Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
File: PFaMWdeoMZnDp56g6DdblG7YhOI.mft (raw, json)
Hash identifier: Qn0xglaba8+NZ9gDYZwaQucrRfrvEqP1mdf0SOFBAuQ=
Subject key identifier: 51:4D:4D:AD:D6:28:75:D0:26:67:68:BD:B6:F8:B3:AB:A2:BE:43:FC
Authority key identifier: 3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
Certificate issuer: /CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Certificate serial: 019D382E15DCFB016524B6CF61C1598C6C49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 06:00:37 +0000
Manifest this update: Sun 29 Mar 2026 06:00:37 +0000
Manifest next update: Mon 30 Mar 2026 06:00:37 +0000
Files and hashes: 1: 0ZH3kxew36RRFzQg_mo4-7q2H4U.roa (hash: k3MKGbvdmLnbLs9zehodMhvSl8HPr3KY+BJ978CUfo8=)
2: AydP7XNvWxhhDMLSuOqc0Oa5dE0.roa (hash: jUVgcjRvFoEADtpRITq72Z8KeRsnl4848PEL4Me2SIw=)
3: PFaMWdeoMZnDp56g6DdblG7YhOI.crl (hash: DYQGgx0CxztzWOC6ituEh4Lgo3xMHhaVHkpkiNrO8Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:15:dc:fb:01:65:24:b6:cf:61:c1:59:8c:6c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Validity
Not Before: Mar 29 06:00:37 2026 GMT
Not After : Mar 30 06:00:37 2026 GMT
Subject: CN=514d4dadd62875d0266768bdb6f8b3aba2be43fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:12:25:1d:02:69:48:fa:eb:44:ef:41:8a:2c:
ed:df:51:85:fc:39:50:db:a2:0b:45:cc:22:73:d3:
6d:70:81:48:d3:c8:33:dc:ab:fc:01:ee:32:50:4f:
48:84:d8:5b:bd:ca:c2:f6:76:67:a3:ef:e4:2f:2d:
6c:41:e3:ca:ac:c6:c0:f3:d5:34:42:18:29:e7:13:
08:aa:60:c1:e2:39:e4:21:1e:60:fe:e3:5c:50:3f:
fa:e7:98:67:3c:1d:d5:12:99:3d:10:a2:70:f2:34:
a6:38:2a:33:df:82:24:9d:f2:8b:8c:04:3b:48:66:
3e:2b:a1:be:10:31:99:61:16:3f:e4:61:1b:e0:07:
95:2b:cb:5e:dd:fb:43:07:b3:e4:06:e5:13:7d:38:
ec:fc:aa:ea:e5:60:10:89:fb:21:1c:87:5e:46:dd:
dc:1f:02:e4:a9:9a:94:d4:b5:99:da:8d:11:92:a9:
bc:20:66:4c:52:bb:0a:29:8c:24:0a:6b:5d:e1:af:
2a:0e:9d:37:ed:19:cc:04:33:3a:8c:b2:7e:b2:89:
39:e7:71:55:87:c5:8d:91:16:d3:d2:19:66:d2:fb:
49:26:ee:ac:94:68:87:79:47:ff:7b:80:1f:9f:ea:
bc:27:ed:9c:28:3c:1c:8e:79:08:77:c1:cd:aa:9a:
6c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:4D:4D:AD:D6:28:75:D0:26:67:68:BD:B6:F8:B3:AB:A2:BE:43:FC
X509v3 Authority Key Identifier:
keyid:3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:7b:27:54:7d:28:41:e2:a7:60:c4:7f:21:84:c2:44:1c:cf:
48:78:c5:34:42:c3:ab:ed:fc:53:2b:af:9e:41:fd:5d:10:aa:
e1:78:05:15:8c:c4:0a:02:22:cc:ae:ba:ff:54:ea:9b:8a:b5:
71:61:31:f5:f4:9f:95:c8:f2:f7:af:aa:e8:b9:b7:07:52:5f:
f3:f0:87:8d:64:40:49:4c:68:2f:5b:95:82:2a:e3:4d:9f:31:
b6:63:33:1b:23:af:86:98:2f:c5:e0:82:5c:02:b1:d0:18:e8:
6f:c4:bf:53:9f:c2:c5:b0:46:98:b2:5a:22:2a:2c:23:31:f5:
db:78:97:30:d5:1d:8b:40:46:f2:5b:5e:f1:6f:90:95:c2:9b:
d2:7d:2d:8b:9b:52:ce:64:73:d7:c5:a8:95:ac:51:63:a2:5e:
75:52:3c:d9:ff:56:bc:f2:07:a1:9e:67:64:9a:13:3b:da:9d:
1c:b3:fc:61:d3:85:8f:71:64:08:ff:64:f9:2f:78:d6:49:14:
d2:2c:4f:a8:fb:92:b1:6d:c4:e4:79:0f:b7:09:c0:44:c1:8c:
b9:8b:c9:de:61:86:0e:b1:6b:60:4a:f9:94:0d:81:75:f4:62:
bf:b4:70:30:15:cd:54:83:55:5f:bc:6b:3f:3d:7a:68:11:a0:
4e:9d:b1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:51 2026 by rpki-client