Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
File: to-PMlFKGD6Xejx982Rz1WJgxKQ.mft (raw, json)
Hash identifier: WZ1FtuSNll+eBMAEDXzn94JZjUjFB8teOOXOOnDNGvU=
Subject key identifier: E0:F6:85:88:01:8A:C5:E5:3F:CA:C1:73:ED:8C:52:64:AF:D2:F0:78
Authority key identifier: B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
Certificate issuer: /CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Certificate serial: 019D3940A46284FC54DD9304237C7E845F81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
Manifest number: 0CF1
Signing time: Sun 29 Mar 2026 11:00:30 +0000
Manifest this update: Sun 29 Mar 2026 11:00:30 +0000
Manifest next update: Mon 30 Mar 2026 11:00:30 +0000
Files and hashes: 1: UycNDBh6XIKJ82eOMM9nsWm3RUU.roa (hash: j5CuV0Ecvfd3t9K7/xrfKK4OIBdyHHKPYNpzUJ5l9jc=)
2: to-PMlFKGD6Xejx982Rz1WJgxKQ.crl (hash: DyTuzwKXNfUEbl5Y46QoqQjuHrZoNw1BcYbQoyFGNYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:a4:62:84:fc:54:dd:93:04:23:7c:7e:84:5f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Validity
Not Before: Mar 29 11:00:30 2026 GMT
Not After : Mar 30 11:00:30 2026 GMT
Subject: CN=e0f68588018ac5e53fcac173ed8c5264afd2f078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8b:b6:65:7a:92:ee:48:d9:b7:59:bf:76:b2:
87:a0:52:ab:34:53:b3:12:93:b9:a1:1a:30:d0:e7:
07:db:30:a7:0d:fc:99:5d:0f:ea:22:bb:77:66:95:
17:f7:cf:0f:ba:29:81:d7:9e:59:d9:bc:c6:fb:2d:
7d:df:58:d5:40:84:20:3c:b6:15:bf:28:d4:2c:6d:
e3:31:9a:ed:fa:a8:24:e7:f6:10:9d:6d:b8:75:22:
26:89:c5:7b:20:16:36:21:f7:f7:10:0a:8f:ce:69:
f8:5c:f3:a4:be:10:1a:c1:76:25:0f:88:d1:fc:10:
d8:e3:cb:7c:cb:ff:a7:8c:43:85:ec:52:db:3e:1e:
df:f9:92:27:27:57:15:f1:ae:64:13:3c:6e:93:42:
38:7e:da:4f:ce:26:89:1c:0d:41:89:5a:82:dd:c9:
68:e1:04:68:f7:9f:55:b1:84:47:44:e2:7a:41:18:
34:ec:24:0c:f1:67:65:42:a3:b5:60:c4:30:d9:69:
5d:d1:a9:8e:8e:05:74:e9:a8:18:04:84:8e:f6:d5:
90:33:4b:38:a3:ce:8f:ad:ca:4e:87:08:c0:3c:2b:
ce:85:b1:ff:59:7f:4f:a2:01:21:49:fe:e9:b1:46:
c9:d4:80:43:64:2a:2e:a2:b0:09:0d:82:77:5a:dd:
72:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F6:85:88:01:8A:C5:E5:3F:CA:C1:73:ED:8C:52:64:AF:D2:F0:78
X509v3 Authority Key Identifier:
keyid:B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:58:6a:92:de:a0:81:aa:20:29:8c:07:7e:c5:a0:4b:b1:fc:
74:d0:76:b0:b0:15:6f:95:57:2f:c8:d9:6a:2a:21:20:7c:f0:
d9:bb:5b:3b:c9:0c:79:3f:ce:75:c0:22:21:34:e0:d1:2a:0c:
24:fc:68:ee:de:8c:de:82:72:b3:4d:49:b2:45:b6:f6:11:68:
f9:87:12:e0:41:58:00:c3:e4:ce:e7:1c:77:74:75:7b:cf:76:
83:c7:54:00:a5:bb:ae:d1:fd:ab:55:a4:4c:ce:df:60:39:70:
d5:af:05:ed:6b:b1:cd:b5:b8:cf:9d:50:58:4c:9c:13:a4:51:
d2:88:6d:98:d8:85:8c:dc:43:eb:43:8d:64:aa:7a:b4:c0:51:
07:dc:ab:c8:bf:95:9e:25:c3:96:ea:ed:68:71:47:66:5a:e8:
c8:9b:ba:50:c6:72:d9:86:04:cd:a1:78:c6:02:96:07:5a:6d:
36:d9:b7:f4:c0:d2:6a:c1:c8:ad:15:3d:68:d7:5b:84:6c:a8:
1b:1d:d6:3b:34:d3:06:7e:88:7d:80:64:f6:d1:f0:bb:6f:25:
53:2e:48:0e:23:ae:28:5f:04:ac:b2:0f:24:f6:bb:5e:e1:c4:
42:c3:f3:48:8e:d5:23:51:3a:7b:9d:6b:91:c8:c5:5c:b9:b4:
71:55:f5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:31 2026 by rpki-client