Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
File: P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft (raw, json)
Hash identifier: bNt0BYJ4cXMmxUC8e6kAtBl84egFAgZvTiC3+fyNJ30=
Subject key identifier: 17:90:75:0D:E8:9A:CE:E3:EB:39:F8:06:2D:2C:85:22:57:BE:DB:71
Authority key identifier: 3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4
Certificate issuer: /CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
Certificate serial: 019E1E6C7C014EFB4FB941CBF17780078B21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
Manifest number: 0931
Signing time: Tue 12 May 2026 23:01:26 +0000
Manifest this update: Tue 12 May 2026 23:01:26 +0000
Manifest next update: Wed 13 May 2026 23:01:26 +0000
Files and hashes: 1: P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl (hash: BJaZ2WULDsoReiYmUPM9qMS2Vr2kjzwriZKNEkAcOVs=)
2: chpnAXFJwcK5gPySDUqDwv2KJTQ.roa (hash: d6pR8bXGH3hR06eFSNsTttirZQu9Egnz7/1ylze2N3g=)
3: w1VM5LXh7FEfVyRRuosBCx58msI.roa (hash: 80uaSD8iAl9E3bi1bc+SHSLnshKOTiNv4svzxGeVOX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:7c:01:4e:fb:4f:b9:41:cb:f1:77:80:07:8b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
Validity
Not Before: May 12 23:01:26 2026 GMT
Not After : May 13 23:01:26 2026 GMT
Subject: CN=1790750de89acee3eb39f8062d2c852257bedb71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b8:da:5a:84:28:00:f9:4a:c5:ee:5d:a7:85:
2b:03:2a:36:bc:83:39:32:c2:a3:53:2d:d7:dc:06:
59:c4:c9:b7:64:a8:21:b9:49:a7:0c:4b:94:1c:ea:
ce:0b:b3:e1:63:9a:09:33:56:78:67:8f:51:1e:d1:
cf:26:d6:0f:29:98:f3:8b:3e:3b:cb:88:68:3c:d3:
bb:8b:51:49:97:84:26:05:ff:72:0c:d4:1c:06:ac:
b6:52:8d:8d:1a:f0:a8:c0:ea:6c:2c:d4:54:98:52:
21:51:46:ae:b0:a4:cb:04:d3:a9:85:cf:71:58:61:
78:89:e9:42:3c:8e:de:91:81:d4:ac:9e:c0:77:24:
1f:f1:67:8b:4d:8c:1d:d3:61:ce:7c:e2:79:6d:31:
24:de:e2:d0:7e:a5:3b:b8:59:70:f4:a1:2c:80:0c:
73:b3:6b:ff:48:34:d0:05:fe:49:42:fa:88:43:8e:
c7:6c:e0:7e:7e:b4:a0:97:af:0a:ed:a0:ea:f9:af:
9f:2d:9b:de:18:fc:8d:4d:7a:f2:1a:8f:d8:ad:8c:
fa:84:09:54:97:58:01:0c:05:9c:fb:6c:37:84:cb:
45:6d:fa:7a:70:48:19:fc:93:cc:00:9d:e7:60:9e:
d6:bc:72:92:f4:d4:3f:01:ac:9e:55:3b:6c:ef:90:
50:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:90:75:0D:E8:9A:CE:E3:EB:39:F8:06:2D:2C:85:22:57:BE:DB:71
X509v3 Authority Key Identifier:
keyid:3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:1e:96:9b:cc:db:da:4c:4c:2c:09:e9:76:82:70:8f:2a:8f:
6a:2e:35:c5:bc:4e:db:56:f4:cf:28:f3:aa:50:d8:6c:7d:82:
51:52:44:07:1e:25:e2:4f:cd:59:94:4a:56:8d:a3:04:7c:79:
76:71:71:3a:17:ac:fc:34:c4:1d:cb:2c:fb:37:2c:d9:09:45:
88:97:4d:14:b9:9a:7e:fa:97:6a:55:db:d7:0e:e4:f1:fa:f8:
8c:3b:56:31:a7:90:39:45:be:e8:fe:86:17:eb:8b:bd:f8:15:
bd:3b:1a:42:d5:cf:59:0b:1f:d0:ab:6c:74:13:e1:b3:06:05:
a7:02:cd:c5:14:8f:7c:08:d2:a5:33:f1:59:4a:90:a8:f2:e4:
95:0f:7b:53:53:f6:13:82:cb:e9:79:f2:bf:e4:80:0e:50:49:
97:c7:1f:8f:04:2a:88:67:08:53:21:55:ca:d3:a5:96:01:df:
f1:34:7f:52:3f:f0:f2:f7:47:80:83:a5:ce:bc:c5:f6:ae:0c:
36:38:bc:3f:c3:c9:8c:a2:40:52:cf:b5:70:a8:a2:6a:b3:42:
8d:aa:51:65:52:4d:67:c3:f3:98:ff:50:1b:4a:a0:75:0c:94:
8a:da:57:44:bf:a2:66:75:24:c3:1c:7b:65:53:8c:e3:d9:05:
5e:ca:ac:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:22:11 2026 by rpki-client