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.mft
File: PE71UtfFcTYTTntE1pfLAs3n2H0.mft (raw, json)
Hash identifier: AOPlp4ArmkTAKj3kduKvvRqpVal1dgBVAdBjx6KBUDM=
Subject key identifier: CB:2F:08:6A:AF:37:FC:AA:FF:0D:C8:26:94:9C:B0:6A:72:D5:D2:B2
Authority key identifier: 3C:4E:F5:52:D7:C5:71:36:13:4E:7B:44:D6:97:CB:02:CD:E7:D8:7D
Certificate issuer: /CN=3c4ef552d7c57136134e7b44d697cb02cde7d87d
Certificate serial: 019D3977E3AB4E7B71C57F71F8EDC8C9D1C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE71UtfFcTYTTntE1pfLAs3n2H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.mft
Manifest number: 0CF5
Signing time: Sun 29 Mar 2026 12:00:51 +0000
Manifest this update: Sun 29 Mar 2026 12:00:51 +0000
Manifest next update: Mon 30 Mar 2026 12:00:51 +0000
Files and hashes: 1: M2fsMNeCLbSytrRdZXN8GNnfsT4.roa (hash: ZZlxpGml6cr7CGJbkVDdK84PY4ZB8pkla7yZE+pnKvI=)
2: PE71UtfFcTYTTntE1pfLAs3n2H0.crl (hash: Na/DLD9jdiVcsy/lquoKFZWtmDfPHMaPYA2JhongIS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PE71UtfFcTYTTntE1pfLAs3n2H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:e3:ab:4e:7b:71:c5:7f:71:f8:ed:c8:c9:d1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ef552d7c57136134e7b44d697cb02cde7d87d
Validity
Not Before: Mar 29 12:00:51 2026 GMT
Not After : Mar 30 12:00:51 2026 GMT
Subject: CN=cb2f086aaf37fcaaff0dc826949cb06a72d5d2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7a:60:e3:89:85:9c:62:e5:cf:20:a7:56:c7:
2a:cc:dd:09:ff:61:62:dc:2b:4a:d2:39:af:6b:87:
ec:7a:4f:c3:b2:01:41:bb:9e:19:fd:95:8e:c8:eb:
57:5c:6d:0e:5b:a2:95:3e:e5:c5:c6:0b:f2:13:5d:
cc:ca:ed:be:1a:97:b7:b2:ff:0a:a2:18:2f:12:9b:
d3:b1:9b:7c:ee:63:7b:c2:7e:4b:0f:0c:09:92:69:
a7:69:9b:b2:8c:50:d5:33:52:bb:84:64:1f:af:81:
f4:e8:0d:4f:da:fb:9f:93:e2:26:3e:96:76:96:c5:
30:34:96:78:ce:fc:93:2e:99:37:fd:2e:71:a2:b8:
29:5c:df:79:74:e2:43:86:02:e4:6e:f5:7f:03:11:
80:02:36:4c:c5:03:bf:0b:87:1f:cf:51:9c:d5:87:
19:24:3f:24:b7:11:32:13:0e:90:34:c5:14:08:01:
0d:e3:55:b0:56:9c:61:a1:75:c9:fd:f9:61:6c:c4:
fc:6e:8e:2c:64:0c:6a:76:db:ef:d3:4e:63:29:da:
5d:e6:8e:98:de:99:d4:76:f4:8a:b3:de:1b:89:b6:
51:4c:56:56:0f:4e:56:0f:f8:e0:67:fc:0e:46:cc:
2b:2a:6a:d3:22:ff:2e:c4:dd:67:08:31:c8:c6:db:
20:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2F:08:6A:AF:37:FC:AA:FF:0D:C8:26:94:9C:B0:6A:72:D5:D2:B2
X509v3 Authority Key Identifier:
keyid:3C:4E:F5:52:D7:C5:71:36:13:4E:7B:44:D6:97:CB:02:CD:E7:D8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE71UtfFcTYTTntE1pfLAs3n2H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:4c:f5:55:15:62:40:67:f5:2f:a2:eb:e8:1b:dc:cd:9c:6b:
81:7b:93:0b:ae:d8:71:40:a0:bd:b0:3a:35:e2:ab:63:71:7f:
9e:9c:35:f5:0b:83:25:d2:7f:bc:f7:27:35:9d:bc:d4:fd:2b:
ef:95:00:7d:09:fe:63:12:e6:5f:03:5a:2b:da:77:bb:ff:14:
8a:b4:ea:f7:93:8a:7a:be:d3:6a:ac:56:59:68:bb:72:b4:b2:
02:58:86:1d:97:2d:97:c0:4c:8d:08:1f:b9:cd:1b:11:48:84:
9a:8b:46:10:de:e8:8a:ca:c9:f9:a3:71:0a:af:a4:1a:a2:6a:
b4:4d:65:c3:c9:84:46:da:3f:2b:4b:50:5f:e1:57:d2:9c:cb:
8b:1d:1c:9c:27:4d:06:d0:48:2d:a2:1c:3a:7c:de:17:eb:af:
5a:45:da:98:22:24:bf:ee:e5:bc:72:ca:ac:3b:36:8f:bb:bc:
07:4b:df:a0:17:66:83:f1:ce:77:21:a0:81:1b:20:38:b2:35:
ac:0d:2e:8d:8f:75:d3:e3:3d:4e:c5:01:8d:ca:28:38:cc:e9:
77:57:d7:16:de:f7:c8:64:3c:ea:a4:8e:07:14:3f:00:ef:fd:
ea:76:89:ba:3d:c1:04:88:51:75:1c:dd:a8:79:a8:47:5d:5e:
51:77:4e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:02 2026 by rpki-client