Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
File: P5YkCZj85BJMPLTfusuw7RYYQFo.mft (raw, json)
Hash identifier: jZBzOOUVKuFpMelj9c4bv2tGiLvH5TY+NnhrHqvfvQM=
Subject key identifier: C8:23:F1:03:9D:D0:C0:DE:4E:65:E9:34:4F:E8:64:4B:35:56:39:55
Authority key identifier: 3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
Certificate issuer: /CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
Certificate serial: 019D3A1CA8D89B571FE7EABD441EFCB8D0CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 15:00:49 +0000
Manifest this update: Sun 29 Mar 2026 15:00:49 +0000
Manifest next update: Mon 30 Mar 2026 15:00:49 +0000
Files and hashes: 1: 8ncEIlz1-5zSR1QhL0rDdEkpqI4.roa (hash: nuQfSOfvY6zkx/iP7wr0MpQfCSukhDWy8/9CULyV7C4=)
2: IvA9B2nFsUB8N2tSxI1Z1owm5SY.asa (hash: Luu+iEJI9TF5mINkPbC0AuUUy8TwF281MV1BlQU5AFk=)
3: MhAe01ZmLmGIo1FB00FAZblkwBo.asa (hash: aUcLI++76yd3mnnAy6xNFCz8PJWqoY+FNcByDh9aH0o=)
4: P5YkCZj85BJMPLTfusuw7RYYQFo.crl (hash: aNNtIrryFBRnhblJVEUbjhLjB/M5p+Eb0rceHuClVgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:a8:d8:9b:57:1f:e7:ea:bd:44:1e:fc:b8:d0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
Validity
Not Before: Mar 29 15:00:49 2026 GMT
Not After : Mar 30 15:00:49 2026 GMT
Subject: CN=c823f1039dd0c0de4e65e9344fe8644b35563955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:bb:cb:60:5c:dd:8d:8d:fb:9c:e3:17:5a:83:
a2:14:2c:80:83:1c:1a:a4:d0:2e:3b:76:dc:1b:1f:
05:65:a3:8b:f4:ef:cc:43:e6:e8:98:52:45:ab:20:
69:27:65:09:17:1a:14:2a:1d:bc:ba:15:6e:8d:32:
e9:c1:c1:d2:80:28:b5:fe:66:df:15:d2:ca:9d:66:
bb:0e:1b:6f:e9:c1:a9:b7:9c:a5:dd:7b:39:32:60:
24:32:da:dc:e6:3d:75:ca:87:ec:3b:30:0d:36:69:
76:54:b1:d9:68:9f:77:e3:6b:72:5e:04:54:b8:91:
2a:b5:e2:d9:5f:08:ad:ce:0f:43:9f:92:67:7c:68:
e3:d1:2d:3c:d8:dc:99:32:eb:15:cd:84:c2:a3:9a:
93:00:6f:2f:6d:4d:75:39:ff:a3:78:c1:4a:d2:22:
25:a9:54:3c:20:55:e3:47:fc:31:fd:47:ee:85:8f:
dc:dd:9a:b5:3b:78:46:e6:0b:5d:fc:32:72:68:5a:
02:ed:60:33:74:c9:a4:3e:e8:4b:1a:eb:83:11:34:
28:16:5c:ce:5e:75:72:64:13:c6:a6:d7:d0:a9:80:
c9:c2:42:d7:e6:d5:97:1d:df:79:c9:57:8e:f7:ad:
f0:44:c6:ed:6e:62:32:13:32:08:98:dc:ab:57:c6:
df:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:23:F1:03:9D:D0:C0:DE:4E:65:E9:34:4F:E8:64:4B:35:56:39:55
X509v3 Authority Key Identifier:
keyid:3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f7:cb:70:2b:2d:c3:48:fd:4a:22:08:ff:06:32:06:d1:42:
1c:22:c6:2c:e1:a3:56:dc:fa:05:ee:72:16:91:98:59:53:a5:
16:7d:1c:0d:b1:31:9b:6a:d8:f9:56:db:7c:3e:32:fe:d9:89:
f5:b4:6d:31:de:f3:5d:bf:40:4b:8a:a2:61:b2:df:48:bd:ef:
fb:20:9e:3b:a8:5e:0e:4b:be:60:24:e4:6f:4f:50:7c:a0:e9:
84:c6:80:16:f9:94:74:5a:c3:25:58:f8:17:6c:81:2e:40:a9:
2a:01:7c:22:e6:dc:32:8f:6c:b9:bf:6e:f4:6b:dd:95:06:16:
34:04:c3:a2:f1:4a:7d:9a:86:30:b3:09:7b:af:23:fb:20:66:
29:cf:4d:13:06:b3:ee:f6:f2:22:9f:90:c1:98:ba:07:b1:9f:
7b:8e:2f:58:46:7e:90:2a:7f:41:83:8b:84:1b:ef:41:de:54:
59:76:50:0d:a4:d4:40:2c:5f:bc:7b:57:b6:94:f9:9b:f0:b9:
dc:a8:89:0e:87:fd:58:ed:99:70:c3:f1:44:b0:42:8f:a9:35:
e1:70:bc:5d:4e:c2:06:b4:79:7f:1d:b0:35:ca:fa:0f:9b:6f:
8f:5f:e2:b8:68:39:fd:aa:40:5f:82:06:b7:78:59:eb:0d:c8:
e0:56:eb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:25:46 2026 by rpki-client