Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
File: _pLvNTIb-Pcic0v_nfpj-9DwaQo.mft (raw, json)
Hash identifier: JNkYWmjtbSCwuZIeplSyRD3mzLUYXO/iHuscBNsldw4=
Subject key identifier: D7:80:42:CC:29:9B:30:FA:DA:6C:3F:E6:C4:2D:B0:71:21:63:DE:D3
Authority key identifier: FE:92:EF:35:32:1B:F8:F7:22:73:4B:FF:9D:FA:63:FB:D0:F0:69:0A
Certificate issuer: /CN=fe92ef35321bf8f722734bff9dfa63fbd0f0690a
Certificate serial: 019D273B01CFB6AF6105123520D0CEF59525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
Manifest number: 11F2
Signing time: Wed 25 Mar 2026 23:01:11 +0000
Manifest this update: Wed 25 Mar 2026 23:01:11 +0000
Manifest next update: Thu 26 Mar 2026 23:01:11 +0000
Files and hashes: 1: UBGkKBFV2Aa7JBw4pAiIxve4fn0.roa (hash: 9cBrWgFQDzVn82NDm23DCCjfy/yynDnSQwWNQi58HvU=)
2: _pLvNTIb-Pcic0v_nfpj-9DwaQo.crl (hash: JVB1DTZhkfvekes5bC2AeEsHK0f0ebx9kTsZ1sJ1br8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:01:cf:b6:af:61:05:12:35:20:d0:ce:f5:95:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe92ef35321bf8f722734bff9dfa63fbd0f0690a
Validity
Not Before: Mar 25 23:01:11 2026 GMT
Not After : Mar 26 23:01:11 2026 GMT
Subject: CN=d78042cc299b30fada6c3fe6c42db0712163ded3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8f:90:cf:4e:2e:d8:61:e2:99:b0:93:a6:01:
f2:41:d1:86:dc:2d:9b:fa:50:15:4e:ef:41:af:ca:
c5:61:32:a3:44:7b:29:70:2b:4b:69:b4:df:95:0e:
c7:d7:91:0e:ea:a6:0d:ad:88:6f:0b:fe:15:e3:f5:
fd:3a:4e:95:5e:da:f0:ef:ac:85:71:31:71:ba:c1:
3b:20:52:da:2c:d7:1f:1e:a6:b3:df:44:4b:cf:53:
1b:52:b4:07:80:4e:17:3f:14:57:d0:40:1a:29:40:
67:94:f6:0b:70:06:ad:26:33:69:ae:73:6d:09:7d:
1e:e0:8d:ff:72:90:5f:56:b7:0c:b4:0f:38:97:df:
62:60:d4:ae:09:97:7b:c9:37:5c:f0:79:06:a1:78:
4c:79:8d:cc:37:88:33:fb:4b:7a:ac:79:28:aa:12:
3b:d8:51:49:1e:7b:1f:f7:6c:05:d0:d2:bb:c8:3f:
68:52:e1:a6:8a:5b:b5:44:c6:10:79:b4:65:79:46:
90:c4:54:e5:ab:42:2d:33:3b:89:79:79:9c:02:4c:
55:f1:d8:df:db:56:c8:55:38:14:bd:03:d8:9d:5e:
62:4b:e3:97:02:cf:26:57:18:43:a0:8c:75:e3:98:
c2:fe:05:0e:66:02:a5:8c:32:f3:b2:a9:9a:51:47:
73:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:80:42:CC:29:9B:30:FA:DA:6C:3F:E6:C4:2D:B0:71:21:63:DE:D3
X509v3 Authority Key Identifier:
keyid:FE:92:EF:35:32:1B:F8:F7:22:73:4B:FF:9D:FA:63:FB:D0:F0:69:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:8c:08:3d:31:93:3b:e9:bf:fd:66:91:2f:8a:88:05:d5:a4:
fe:b6:1a:02:61:c2:f7:57:88:ef:3a:b7:d2:f8:c8:74:c2:54:
f1:4e:d2:a6:75:fc:ee:69:a6:7b:a8:19:3f:fd:e9:97:86:28:
1f:1f:bb:06:9f:8f:39:19:4f:f7:77:ab:a3:5f:96:6b:fc:1b:
69:47:29:65:a6:d4:d0:5a:4f:83:32:f4:88:c7:5b:4a:84:b7:
07:a6:37:f5:4f:fe:80:75:84:76:d2:5d:c8:52:66:34:de:ad:
85:ab:fd:7b:d7:58:c1:13:41:86:ab:3f:b2:89:19:f0:cb:b9:
2f:3e:e4:b8:77:85:d6:a1:6d:fa:f9:ab:5b:04:6e:b9:5a:99:
2f:7c:df:35:3a:fa:65:14:54:bc:da:e5:8d:ee:53:e2:be:f2:
a7:e2:8a:85:52:cb:29:07:04:83:9f:78:c6:70:23:b5:ca:45:
64:90:d0:7d:a8:1c:e4:97:95:d2:e9:16:ba:07:3e:63:03:e3:
4e:99:5a:f3:86:dc:7c:3e:50:b6:0a:cf:0a:5c:f4:ec:38:07:
da:5c:1a:b8:c5:41:7c:5e:c6:7b:bd:2e:4b:c7:38:ff:0a:0c:
96:75:7c:7b:dc:dd:2a:54:20:a6:67:7b:ee:f9:42:b2:c3:45:
74:62:f0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:18 2026 by rpki-client