Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
File: P3cnpBMI2bn25j3xsg6LnNgjgSA.mft (raw, json)
Hash identifier: DLbU4BphRMnPJB24xpmRLcBPqhp1XG9CFC2/GB4Qbwg=
Subject key identifier: 2A:48:E2:83:22:51:2B:42:FB:F8:91:12:8D:A1:BA:0C:81:68:A2:2E
Authority key identifier: 3F:77:27:A4:13:08:D9:B9:F6:E6:3D:F1:B2:0E:8B:9C:D8:23:81:20
Certificate issuer: /CN=3f7727a41308d9b9f6e63df1b20e8b9cd8238120
Certificate serial: 019D38D37626F7DA37038BB41D4071A1EBA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
Manifest number: 0986
Signing time: Sun 29 Mar 2026 09:01:15 +0000
Manifest this update: Sun 29 Mar 2026 09:01:15 +0000
Manifest next update: Mon 30 Mar 2026 09:01:15 +0000
Files and hashes: 1: P3cnpBMI2bn25j3xsg6LnNgjgSA.crl (hash: 7pEV1l7hSodsiQtqyS1HI0VWtzSkYr8z+tG9ZpLF+k4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:76:26:f7:da:37:03:8b:b4:1d:40:71:a1:eb:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f7727a41308d9b9f6e63df1b20e8b9cd8238120
Validity
Not Before: Mar 29 09:01:15 2026 GMT
Not After : Mar 30 09:01:15 2026 GMT
Subject: CN=2a48e28322512b42fbf891128da1ba0c8168a22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:30:d5:8e:9f:40:ae:bc:2b:f6:85:94:99:42:
31:bc:4e:8b:3e:0f:bf:57:29:90:58:70:76:84:fd:
e3:d5:14:3b:85:7a:33:bb:6d:01:d7:67:bc:d8:94:
7d:4b:1c:4e:e6:48:80:40:b8:9f:a6:18:22:a8:bd:
8c:da:10:28:28:36:1a:94:01:51:47:39:56:1c:a1:
5a:ec:1c:af:1e:68:1d:92:a9:af:09:7a:7b:77:d7:
4e:20:46:76:3e:05:2e:aa:d3:97:bd:3c:eb:7f:15:
57:50:d6:c2:ca:52:83:f9:1c:61:8e:32:1b:c3:93:
e8:e3:a3:77:5d:93:e8:6f:fd:6e:c1:34:4d:b5:f0:
e8:2a:e2:35:01:89:b4:df:f4:bb:c7:20:f7:5a:1d:
ef:15:9c:54:31:30:bd:2e:61:56:03:7c:a4:c5:7b:
83:9a:7b:15:d3:fa:d1:d5:9a:58:5b:d9:1d:6b:7c:
09:ad:62:bf:0a:9c:31:3c:9c:0e:f8:6e:1d:8f:fa:
b0:8c:a1:ae:b3:e1:30:b1:6c:f0:19:30:21:24:a3:
22:0a:c7:36:21:8c:24:76:c1:97:72:43:36:dd:29:
6d:b8:0b:f4:e7:3a:c9:fc:2f:e1:40:a4:7b:8c:9c:
99:51:3a:ea:48:81:39:58:79:60:c6:d3:cd:67:a3:
01:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:48:E2:83:22:51:2B:42:FB:F8:91:12:8D:A1:BA:0C:81:68:A2:2E
X509v3 Authority Key Identifier:
keyid:3F:77:27:A4:13:08:D9:B9:F6:E6:3D:F1:B2:0E:8B:9C:D8:23:81:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:94:94:0b:95:8b:31:00:e5:07:95:9e:71:e7:33:a3:3a:90:
e4:8d:95:e8:d0:21:fb:2c:fc:20:82:c7:76:f3:e3:e3:1e:3e:
10:08:fe:e2:d6:43:73:71:cb:1b:6c:84:05:7d:14:57:79:48:
ab:10:31:05:5e:cc:a0:b0:92:c8:d6:80:63:75:e3:5b:7f:38:
c6:f9:09:63:92:a2:24:4d:8b:de:a8:b6:9e:bd:4e:e6:49:ac:
38:e8:a3:21:e5:fb:3b:5a:5f:f3:45:87:b5:c2:77:73:ba:5e:
29:91:16:59:a9:a8:11:aa:29:0c:92:be:1a:e5:74:3e:13:07:
69:3b:29:71:d6:db:57:78:96:50:86:71:2a:6d:cb:81:c5:71:
42:a7:36:96:39:b1:9a:da:80:80:b9:b5:37:32:8c:bb:c4:46:
13:3d:f4:ac:f8:3a:a6:fc:23:7a:b7:4d:52:0b:39:14:85:b0:
d7:1f:33:8e:40:a8:27:8e:74:f7:87:81:df:21:74:44:57:c5:
9d:20:33:98:c4:40:9a:60:f5:22:40:e4:7e:4a:a0:b6:1f:43:
94:3a:75:93:cf:19:87:f9:c8:00:cf:a4:61:32:8f:1d:8f:35:
97:72:0f:2b:6f:52:37:c3:4b:58:3b:55:db:65:15:f6:5e:4f:
0a:9a:59:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:43 2026 by rpki-client