Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft
File: Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft (raw, json)
Hash identifier: FO1I2F4nR2pZzOu7uE/AiAy0ZPMiijPPdKNnLGT29H0=
Subject key identifier: 25:EC:F7:54:F9:A2:63:91:35:E5:F7:6B:CB:AC:41:77:05:9C:93:3C
Authority key identifier: 3F:29:6F:E9:45:A2:31:80:75:3F:67:F7:74:8E:6F:29:9D:2E:67:2A
Certificate issuer: /CN=3f296fe945a23180753f67f7748e6f299d2e672a
Certificate serial: 019D3940D242C72A0D41F610A85ED2CB9BF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft
Manifest number: 0F75
Signing time: Sun 29 Mar 2026 11:00:42 +0000
Manifest this update: Sun 29 Mar 2026 11:00:42 +0000
Manifest next update: Mon 30 Mar 2026 11:00:42 +0000
Files and hashes: 1: NgG8sLNb-W8-OHBCGxZ73IB5nDI.roa (hash: lrLVn7ENnn4C2ElW6lbxmaOhdEvNhEpkcSeT7X4B1AQ=)
2: Pylv6UWiMYB1P2f3dI5vKZ0uZyo.crl (hash: mFF2UUnsqvs0kI/61RrLAOqtZPW46C/TYbELuq66wJ4=)
3: ogybvPCYv0zaHbI7IAnfqKXESCM.roa (hash: LonaEgi/rXosvauw091QvQs3rhGZRi+ZXg091i9IY6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:d2:42:c7:2a:0d:41:f6:10:a8:5e:d2:cb:9b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f296fe945a23180753f67f7748e6f299d2e672a
Validity
Not Before: Mar 29 11:00:42 2026 GMT
Not After : Mar 30 11:00:42 2026 GMT
Subject: CN=25ecf754f9a2639135e5f76bcbac4177059c933c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:18:e5:ef:c7:dd:92:6f:f5:de:6b:da:28:63:
00:92:bf:63:f3:6c:72:30:1a:97:80:1d:74:a9:c4:
7e:2d:4d:76:03:27:de:20:9e:a9:3f:ef:4b:21:d0:
a6:a8:6b:99:17:68:40:be:a7:df:35:e9:99:96:bc:
22:f1:58:6a:61:23:55:97:a2:45:b9:c2:0b:af:86:
2c:fe:99:1c:b7:c8:52:7b:47:cb:3e:b0:94:e8:a2:
3f:2f:c8:58:d9:80:a0:10:ef:15:15:3a:69:7d:05:
ab:f9:a3:c3:e3:1f:1b:dc:ae:fc:cd:11:c8:66:98:
7d:e4:a4:84:69:92:34:ec:81:cf:12:fe:f3:ae:eb:
dd:7f:cb:21:4d:9b:9c:8c:cc:84:8d:92:12:bc:d1:
03:21:fb:ba:46:2e:d7:72:2a:ac:44:9e:ac:9e:b9:
45:22:73:bc:e3:61:f5:ab:1b:46:c3:b9:e9:53:74:
18:87:ea:81:3e:95:af:c8:15:10:1e:51:fd:2a:65:
0a:c4:80:36:e6:1b:ac:8f:11:1b:ca:8b:17:c8:3d:
3e:c5:ca:b6:46:9c:98:4b:84:c9:57:f1:ca:66:d6:
ab:63:58:1e:64:c2:13:83:e3:c1:d3:f5:c0:c8:a4:
7a:3c:10:ac:f8:da:f1:0c:ae:94:0b:e7:60:c2:b9:
90:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:EC:F7:54:F9:A2:63:91:35:E5:F7:6B:CB:AC:41:77:05:9C:93:3C
X509v3 Authority Key Identifier:
keyid:3F:29:6F:E9:45:A2:31:80:75:3F:67:F7:74:8E:6F:29:9D:2E:67:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:3e:1d:b4:5d:a5:33:c0:02:20:b2:b0:46:71:74:f0:c5:c7:
d6:d9:09:ee:7f:ad:75:22:cc:2b:5c:da:06:d8:92:89:81:88:
f9:8a:41:8e:21:4e:dd:b9:67:9c:7b:78:3b:25:ed:37:ab:00:
2f:8d:8b:82:e7:e6:97:73:2c:6d:32:c2:24:0c:fa:1a:d8:f8:
39:ec:f5:16:9b:bc:0c:d1:2a:a5:33:35:ce:5e:be:28:f5:ed:
e5:a1:54:cc:04:5c:15:fb:ef:4c:f4:e8:10:0a:ff:c0:3a:76:
5c:e2:87:15:50:3f:9c:de:79:16:3c:04:6e:34:22:2f:da:f2:
4e:f2:32:de:5e:cd:7c:99:50:4e:59:36:73:e4:f1:95:8e:f6:
32:a9:08:aa:f7:db:70:7f:73:7b:e8:a7:40:bb:1b:99:c5:24:
fd:05:43:c6:80:d5:7e:5b:43:36:c0:fc:60:8b:f4:72:17:29:
b6:b4:c8:77:d3:b6:29:79:e7:bf:3c:dd:2f:98:5c:f5:f4:a9:
d3:29:78:c6:f9:91:2d:2f:6e:eb:9f:18:0c:4b:e0:77:2a:05:
ca:bf:1c:6b:94:08:cd:03:bb:6b:7b:9c:61:0c:4e:ac:46:56:
72:cb:3c:8a:bc:d9:e4:b9:fa:b1:a5:3a:de:17:a5:68:d3:8a:
9f:be:3b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:46:21 2026 by rpki-client