Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
File: P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft (raw, json)
Hash identifier: 6gh0cGOI59/po7Smvg6sZuoSxW2xnz2s4ni7BbUflXY=
Subject key identifier: 0C:D1:10:4B:11:FC:58:28:84:BF:CC:63:FC:8A:7E:9F:4A:6B:30:42
Authority key identifier: 3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4
Certificate issuer: /CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
Certificate serial: 019D273B1D68FE7FD07F50E2AFD08E71F443
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
Manifest number: 08B1
Signing time: Wed 25 Mar 2026 23:01:18 +0000
Manifest this update: Wed 25 Mar 2026 23:01:18 +0000
Manifest next update: Thu 26 Mar 2026 23:01:18 +0000
Files and hashes: 1: P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl (hash: cuGso38uSMCnkzRfie02MzYOIut+j9bowRS6EMExNls=)
2: chpnAXFJwcK5gPySDUqDwv2KJTQ.roa (hash: d6pR8bXGH3hR06eFSNsTttirZQu9Egnz7/1ylze2N3g=)
3: w1VM5LXh7FEfVyRRuosBCx58msI.roa (hash: 80uaSD8iAl9E3bi1bc+SHSLnshKOTiNv4svzxGeVOX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:1d:68:fe:7f:d0:7f:50:e2:af:d0:8e:71:f4:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
Validity
Not Before: Mar 25 23:01:18 2026 GMT
Not After : Mar 26 23:01:18 2026 GMT
Subject: CN=0cd1104b11fc582884bfcc63fc8a7e9f4a6b3042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:53:5b:21:4b:ef:9b:45:6f:dd:f5:90:4f:de:
72:fe:37:b7:50:47:db:42:a3:3f:f0:5a:ca:f7:af:
36:58:3a:f0:18:c0:1d:55:c7:04:01:45:9d:d6:84:
c0:83:c5:16:6e:03:8a:87:b6:7b:42:e4:ea:f0:91:
26:1f:ad:84:74:0e:1a:06:68:a1:69:5f:d2:0c:d0:
95:8c:c6:da:b0:c8:7a:8f:77:64:83:00:19:10:95:
66:15:fa:5e:5f:06:ed:0d:f9:1a:59:67:47:48:12:
7c:c7:e4:d2:23:b8:c0:df:0c:17:ea:d0:5a:2a:1b:
5d:50:ee:af:f6:c5:21:55:56:6e:75:67:33:ef:69:
4e:4e:09:43:d2:7e:e0:52:a3:8a:86:12:7a:1d:d1:
09:a9:1a:69:6e:18:f1:47:89:4f:17:ce:17:0a:98:
cc:db:f7:20:43:6b:0d:97:42:f3:9b:8f:60:66:6a:
c0:81:0b:8a:b5:a5:4e:66:d0:08:9e:a4:e3:05:07:
75:e9:fc:1c:5a:78:77:04:31:c2:f8:dd:0c:18:53:
13:39:7c:4f:bb:45:82:ad:a1:e6:7d:24:e1:26:97:
91:a2:12:fa:14:31:82:e4:bf:5d:32:e5:b7:48:12:
52:6b:c0:c3:a4:92:5a:b4:dc:95:66:b2:5d:bc:d0:
7d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D1:10:4B:11:FC:58:28:84:BF:CC:63:FC:8A:7E:9F:4A:6B:30:42
X509v3 Authority Key Identifier:
keyid:3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a8:f6:61:8d:7d:2e:2f:4e:e6:98:57:35:cf:b8:b8:9b:3a:
5a:19:3c:c3:55:09:bf:28:61:08:bf:ef:c6:0a:58:26:79:9e:
79:28:a7:81:30:bb:b8:bc:3d:66:0b:a7:94:fa:c4:df:8c:9b:
23:06:73:be:89:b2:ca:95:76:b7:d3:62:86:ac:f9:6d:b6:88:
38:03:72:e2:2d:8b:17:e9:63:8d:95:3b:4e:ca:05:de:74:cc:
34:74:9a:92:b6:26:60:c0:88:08:47:9f:bd:f6:e6:4b:f7:63:
b2:6e:5f:38:16:e3:ad:72:93:1f:55:87:3c:10:8f:b5:1d:19:
d5:6a:d1:2d:62:e6:c7:7c:e8:ad:3c:7a:82:f7:21:08:81:66:
88:97:69:5d:d3:74:fd:4a:8b:1f:70:99:57:a7:9d:ad:e4:a4:
95:93:04:45:72:02:5d:50:6f:5a:6f:9f:34:0f:b1:1c:83:71:
3d:58:f4:15:0a:a3:16:a7:cd:25:2d:84:ea:e5:58:52:1f:a5:
de:63:44:62:ad:04:22:2c:ee:57:dc:89:ad:e2:d7:f7:55:73:
09:ed:86:c7:f5:7a:18:60:55:a2:09:13:3c:e8:73:f6:9c:d2:
e2:4a:c6:e6:04:73:96:b7:4d:4d:e6:e7:6f:61:30:3a:c2:4b:
14:20:7e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:46:38 2026 by rpki-client