Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
File: P_xBJyHAxuekxXZ66YxFId71FQE.mft (raw, json)
Hash identifier: tzDuuAaJiKTVw62HrkZdrXcnjeOuhCXvGlVWzB7EoAE=
Subject key identifier: 4E:B9:C1:4C:A3:C6:CB:7F:F5:F2:AB:6C:67:E0:AA:33:8C:6B:D9:F7
Authority key identifier: 3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01
Certificate issuer: /CN=3ffc412721c0c6e7a4c5767ae98c4521def51501
Certificate serial: 019D25F165D03368783D5088885A3791DA77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
Manifest number: 1792
Signing time: Wed 25 Mar 2026 17:01:10 +0000
Manifest this update: Wed 25 Mar 2026 17:01:10 +0000
Manifest next update: Thu 26 Mar 2026 17:01:10 +0000
Files and hashes: 1: P_xBJyHAxuekxXZ66YxFId71FQE.crl (hash: GdsDdq5ZzZWqgWxa+02mj+ar8khowDCM2KvzoJTItXs=)
2: cJRtdE3GDxRyvg_Y9Tx3wuWjZfM.roa (hash: MkPveRr894uZyzuwskwU/N/yd8dG5AWBq5BdDGSD2o4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:65:d0:33:68:78:3d:50:88:88:5a:37:91:da:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ffc412721c0c6e7a4c5767ae98c4521def51501
Validity
Not Before: Mar 25 17:01:10 2026 GMT
Not After : Mar 26 17:01:10 2026 GMT
Subject: CN=4eb9c14ca3c6cb7ff5f2ab6c67e0aa338c6bd9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5a:12:08:5c:c0:ea:e2:fb:1d:e8:4f:78:0b:
eb:3d:38:49:a9:0a:0a:fc:d6:e9:ef:03:72:ab:63:
ce:ed:d1:ad:40:90:59:bf:62:ab:0f:5d:c9:f7:23:
c5:f9:91:d8:8b:b7:a2:37:02:5c:50:f4:cd:cb:b9:
78:66:cc:30:d2:14:ef:62:3c:b0:a7:b7:64:a8:22:
dc:3f:3c:45:12:da:b2:32:7e:8a:c8:7d:2f:2f:ad:
95:8b:90:8b:b9:30:9b:e0:89:9b:fe:6b:c6:13:ec:
fa:32:4d:a9:29:fd:6d:2c:8b:f6:9d:31:39:2c:ac:
f4:b9:fb:92:80:44:d9:6f:ab:f9:15:3d:0c:2e:e3:
6e:04:41:d2:a5:36:54:41:1f:06:fc:54:c7:58:d8:
f8:fe:58:4e:cf:d5:d4:c3:d2:81:00:c6:c6:06:f6:
69:51:b8:3b:17:8a:f3:8e:b4:00:9b:da:5a:77:8a:
37:9e:a0:d7:a6:5d:b2:8a:6a:53:6e:20:a2:87:7e:
37:3a:cc:a7:e6:61:43:70:4f:bb:ec:17:dd:44:58:
0f:23:54:49:ea:f1:e5:7d:c0:78:7d:c8:43:4a:ec:
bb:e5:17:a1:cc:4a:e0:75:21:fe:35:b3:f6:91:d4:
56:02:b7:75:fe:09:f1:e0:df:5c:b2:a5:26:d9:f4:
82:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B9:C1:4C:A3:C6:CB:7F:F5:F2:AB:6C:67:E0:AA:33:8C:6B:D9:F7
X509v3 Authority Key Identifier:
keyid:3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:84:62:1f:8d:8f:66:84:8c:c1:64:ea:0d:b5:eb:71:d1:b1:
b1:c4:6c:c4:4c:ec:d9:ac:0b:18:b8:18:e3:91:33:5c:d2:0b:
a9:ed:2b:0d:8a:4c:84:0c:5d:1d:98:ab:8f:79:05:69:87:2b:
16:7d:d0:70:32:2e:8d:cf:98:15:be:18:37:b7:65:46:21:7b:
59:76:35:ca:f2:cc:31:df:a9:4e:21:74:ad:b2:43:d3:63:95:
99:bd:dd:af:03:e2:91:c9:3b:5e:ae:90:03:03:86:33:c6:7d:
e3:59:12:29:1f:42:f8:5e:45:c0:27:ba:cb:e2:0e:ab:76:7a:
b9:ec:63:8d:c3:20:f3:ce:7d:6e:74:e3:8f:c3:bb:2e:40:56:
1c:95:b1:85:a7:61:a5:1d:57:7a:ed:8b:9d:74:9c:6b:04:47:
18:41:dd:0a:4c:7e:20:14:c3:ba:59:be:12:94:19:94:23:21:
9d:4b:c6:18:35:f4:d5:ed:95:ae:a4:39:f3:63:5c:6c:30:77:
20:17:8c:18:5e:4e:80:06:e4:03:3e:2f:a3:26:01:ac:77:b0:
cf:77:ba:0a:29:c6:c9:ec:67:72:97:a0:38:44:c1:10:ac:4a:
07:93:82:a8:91:9e:6a:db:ac:12:ea:a2:54:92:9d:04:ce:a9:
1c:9c:b3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:35:09 2026 by rpki-client