Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.mft
File: pI2lIJvWz5DG321-bWOmOVW61LU.mft (raw, json)
Hash identifier: sgzbkKoPTz/V7BhFTpjBFh9t5YmB8gW9o9p3go9vc6E=
Subject key identifier: 3F:0B:57:2F:77:B9:C0:8E:9C:54:AF:F5:FB:73:BF:22:E8:36:B5:60
Authority key identifier: A4:8D:A5:20:9B:D6:CF:90:C6:DF:6D:7E:6D:63:A6:39:55:BA:D4:B5
Certificate issuer: /CN=a48da5209bd6cf90c6df6d7e6d63a63955bad4b5
Certificate serial: 019D37C0F01A9C7DC0CA6D50CE176870CDEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pI2lIJvWz5DG321-bWOmOVW61LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.mft
Manifest number: 0918
Signing time: Sun 29 Mar 2026 04:01:24 +0000
Manifest this update: Sun 29 Mar 2026 04:01:24 +0000
Manifest next update: Mon 30 Mar 2026 04:01:24 +0000
Files and hashes: 1: gvfxgS9VdbGwIqb9SxlXG1MbNbM.roa (hash: JUjuVP1XRuU3MRxww3ep16uVkjCeigeMEzaVCeFSa2A=)
2: pI2lIJvWz5DG321-bWOmOVW61LU.crl (hash: oTc3Hp7I03uhaxfwgU9BYCINpTm0jY9EE5qt4VuBUoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pI2lIJvWz5DG321-bWOmOVW61LU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:f0:1a:9c:7d:c0:ca:6d:50:ce:17:68:70:cd:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a48da5209bd6cf90c6df6d7e6d63a63955bad4b5
Validity
Not Before: Mar 29 04:01:24 2026 GMT
Not After : Mar 30 04:01:24 2026 GMT
Subject: CN=3f0b572f77b9c08e9c54aff5fb73bf22e836b560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:98:71:13:05:00:b6:e0:d8:5a:d8:24:4a:a6:
94:c3:fb:cf:39:83:8b:f9:a4:cc:61:db:98:6a:63:
80:bd:df:14:5d:76:87:8e:18:36:1e:f9:ae:79:7e:
5d:e0:04:32:d7:35:15:e2:a5:35:4c:9d:3e:e1:5d:
87:1a:3a:b0:68:6c:87:6b:b9:8a:bf:34:6f:6d:a8:
79:f1:11:ff:4e:98:dc:57:bb:08:ae:34:73:a1:7d:
11:86:95:ac:8e:69:f8:4c:d2:b6:b4:c2:cb:e1:3d:
ed:82:3e:2d:83:4f:27:a2:55:2e:35:b6:64:ab:3e:
56:b0:78:62:04:48:ea:0a:dd:51:d9:b8:ca:8b:93:
13:15:3d:f7:5c:18:08:1c:c5:aa:05:6d:75:80:25:
b4:16:08:d4:66:d5:bc:5c:03:29:c5:93:c2:2d:56:
11:ba:b9:4a:b0:4d:96:0d:e7:b2:a5:7c:f5:3b:9d:
48:7e:bd:a9:2f:1d:f7:5d:d2:9b:3a:69:9d:b1:99:
4d:d0:59:c2:b1:e3:8b:32:3a:fa:14:2a:ff:b1:0b:
04:27:e4:30:56:f6:34:a0:05:cd:9f:5e:07:c8:e0:
32:c3:c2:3d:1e:b1:7d:8c:10:38:13:e6:e6:a7:3e:
e4:74:d8:1d:11:c3:fc:3a:bc:06:bf:63:7a:f5:c6:
89:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0B:57:2F:77:B9:C0:8E:9C:54:AF:F5:FB:73:BF:22:E8:36:B5:60
X509v3 Authority Key Identifier:
keyid:A4:8D:A5:20:9B:D6:CF:90:C6:DF:6D:7E:6D:63:A6:39:55:BA:D4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pI2lIJvWz5DG321-bWOmOVW61LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:37:09:01:7b:43:5c:0d:f9:b8:1f:0a:c8:19:ab:af:47:b9:
fe:d3:23:1a:d6:1a:aa:0a:d5:74:63:6a:48:53:8c:c0:18:af:
62:ec:ad:17:b4:8e:2a:7b:41:53:a2:aa:80:3a:d0:6f:ac:86:
1b:13:fe:6f:96:b6:4b:86:53:6e:56:9c:28:0e:dc:8b:2f:bc:
f2:f1:31:6e:c6:a9:b9:20:b2:43:a9:68:1a:9b:74:7a:0a:2e:
3a:51:32:b1:ae:0c:5b:db:23:36:3d:e3:87:06:ee:11:99:64:
0d:82:61:6d:d0:5e:b1:f6:9a:5e:5a:c1:89:9b:df:61:39:08:
8a:94:7f:78:5c:03:37:5e:c9:9e:77:96:25:57:75:e6:70:6f:
a7:3a:0b:f4:63:71:e2:05:c9:05:46:14:72:98:8f:73:1b:db:
95:9b:51:2f:c0:c7:b2:46:4e:3a:38:9a:ff:93:0f:f1:af:a1:
65:38:92:a2:91:62:c3:72:e0:4c:06:f2:28:a9:dd:c0:4a:fc:
a6:ce:93:29:24:48:cd:d9:81:6a:93:86:7e:c7:ca:88:b0:ad:
ae:b9:05:e1:74:5b:83:fa:8a:e5:26:55:e6:a1:41:7c:d0:42:
e3:d3:73:36:04:bf:de:97:4e:82:96:d9:d0:96:63:a8:e2:c4:
e5:7b:5b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:36:06 2026 by rpki-client