Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
File: P3lU2IwK4_Y5hpe_38GVanU-g9g.mft (raw, json)
Hash identifier: 892HEJjQ5cIACe+hvYaqvUFapM1ORTCIwS7aJjfIkNw=
Subject key identifier: 32:E1:CA:E9:8A:AA:87:57:03:57:60:BE:B3:D1:B7:FF:A0:2D:41:8C
Authority key identifier: 3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
Certificate issuer: /CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Certificate serial: 019D3866694A73BBC834F15C7B4A509073B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
Manifest number: 1868
Signing time: Sun 29 Mar 2026 07:02:08 +0000
Manifest this update: Sun 29 Mar 2026 07:02:08 +0000
Manifest next update: Mon 30 Mar 2026 07:02:08 +0000
Files and hashes: 1: P3lU2IwK4_Y5hpe_38GVanU-g9g.crl (hash: VAuduQKj6XAe0Tiryw03nsIuoEu7r73kU4dtnGOlpII=)
2: pPQ_ikZwm714GOEIqdQyxnhiVJE.roa (hash: 4UUAoZKaA2j3VJE7xShuXB30Uh86/B72WrTV35CTOuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:69:4a:73:bb:c8:34:f1:5c:7b:4a:50:90:73:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Validity
Not Before: Mar 29 07:02:08 2026 GMT
Not After : Mar 30 07:02:08 2026 GMT
Subject: CN=32e1cae98aaa8757035760beb3d1b7ffa02d418c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dd:87:83:29:69:5f:98:fb:6b:f1:67:ff:7f:
23:8f:aa:71:f4:87:77:d8:e5:64:31:ec:a2:c5:9c:
83:99:ae:1b:58:1b:10:8b:d5:bb:a4:6e:5f:9f:4d:
b5:02:54:52:78:22:0d:7d:26:ed:66:fa:6c:59:8a:
e6:08:ed:6f:7b:8e:0e:5e:e5:f4:75:b6:a0:a4:d4:
93:d8:f2:b9:ca:68:b9:c2:8b:43:72:a7:16:c5:86:
c8:99:ed:2a:36:b0:fa:29:5f:13:1b:3d:6e:d6:8b:
1b:93:a7:23:26:dd:90:2b:05:92:17:61:90:25:0e:
45:ed:8b:25:2f:6b:32:65:f9:6b:97:2f:4b:8e:cb:
5b:e2:92:aa:53:b3:95:c5:90:0c:d5:0c:85:9e:8d:
c2:42:bb:67:30:cb:b0:e9:b8:da:5f:4b:45:00:d2:
fe:6e:3d:49:75:4d:d9:c2:f8:a0:01:23:49:aa:e7:
82:75:7a:bf:30:67:b5:64:9c:be:45:98:0d:4f:32:
62:1c:6a:76:e5:14:58:18:75:ad:85:73:fb:b9:92:
c1:5f:15:b3:5a:d4:e2:be:a7:2e:b8:7d:fb:e1:a1:
1a:2a:8e:ec:cf:54:c7:40:93:f5:bb:ba:90:2d:27:
57:7b:13:9a:f1:c9:e8:fe:bc:9f:e9:3b:74:3c:c5:
ba:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E1:CA:E9:8A:AA:87:57:03:57:60:BE:B3:D1:B7:FF:A0:2D:41:8C
X509v3 Authority Key Identifier:
keyid:3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:78:07:45:ff:b9:62:5e:b6:cd:b0:2f:c5:2d:15:8d:c8:dd:
0e:79:f4:6a:68:79:3c:d6:bf:14:1b:9e:63:df:a1:56:c3:95:
11:f8:61:d7:43:6f:aa:dd:ee:ac:5c:e0:b9:23:4f:94:b5:90:
a0:7e:9a:f9:99:4d:0e:dc:4e:5f:58:26:7c:fd:4c:8c:12:03:
81:74:b6:fb:19:4d:fe:a4:d3:e8:6c:0f:82:ab:30:a3:aa:d9:
e3:af:4f:44:d0:35:33:b9:01:bf:c6:41:ab:c7:9f:ba:46:9a:
d3:8d:6e:49:da:4d:bc:c9:65:c0:65:3a:a2:45:4f:57:68:96:
dc:ae:70:fc:fb:86:02:ff:c9:73:1f:63:ec:b8:d4:82:18:0a:
55:e2:69:f1:85:d6:88:94:1f:55:af:c0:80:ab:9a:9e:a4:25:
00:aa:c8:45:f5:a6:67:cc:2d:e8:82:04:71:f5:ec:17:6a:89:
e3:7d:88:91:c6:34:5a:08:06:f5:92:10:01:20:4a:21:ec:43:
b2:c0:03:15:3e:d2:ab:f5:4b:23:e0:98:00:04:93:9c:eb:74:
67:74:a7:e8:10:dc:9b:8d:a9:72:7f:07:a9:11:29:7d:9a:6f:
27:05:63:fd:f1:78:4f:25:16:cd:a2:7b:77:93:85:6d:a3:78:
7a:ab:ae:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:05 2026 by rpki-client