Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
File: P98IRZEZlp1LnBf1qF6ScyxVF9E.mft (raw, json)
Hash identifier: tXjwq0yKNRV8njRyCvalzflqa5RJAdozo3PBEYpoawY=
Subject key identifier: 8C:EA:CA:FA:B4:5F:2B:9D:FA:F0:4B:96:F7:E2:A3:03:7F:C9:C3:B8
Authority key identifier: 3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1
Certificate issuer: /CN=3fdf08459119969d4b9c17f5a85e92732c5517d1
Certificate serial: 019D3752B2A7EB4AFE07C7C8D54D672AEC2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
Manifest number: 1876
Signing time: Sun 29 Mar 2026 02:00:59 +0000
Manifest this update: Sun 29 Mar 2026 02:00:59 +0000
Manifest next update: Mon 30 Mar 2026 02:00:59 +0000
Files and hashes: 1: P98IRZEZlp1LnBf1qF6ScyxVF9E.crl (hash: 5slF91d/K4lq3Ohm1K4mBM9enjGwezUreDg+TwH7aI4=)
2: fH_gcKdAIP3uBlIddsjG_0qsj3E.roa (hash: L4lQAURP1ERgbM6Iiwl8JhlSrJdP31F20qdbJNDofes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:b2:a7:eb:4a:fe:07:c7:c8:d5:4d:67:2a:ec:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fdf08459119969d4b9c17f5a85e92732c5517d1
Validity
Not Before: Mar 29 02:00:59 2026 GMT
Not After : Mar 30 02:00:59 2026 GMT
Subject: CN=8ceacafab45f2b9dfaf04b96f7e2a3037fc9c3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d8:86:7b:8a:ca:4f:cf:cb:8b:8d:d0:27:d9:
d8:8a:4e:2c:f4:05:33:d7:fa:91:0e:b4:a2:8b:12:
58:d1:ed:3c:e8:82:b9:93:7c:82:16:33:d3:67:79:
b1:96:a1:8a:28:0a:8c:88:34:65:36:d3:ea:19:2f:
cd:d1:a4:01:0a:69:0f:cd:92:3b:a6:22:a2:ea:b7:
b3:85:71:eb:d4:be:39:0b:97:ea:4b:76:86:9e:fc:
52:66:11:92:72:c9:70:1c:ca:b7:7b:b6:c1:e5:4e:
00:8e:81:a8:81:b2:4b:7e:f1:23:56:89:8a:cd:09:
31:19:07:1c:26:ec:9f:9d:0e:d4:ca:08:a4:c1:6a:
65:51:44:cb:ea:ed:d0:10:ca:9a:09:d4:4d:13:50:
5a:4c:55:0f:6b:79:25:ab:9b:fb:ea:22:67:86:24:
47:5f:d9:cd:fa:1f:b1:cb:8d:2e:95:75:8b:79:3d:
ea:b1:7d:99:3d:21:d6:36:41:cc:45:b5:9e:85:fb:
d4:01:1f:00:1a:0d:2f:89:73:32:30:11:72:d9:c8:
52:51:d9:21:5f:94:51:1d:18:a4:19:88:b6:05:7c:
07:e3:17:56:0e:d2:54:83:5d:c1:39:86:80:f5:1b:
c1:d8:20:ba:02:34:87:7c:6c:f5:63:e5:51:a4:f8:
c3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EA:CA:FA:B4:5F:2B:9D:FA:F0:4B:96:F7:E2:A3:03:7F:C9:C3:B8
X509v3 Authority Key Identifier:
keyid:3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ed:18:57:f8:b3:5e:ed:ff:c4:a7:ba:01:31:62:65:d8:39:
22:a6:69:02:e1:4d:92:1c:9f:ff:b9:b9:e4:51:40:58:e8:04:
57:3f:4e:c2:0b:08:a7:e3:38:2d:73:6f:a0:12:8a:b3:a7:b4:
0c:65:cd:c8:3d:bf:a5:61:e1:36:e3:77:23:04:94:d8:08:54:
e0:1a:1a:86:8a:1c:04:08:2a:f8:04:c7:82:04:73:ba:45:6c:
ab:84:6d:e1:c8:f9:8f:de:15:78:c6:fb:77:29:24:9e:1e:c9:
fa:0c:c4:3c:ef:ca:e6:e3:b0:88:4b:65:3d:dc:a2:e4:6b:c2:
c8:ab:a9:89:a6:5d:44:e7:86:a4:89:72:59:90:5f:fb:5b:76:
88:de:9c:6e:06:14:4f:1f:5f:7c:61:a2:95:26:c7:cd:c0:29:
42:86:12:43:e4:0e:39:c5:7c:c0:44:74:d5:e0:63:7c:27:65:
5c:ac:45:cb:89:36:c0:34:8c:41:6f:47:19:84:3e:15:b6:2f:
e5:29:26:a2:f3:ee:d2:33:18:ab:f9:93:0b:6d:db:3a:86:eb:
1e:ce:d3:c4:db:a0:f1:67:5f:ba:ed:97:ab:e9:d8:73:dc:8d:
c8:65:fa:a3:c4:92:c6:26:9e:a9:c5:fe:54:25:a7:c6:c8:33:
45:7e:16:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:53 2026 by rpki-client