Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
File: P3lU2IwK4_Y5hpe_38GVanU-g9g.mft (raw, json)
Hash identifier: CJGPta/lKFjum3QlQzFy/5mbWxdNJB4AKwFqU2HPvms=
Subject key identifier: 5F:DD:E5:1D:4A:F2:40:76:4B:81:57:C8:26:4F:FE:59:13:B5:79:70
Authority key identifier: 3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
Certificate issuer: /CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Certificate serial: 01A1814FB12B955640E6F8FA1D020E691AB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
Manifest number: 1AA2
Signing time: Wed 28 Oct 2026 07:00:45 +0000
Manifest this update: Wed 28 Oct 2026 07:00:45 +0000
Manifest next update: Thu 29 Oct 2026 07:00:45 +0000
Files and hashes: 1: Jj1TbiCR1nmoQFDDhEUp8Nme5jQ.roa (hash: vEZJZ1EhFYSpfGBedYuhl8hXTejG4aUKraQ3lMQVDzY=)
2: O2XFtNMj5F8lYJUMSubzNUa8Fr4.asa (hash: 67is5rgLKuOUXA0v6cE8sl5V36YTQpNm07lUONgLSRE=)
3: P3lU2IwK4_Y5hpe_38GVanU-g9g.crl (hash: rD8bvJkw+T2dhzcggZs/nc139+setGWjhc5Bo4VxMUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:4f:b1:2b:95:56:40:e6:f8:fa:1d:02:0e:69:1a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Validity
Not Before: Oct 28 07:00:45 2026 GMT
Not After : Oct 29 07:00:45 2026 GMT
Subject: CN=5fdde51d4af240764b8157c8264ffe5913b57970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:be:ed:f2:94:80:d5:1f:bb:c3:9f:c6:87:c9:
27:96:b5:ff:0f:72:8b:6d:32:05:e4:42:b7:6d:d3:
1b:9b:b2:24:34:3c:70:4f:ba:5c:79:84:18:1c:9b:
8e:20:22:10:85:0e:4b:fe:af:8e:02:0c:52:dd:a9:
9c:46:92:a6:6c:73:d1:a7:c2:80:8b:ae:d7:8f:c5:
08:ed:91:02:d9:37:7f:c1:85:c0:f8:84:02:ae:ee:
d3:b3:51:60:ca:6e:25:7f:66:61:81:2f:a4:6a:c2:
3d:34:66:72:1a:f0:81:72:3e:df:76:69:02:81:90:
8c:2e:01:66:c3:ef:fd:5a:bc:7c:1d:23:f8:5a:7c:
69:06:15:c6:14:c8:68:1d:4d:89:e9:0c:f5:c9:b0:
f9:04:53:2e:77:cd:f7:27:3f:b1:35:9a:64:59:f2:
25:2b:6f:19:03:eb:06:64:bc:84:38:c2:11:60:5c:
3a:8f:78:0e:37:e0:f1:78:90:0f:1c:06:7f:88:9b:
ca:f1:a2:4c:f9:c8:55:fa:5c:aa:3a:34:2f:98:d4:
0b:77:a0:6f:2f:c6:db:de:9f:83:ac:37:c6:3a:75:
27:d3:50:76:d0:0e:f1:17:a4:26:f6:9b:92:a5:52:
6a:17:da:45:3b:c8:4d:18:ca:c1:81:e7:db:fe:f5:
9e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DD:E5:1D:4A:F2:40:76:4B:81:57:C8:26:4F:FE:59:13:B5:79:70
X509v3 Authority Key Identifier:
keyid:3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:0b:fa:d7:47:2f:76:f6:1f:2b:d5:79:d1:e5:0d:86:5c:27:
5c:cc:78:a7:e7:21:55:56:9b:b8:b7:76:10:e4:6a:bc:27:01:
36:96:ec:91:10:6b:9c:34:9a:77:e6:fa:27:27:dc:d6:59:83:
f8:c6:10:5d:9f:bc:dd:31:85:30:cd:79:2b:ec:85:01:f2:aa:
57:2d:bb:54:13:e0:2f:3c:16:a2:41:13:8f:09:aa:05:b9:28:
f2:45:0b:78:a4:5a:6f:12:ea:95:55:e0:33:16:16:dc:cb:7f:
df:00:eb:b2:11:f5:7a:06:27:6c:12:b4:47:10:2f:54:b7:1d:
ac:7d:6d:46:bb:44:9a:5c:0a:13:00:2e:6c:66:ef:a6:95:dd:
08:ec:5f:01:0c:2e:3d:0a:8d:63:6d:9f:dd:62:0f:21:b3:cd:
f3:6b:b5:1b:7b:38:87:55:09:c1:6a:4f:67:14:9d:b3:d9:48:
43:0d:be:af:34:8b:af:9a:67:dd:4e:9b:bc:88:4f:ab:97:ee:
6b:f6:35:be:e4:b1:c6:95:6c:e9:b9:6e:8a:7d:9f:c6:7c:81:
36:87:c9:14:ad:53:1e:7f:e1:6c:c4:37:c0:00:e5:54:4b:fb:
46:98:d1:fd:ce:90:ac:cf:43:ef:ab:f2:b5:7a:71:fc:cf:8e:
e0:bd:db:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:05:09 2026 by rpki-client