Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
File: Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft (raw, json)
Hash identifier: wy7aUUC4x0uQoluNOm6yUgzheZnaRftjNv2sghS8bBQ=
Subject key identifier: 23:50:67:AF:CE:85:D4:55:63:2D:53:5B:36:EC:12:FF:77:23:1A:EB
Authority key identifier: 3E:BD:5F:8B:B5:A5:94:D6:7B:5C:E8:07:A8:4C:59:DD:E5:69:A7:75
Certificate issuer: /CN=3ebd5f8bb5a594d67b5ce807a84c59dde569a775
Certificate serial: 019D389BC974B20DF39F2F596B99501C348E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
Manifest number: 0C3B
Signing time: Sun 29 Mar 2026 08:00:26 +0000
Manifest this update: Sun 29 Mar 2026 08:00:26 +0000
Manifest next update: Mon 30 Mar 2026 08:00:26 +0000
Files and hashes: 1: 1RQLtNwsJfIFpRzUfnhxJpXZkyM.roa (hash: wMjp06WKn3OrqdyFTd7sBWSyRC6sXJcxycCDPSTxcI0=)
2: Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl (hash: swmGbKUgK85BjLx6j5DpJwNmpkvoOb3g03+xzZHqpoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:c9:74:b2:0d:f3:9f:2f:59:6b:99:50:1c:34:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebd5f8bb5a594d67b5ce807a84c59dde569a775
Validity
Not Before: Mar 29 08:00:26 2026 GMT
Not After : Mar 30 08:00:26 2026 GMT
Subject: CN=235067afce85d455632d535b36ec12ff77231aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:33:4b:87:24:de:97:3e:01:01:2c:74:79:2d:
20:e0:b9:b3:b5:1f:15:48:e1:19:c9:b5:19:dc:fe:
93:fb:75:80:d9:36:6b:f2:09:0a:0d:e8:23:b5:98:
f6:9f:3c:36:2a:b3:80:af:e6:b8:8a:9d:36:15:a8:
08:31:c3:cd:48:76:d0:de:b8:ca:f6:c3:43:57:0a:
34:a6:e3:e5:6d:33:59:ea:19:34:f6:1f:a6:84:4f:
f8:fc:66:e4:3f:77:2e:b6:35:74:1a:29:65:5c:53:
72:de:0c:2a:44:3f:b4:4a:c1:09:39:78:25:ae:40:
a4:7c:39:ac:bc:6d:05:e8:92:f5:18:fc:e8:22:01:
b0:d9:89:3c:49:83:bd:93:ff:1f:e2:92:99:8d:74:
70:ec:9e:14:4c:1e:67:07:9c:60:52:c5:d0:19:4d:
07:c1:f4:4f:0a:1e:05:17:cd:78:a9:b8:9a:0b:a5:
f1:9f:75:85:a9:3a:75:e5:23:a4:ad:17:0d:54:b9:
5d:ca:70:a2:66:b0:01:49:2b:b4:57:b0:38:0e:1f:
06:73:d2:6e:8c:42:eb:b9:03:43:27:10:29:15:49:
f3:da:cf:8f:a7:00:92:e2:ca:05:55:13:ac:3c:8d:
b9:28:f4:6f:35:3a:13:67:16:f8:ba:76:1c:a5:d7:
a3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:50:67:AF:CE:85:D4:55:63:2D:53:5B:36:EC:12:FF:77:23:1A:EB
X509v3 Authority Key Identifier:
keyid:3E:BD:5F:8B:B5:A5:94:D6:7B:5C:E8:07:A8:4C:59:DD:E5:69:A7:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:bd:c1:c1:34:05:71:5d:50:c4:20:d5:08:92:a7:d8:6d:71:
08:54:c5:35:ec:e5:4e:1f:da:46:46:49:1d:cf:f9:73:7e:79:
03:01:c5:d0:42:9f:d0:02:fa:78:2a:19:e6:ed:32:42:4e:a4:
bc:e4:f1:bf:ad:ab:01:ab:7a:11:21:95:ab:a1:3d:5f:36:9d:
53:e1:fe:a5:85:35:91:c2:c8:af:5a:75:a1:5f:41:b6:66:21:
28:2d:c2:9a:ba:4a:59:5a:76:dd:bf:c6:10:d1:72:91:40:c6:
cb:13:cb:0f:51:1c:03:a5:c4:ff:a7:15:75:c4:13:2c:a4:3d:
f5:00:4d:b4:91:0a:c8:e0:b1:55:a2:aa:0d:6a:19:83:b2:13:
f4:17:bc:66:37:10:fb:c8:09:ed:94:a7:01:01:cc:b2:3b:f5:
48:dc:92:5f:f5:48:6f:0a:c1:ad:ae:e4:db:f4:b8:9f:57:bf:
bf:d6:26:0c:fd:a6:1f:ee:cc:bc:62:31:aa:40:b9:43:44:21:
6c:45:4c:4d:52:d0:22:f4:89:21:ec:94:5e:a4:70:be:38:9e:
3a:05:8d:5d:f0:a3:4c:db:e5:eb:da:05:4a:bc:a7:d2:e6:76:
b7:50:fb:75:b5:68:84:ca:04:6a:0b:fb:7a:a1:fa:c6:97:e6:
ee:dc:96:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:48:55 2026 by rpki-client