Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.mft
File: PT7Ypi7oWbzmjUAWMZ4IKiBIRac.mft (raw, json)
Hash identifier: tf/L/PO4r7dK98wzJd8Q8Tuq2CoUzvqdBtIJBMT05fk=
Subject key identifier: 19:4B:16:57:90:94:78:D2:95:AE:37:E7:35:1D:9B:7C:71:70:13:FB
Authority key identifier: 3D:3E:D8:A6:2E:E8:59:BC:E6:8D:40:16:31:9E:08:2A:20:48:45:A7
Certificate issuer: /CN=3d3ed8a62ee859bce68d4016319e082a204845a7
Certificate serial: 019D28F28291EC3FF17552ADF00B22E1F3C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.mft
Manifest number: 0350
Signing time: Thu 26 Mar 2026 07:01:14 +0000
Manifest this update: Thu 26 Mar 2026 07:01:14 +0000
Manifest next update: Fri 27 Mar 2026 07:01:14 +0000
Files and hashes: 1: PT7Ypi7oWbzmjUAWMZ4IKiBIRac.crl (hash: cr2SPi5+3vz0Myc0MDTU0GnavvPHZszCtrKl0pIhyyM=)
2: X_SK-cz3TKw7b7-is_Q-Ji4uRec.roa (hash: Xdw2xwjPivVwaHJjO+HBoTF0UNKMpoYwZBd/kG4I8fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.mft
rsync://rpki.ripe.net/repository/DEFAULT/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:82:91:ec:3f:f1:75:52:ad:f0:0b:22:e1:f3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d3ed8a62ee859bce68d4016319e082a204845a7
Validity
Not Before: Mar 26 07:01:14 2026 GMT
Not After : Mar 27 07:01:14 2026 GMT
Subject: CN=194b1657909478d295ae37e7351d9b7c717013fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a0:63:0f:d5:42:13:88:83:09:07:ed:2c:ab:
99:0c:dc:9a:df:2a:b4:9e:c9:e9:a0:bb:d8:ed:f8:
98:14:70:4c:00:5b:0a:ae:99:e3:e2:55:83:92:a5:
84:87:1b:fd:3d:5f:4e:04:7e:16:1d:2a:2d:07:96:
6e:1f:08:57:e7:8b:dd:dd:27:46:3c:d8:11:de:57:
97:ce:3b:47:dd:69:04:a5:8e:e8:1a:96:7a:62:9d:
0a:a0:f6:c1:27:2d:63:8e:07:c5:6d:c8:93:6c:92:
af:d4:e5:d6:e9:b2:85:5c:c4:8b:06:11:44:64:ba:
12:8f:c3:8e:a6:52:68:d2:db:14:27:b4:4b:aa:9c:
43:a8:15:b1:8a:44:0c:b3:24:ba:f7:11:78:c7:07:
7b:53:79:c0:c1:ca:07:5c:fd:75:d8:17:a5:f7:3c:
1f:25:1f:eb:bd:8b:be:38:10:59:19:d6:ee:08:f3:
8f:01:c3:3b:a4:69:57:10:eb:b0:5c:84:6c:3e:c2:
26:59:66:0c:2b:6a:bf:1e:30:a0:41:36:a1:0d:ca:
6a:16:d5:41:81:e4:64:65:f7:3c:3d:ac:d1:2b:1b:
7d:e4:0a:da:47:d2:2f:00:66:50:b8:5d:ab:b7:20:
0f:fb:8e:eb:c3:80:ce:c3:08:ff:ba:db:a8:4c:fa:
99:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4B:16:57:90:94:78:D2:95:AE:37:E7:35:1D:9B:7C:71:70:13:FB
X509v3 Authority Key Identifier:
keyid:3D:3E:D8:A6:2E:E8:59:BC:E6:8D:40:16:31:9E:08:2A:20:48:45:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b7:67:aa:f7:0c:02:22:11:bd:3c:62:de:a4:48:98:0c:ba:
3c:6e:a5:a1:8a:bc:bd:34:f7:9c:90:56:6e:88:e3:65:ee:b9:
6f:18:7e:d6:37:9a:82:76:8e:27:f6:48:11:ab:88:2a:d4:6c:
cb:43:b1:53:bb:17:51:f9:a8:de:32:9d:58:10:56:11:ab:6c:
b4:d3:4e:c8:c5:85:ec:fd:26:58:da:dc:19:e4:fa:6d:70:79:
ae:6d:d8:4c:7c:93:91:be:b4:2c:90:4d:30:c4:0b:ab:06:bf:
02:af:b0:7c:30:47:fa:29:37:20:cf:e1:97:48:96:1e:cc:e6:
bb:5c:b6:db:c4:02:02:cb:7e:b6:34:fa:ed:73:05:f6:fa:11:
44:fb:d7:91:7f:32:db:04:80:85:ef:ad:66:84:44:88:ad:d9:
e5:a6:39:74:9d:66:30:95:36:b8:a5:35:05:b4:20:6d:10:9b:
fd:8f:ec:68:d6:63:99:f1:1e:90:ea:23:c5:f2:a1:39:69:5d:
cf:4f:46:71:66:a7:06:74:f7:d6:25:13:d3:e2:be:ea:66:c3:
c5:e4:80:a9:ab:f2:0b:93:56:17:2d:3d:fe:8e:34:b5:7c:95:
53:a7:56:40:74:6d:91:5a:13:a5:4c:ea:2a:68:77:7e:5c:b8:
d0:24:af:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:07:37 2026 by rpki-client