Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
File: Pv3irXEjs6hgCAWIBbsQFva3P7A.mft (raw, json)
Hash identifier: DgLV7NG+pwe9vfKeXBeksR88t7bQ8KPqo29KZEtFCeQ=
Subject key identifier: 0B:71:55:90:40:1B:C9:B9:1B:BA:B7:4D:3A:BD:97:80:60:10:54:62
Authority key identifier: 3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0
Certificate issuer: /CN=3efde2ad7123b3a86008058805bb1016f6b73fb0
Certificate serial: 019D284E4A8F82338599830719AAAD7CD293
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
Manifest number: 1411
Signing time: Thu 26 Mar 2026 04:01:52 +0000
Manifest this update: Thu 26 Mar 2026 04:01:52 +0000
Manifest next update: Fri 27 Mar 2026 04:01:52 +0000
Files and hashes: 1: 7v2ZUdL5cbvsxZ3SJ5Ih0L5h5Cw.roa (hash: Fh4U2aM1V+vRKIdMaRS0oiOF0z5hb7HFVxTHs/Kfn8g=)
2: Pv3irXEjs6hgCAWIBbsQFva3P7A.crl (hash: z2zw1/v0SNhBx1E4w5xKbvbMue1le96M3aa3XRDLGB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:4a:8f:82:33:85:99:83:07:19:aa:ad:7c:d2:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efde2ad7123b3a86008058805bb1016f6b73fb0
Validity
Not Before: Mar 26 04:01:52 2026 GMT
Not After : Mar 27 04:01:52 2026 GMT
Subject: CN=0b715590401bc9b91bbab74d3abd978060105462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2d:38:7f:05:6b:2b:71:78:26:77:89:3b:d1:
e1:b6:32:ea:49:b2:6f:0f:9a:fc:c3:9f:dd:23:bc:
3b:b5:97:f4:a8:b6:d3:64:72:5b:7c:3c:1c:db:82:
0f:7e:6f:43:12:c2:61:1b:da:be:7b:97:48:72:37:
bc:f0:53:2f:f2:9d:1f:54:c9:a7:2d:e5:35:06:f9:
3b:2b:92:e6:9b:ef:94:80:f7:aa:4a:02:34:df:3c:
d4:55:17:00:62:5a:8d:49:49:22:1f:76:35:dc:22:
41:81:96:2b:9f:7f:b1:49:16:fe:a3:e3:2d:4c:8b:
5d:f8:23:ce:5c:ac:58:88:1c:4b:10:77:fc:cf:ef:
c5:26:6a:54:18:2c:be:14:4f:a2:d6:c0:25:74:6b:
a8:be:5c:88:74:8c:77:5e:05:3c:c5:94:80:fa:3c:
e1:cf:c8:74:18:01:9f:cf:e4:87:00:6a:80:71:2e:
c8:42:1e:60:f3:d6:fe:27:54:df:d0:64:bc:fe:13:
91:b1:19:fd:eb:a4:ec:cb:09:33:b3:64:67:27:1c:
5c:a2:3e:e1:17:24:e2:a2:28:b7:73:2b:a2:08:e5:
ab:4d:f6:ee:4a:de:76:71:19:ac:bc:25:e6:b6:a8:
5f:2c:bc:0c:7f:42:0a:37:fa:51:17:46:c5:5f:97:
e4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:71:55:90:40:1B:C9:B9:1B:BA:B7:4D:3A:BD:97:80:60:10:54:62
X509v3 Authority Key Identifier:
keyid:3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e4:32:f4:7f:3f:81:2b:92:fd:ae:b5:2f:1c:80:03:ab:42:
5f:b1:1f:e9:2e:af:ae:c7:75:65:d7:02:80:03:4d:20:6f:17:
3d:1a:cd:14:50:64:da:09:f0:5a:ae:63:26:4b:6c:b6:e7:50:
d9:b2:05:b7:37:43:2d:2f:a1:ef:8c:35:fd:ea:3a:c3:a3:a6:
76:f7:89:25:77:71:f5:dd:1e:11:c4:c1:6a:ff:d5:e6:6f:3f:
1b:20:2f:61:b3:22:fc:6a:dd:ee:57:5e:20:9d:02:c9:84:ff:
2d:70:1e:5b:65:b5:e8:e3:1c:04:76:e0:7c:38:0d:c8:20:0c:
e9:ce:e1:4a:ea:e8:9d:f6:39:57:df:0d:38:a2:26:56:38:75:
43:ee:e0:98:c2:e6:88:78:5b:2b:48:01:95:5e:67:54:a4:aa:
cd:76:42:ac:d5:3e:04:4d:1a:d6:77:1d:15:de:bd:d2:34:e9:
2d:37:e8:49:05:5d:2f:e9:01:a0:7d:48:4a:9d:1b:4a:ab:e4:
f0:3d:54:aa:c2:19:ea:4b:ab:bc:90:b8:e9:09:28:72:e3:aa:
af:9b:c8:3f:84:43:56:ea:62:1c:06:a2:68:3e:1e:70:9f:1d:
49:a0:91:59:97:f6:57:9e:82:af:6d:e8:b0:7a:dd:30:36:5a:
c1:2c:d6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:42 2026 by rpki-client