Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
File: _PyV8biAEebcM9BBuYsxMHdsQo8.mft (raw, json)
Hash identifier: W/fgS/7TcrAOXJTke23ZWV9rNEjMyBcIUj1LYzSexYo=
Subject key identifier: DD:34:6E:4D:BC:86:F1:19:6A:77:28:63:2F:1E:2D:CE:96:19:1B:5F
Authority key identifier: FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F
Certificate issuer: /CN=fcfc95f1b88011e6dc33d041b98b3130776c428f
Certificate serial: 019DCE99226E49FA0EF1ED1D4B6C4A410E5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
Manifest number: 0A50
Signing time: Mon 27 Apr 2026 11:00:35 +0000
Manifest this update: Mon 27 Apr 2026 11:00:35 +0000
Manifest next update: Tue 28 Apr 2026 11:00:35 +0000
Files and hashes: 1: _PyV8biAEebcM9BBuYsxMHdsQo8.crl (hash: QRcUpzg6rm2IBS1b+7EH03OrPGrJLzdXLU3cCTCV7eE=)
2: jON8jV9Q2GLdoq1oYbTtzWvSeAw.roa (hash: CpfaNm7QCE9dRH1Z5uGSs1NzanRsXUOVz00UoK4+1jY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:22:6e:49:fa:0e:f1:ed:1d:4b:6c:4a:41:0e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcfc95f1b88011e6dc33d041b98b3130776c428f
Validity
Not Before: Apr 27 11:00:35 2026 GMT
Not After : Apr 28 11:00:35 2026 GMT
Subject: CN=dd346e4dbc86f1196a7728632f1e2dce96191b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a8:43:e1:3d:08:5d:b7:e8:95:01:28:97:b0:
28:17:47:60:1e:1f:66:eb:4b:d8:5e:e1:47:72:56:
4b:35:ae:8f:26:0a:e1:04:85:46:a1:c2:b4:25:57:
68:d8:89:96:3b:fd:43:a6:dc:4c:77:ad:82:f8:87:
56:67:09:ac:c6:d5:3f:32:22:c7:2f:31:f6:8f:eb:
69:9d:24:60:cb:c0:b8:2e:b6:e0:f9:db:24:2d:40:
32:33:2a:b8:47:29:2f:48:af:5b:0a:9e:d1:3e:dc:
88:ed:e9:56:cb:d1:fa:38:5e:87:dd:29:ec:52:20:
cb:2b:47:db:81:e7:42:d5:43:93:49:5b:d8:ab:db:
5c:e5:3a:a4:91:70:52:37:06:bd:26:d7:c0:da:2d:
59:93:ef:5e:2b:94:7e:f6:c1:a4:a7:b4:67:0d:56:
22:57:5f:15:78:0d:a5:9d:bb:59:00:83:c8:1d:7b:
76:84:18:98:1a:89:44:1a:3d:e0:d4:47:9e:25:a1:
a8:db:58:a5:cd:fa:3f:26:bc:7f:a7:4c:97:c7:3e:
4e:5e:27:bc:42:2e:3e:94:81:0e:b3:70:45:e8:34:
ae:a2:64:4d:f7:9a:06:7e:ea:5f:fa:de:9c:39:b6:
42:a6:33:64:1d:14:7f:1d:ec:4b:40:f1:91:13:6c:
76:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:34:6E:4D:BC:86:F1:19:6A:77:28:63:2F:1E:2D:CE:96:19:1B:5F
X509v3 Authority Key Identifier:
keyid:FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:f8:e1:bb:15:95:6d:2a:e5:47:3e:98:e9:49:1c:cf:40:eb:
06:58:21:cc:8a:c4:24:81:31:80:bf:09:a1:be:ca:d5:d1:79:
c7:0b:76:95:96:63:7a:1a:eb:41:e6:41:f9:5b:44:87:b6:ce:
02:2a:a9:54:10:a4:c0:46:b0:f6:90:8d:89:63:65:a5:67:03:
e6:d3:38:03:90:c6:4b:72:67:54:03:9f:10:8f:7a:7c:ba:8f:
fa:33:d1:33:81:1c:a8:b8:b9:86:ae:35:60:1f:75:77:89:e2:
a2:37:e2:89:d1:19:b7:c3:e9:7d:74:4c:eb:96:89:44:10:4c:
c2:46:5e:cb:66:7e:d0:67:08:45:bf:da:87:19:83:88:4e:04:
2e:79:cd:5f:4d:96:a8:57:b6:45:bc:87:b3:0a:e1:70:ed:57:
67:32:6d:fc:f3:0f:0b:0f:e9:5f:6a:7d:fc:dd:fd:e7:cb:46:
b8:08:e8:14:61:06:70:30:45:d4:f9:71:49:76:74:aa:32:d5:
55:fb:44:37:a7:90:41:4b:a5:cd:c2:1e:6c:57:30:54:42:b5:
d1:c8:48:89:d3:de:9f:02:53:53:2a:5d:3d:c4:0f:23:cb:23:
ab:a4:be:38:52:0a:0e:dc:e9:6c:dd:23:9d:02:ca:dd:4c:5b:
19:1a:af:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:07:08 2026 by rpki-client