Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
File: P4_xyWZv4ZXySqH-jDRdecSOe8A.mft (raw, json)
Hash identifier: GQPX5ixMMlA1aqMI8szcwp005kBOebIjF7er+dmEdG0=
Subject key identifier: E4:9B:BB:4F:D2:08:7B:B3:A3:C2:02:10:48:CF:77:BD:4F:90:F3:54
Authority key identifier: 3F:8F:F1:C9:66:6F:E1:95:F2:4A:A1:FE:8C:34:5D:79:C4:8E:7B:C0
Certificate issuer: /CN=3f8ff1c9666fe195f24aa1fe8c345d79c48e7bc0
Certificate serial: 019D37C06C310BD62DD71B87EB59D06E9274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
Manifest number: 0C7A
Signing time: Sun 29 Mar 2026 04:00:50 +0000
Manifest this update: Sun 29 Mar 2026 04:00:50 +0000
Manifest next update: Mon 30 Mar 2026 04:00:50 +0000
Files and hashes: 1: P4_xyWZv4ZXySqH-jDRdecSOe8A.crl (hash: /OtN4Qj2a9LSoy+95nPc8AwAFIdeInCRYk94FfeSxtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:6c:31:0b:d6:2d:d7:1b:87:eb:59:d0:6e:92:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ff1c9666fe195f24aa1fe8c345d79c48e7bc0
Validity
Not Before: Mar 29 04:00:50 2026 GMT
Not After : Mar 30 04:00:50 2026 GMT
Subject: CN=e49bbb4fd2087bb3a3c2021048cf77bd4f90f354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e8:cc:8f:ef:58:4d:f1:cb:34:38:7e:3a:25:
df:93:be:98:cb:e4:87:66:78:74:41:68:4c:b8:65:
5a:fe:e1:09:b4:3e:c7:30:e4:88:55:b1:30:e7:64:
b1:08:0a:95:76:f3:68:73:c4:c2:a5:5f:3a:49:8d:
61:01:e0:a9:3e:07:2d:35:fb:fe:d2:91:ed:12:51:
4a:79:3e:70:2f:89:e2:69:3c:54:73:e3:c2:1a:32:
f5:77:5d:7c:e0:16:c4:9a:e8:4a:03:87:b2:ff:fd:
c4:9b:e0:d9:13:19:7e:bb:da:53:5f:13:56:0b:aa:
88:85:2b:0c:4d:a3:b4:6c:89:73:75:9d:dd:e3:26:
91:08:24:1d:c6:12:85:6b:d5:d7:15:4b:be:ad:97:
d1:7f:06:ce:e0:47:03:13:14:7e:8c:5e:c2:a8:f6:
91:da:cc:45:2d:8a:77:06:df:95:72:94:b3:b1:07:
69:2b:2a:5d:13:5e:b4:37:31:03:a5:65:91:5f:69:
28:8a:eb:db:15:56:54:f4:e8:ab:20:72:81:71:2d:
33:8e:ac:7f:1c:5c:58:bd:d1:68:06:55:aa:fd:56:
ac:ee:f8:ca:1e:b3:e8:1f:e6:96:8a:27:65:6e:4a:
f8:04:f4:46:d0:bd:47:f0:db:18:a3:32:a0:94:e1:
b1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9B:BB:4F:D2:08:7B:B3:A3:C2:02:10:48:CF:77:BD:4F:90:F3:54
X509v3 Authority Key Identifier:
keyid:3F:8F:F1:C9:66:6F:E1:95:F2:4A:A1:FE:8C:34:5D:79:C4:8E:7B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:69:f5:48:3e:16:94:0b:d4:f0:66:c3:1c:2f:85:f5:b1:f1:
ef:a0:d4:5e:c8:e4:dd:4d:00:74:94:00:7d:96:f2:17:b0:39:
ad:4a:ae:f3:f2:2e:74:9f:96:ba:18:c0:78:7c:63:25:33:e8:
4c:68:38:fd:ba:21:73:67:ec:32:5c:af:ed:b7:d5:31:ac:f0:
16:5b:0d:25:c2:e5:a0:b7:5b:dd:0a:e0:45:57:ba:87:37:bf:
3a:1e:bc:a7:94:01:4e:91:71:2a:d7:d4:a4:cd:00:46:7a:f8:
3a:cd:13:b2:08:9b:a7:6e:74:13:cb:c3:34:6e:8a:58:b1:3e:
b8:6d:9d:09:7f:de:f8:a5:1d:1c:c6:bb:4a:4c:65:0d:03:c8:
a4:ef:1b:84:ad:55:7f:99:d9:9e:4a:f2:4d:85:c2:70:19:f7:
a7:92:e5:4a:af:57:05:f3:c8:e2:e5:a2:87:db:13:aa:b4:b8:
f6:90:e6:9d:90:dc:5b:d7:8e:f2:4d:e6:97:fc:ce:9d:ce:01:
b2:88:da:51:2d:9f:3b:c3:c8:16:47:68:03:fc:c1:02:7c:77:
29:7f:0b:5e:d0:5b:cb:67:76:61:ad:37:ff:da:14:2c:e1:91:
67:47:b6:18:90:79:61:42:eb:b3:9c:6b:97:7d:c5:4f:aa:67:
d2:8e:83:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:49 2026 by rpki-client