Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.mft
File: P2TX2Py26n88U-wAJA2Owcl3Zqc.mft (raw, json)
Hash identifier: nMImDULBFwmDotILS+oF5qoRZDnpwpW0dVBKugjLW6c=
Subject key identifier: 0B:B9:9F:B4:24:B7:BC:FC:C0:B7:53:1C:2C:77:7A:89:D5:C8:4B:A7
Authority key identifier: 3F:64:D7:D8:FC:B6:EA:7F:3C:53:EC:00:24:0D:8E:C1:C9:77:66:A7
Certificate issuer: /CN=3f64d7d8fcb6ea7f3c53ec00240d8ec1c97766a7
Certificate serial: 019CF5048FB1235E794B6F76C47B38173654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P2TX2Py26n88U-wAJA2Owcl3Zqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.mft
Manifest number: 34
Signing time: Mon 16 Mar 2026 05:00:42 +0000
Manifest this update: Mon 16 Mar 2026 05:00:42 +0000
Manifest next update: Tue 17 Mar 2026 05:00:42 +0000
Files and hashes: 1: P2TX2Py26n88U-wAJA2Owcl3Zqc.crl (hash: dL7GuYaRMgwoCsX9+PCxAxIUGwSc9sU2n2LemHHroSo=)
2: sSJSF0Ef5iNGBXgop50-6zZdD2k.asa (hash: 2H0jdgMOud4+cQqq8gHUDsGfxxUMnvX/NXbs1EyPhbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/P2TX2Py26n88U-wAJA2Owcl3Zqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f5:04:8f:b1:23:5e:79:4b:6f:76:c4:7b:38:17:36:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f64d7d8fcb6ea7f3c53ec00240d8ec1c97766a7
Validity
Not Before: Mar 16 05:00:42 2026 GMT
Not After : Mar 17 05:00:42 2026 GMT
Subject: CN=0bb99fb424b7bcfcc0b7531c2c777a89d5c84ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9c:21:3c:99:49:47:ac:47:98:33:4b:57:95:
48:72:f7:01:ce:de:62:ab:56:52:05:0a:fe:06:d1:
19:08:2a:db:2e:07:4a:07:cb:31:86:e0:a9:b5:84:
7a:61:b2:d4:c1:e2:cb:1e:a3:0d:24:f1:d7:a8:15:
ba:41:b6:fd:03:30:40:cb:32:ef:e2:e0:ec:96:c3:
cf:67:f9:eb:4f:2f:b6:84:52:e4:3c:01:76:4e:fd:
cb:eb:33:35:46:a3:51:14:f7:60:f4:22:da:51:25:
37:a9:d2:3f:7f:4f:0e:9d:7a:3c:57:b5:26:ce:93:
a0:27:4d:af:74:80:5a:ad:f1:db:29:e7:6f:48:24:
42:da:3a:2b:9e:23:9c:71:07:74:0e:13:9b:89:de:
7f:65:3e:c1:c1:ff:1b:29:52:62:6b:04:db:94:fc:
33:30:76:aa:01:d1:b0:38:42:ed:50:93:83:f1:5f:
90:e1:1a:4c:b9:c1:c4:9d:ca:87:d9:bf:6f:66:45:
14:1d:83:34:5c:a7:5c:f4:dd:11:f3:64:a7:6a:6b:
04:a8:18:6d:0f:00:2e:8c:d7:eb:f8:9e:4c:fd:5c:
f1:90:e3:11:18:93:40:05:b2:6b:75:a6:a3:ce:2d:
97:4f:5e:a5:c1:44:5c:20:3e:67:d7:02:20:86:11:
62:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B9:9F:B4:24:B7:BC:FC:C0:B7:53:1C:2C:77:7A:89:D5:C8:4B:A7
X509v3 Authority Key Identifier:
keyid:3F:64:D7:D8:FC:B6:EA:7F:3C:53:EC:00:24:0D:8E:C1:C9:77:66:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2TX2Py26n88U-wAJA2Owcl3Zqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/358104-0ee2-44e9-99c1-9414ea33bea6/1/P2TX2Py26n88U-wAJA2Owcl3Zqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ed:fc:10:cd:9d:bc:57:80:12:8c:94:01:1f:82:6e:3b:d6:
2e:9d:64:6c:be:f7:11:93:da:b9:be:a4:15:11:9c:69:81:aa:
b3:a2:d3:7b:8e:a7:78:62:2b:8e:95:02:07:0b:51:fd:d0:97:
c3:be:2c:d4:70:59:02:2a:15:4e:74:c1:08:d4:24:8b:5b:25:
b3:1c:0b:04:f3:da:65:fb:3b:c2:7a:60:c9:c3:55:49:d8:26:
d4:51:22:ef:c5:63:af:d9:cc:29:3e:a7:28:f7:e0:66:7f:2e:
1f:b1:23:58:66:1f:73:72:db:a8:f4:8e:5e:1a:ad:d7:b6:9f:
b0:94:47:c5:f9:fb:49:49:32:e5:f6:e2:9d:68:27:4a:6a:f3:
30:7a:68:c3:14:53:34:0b:cb:c4:8f:dc:e3:e0:87:08:15:9e:
71:d8:b6:ce:b1:98:bc:12:4e:97:6e:8b:2f:fa:9c:7c:64:d8:
da:ad:4d:56:cf:91:a5:18:e6:b5:67:2b:aa:cb:08:9b:2a:d1:
9b:15:01:bc:23:35:06:ae:25:12:8a:a8:72:3e:d0:2b:c9:7c:
71:0a:dc:a3:c1:b2:3f:d0:39:db:b6:bc:75:30:c3:b5:89:6f:
41:50:5a:71:5d:9e:d5:a2:95:ae:5b:42:73:47:f4:c3:e7:c1:
fa:b8:c0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 07:59:10 2026 by rpki-client