Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
File: PT-Hu394dKp-Fc_sm79qrjyc4zo.mft (raw, json)
Hash identifier: C/+oBsiYjzPBYnxJSN0NM3SkbqJ6nPgYpq/GgtIIRVI=
Subject key identifier: 0D:49:86:8D:46:8A:7D:42:8E:94:15:A5:A2:A3:C7:AD:F6:4C:93:94
Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
Certificate issuer: /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Certificate serial: 019D2B171905B7F863A981A01CCFD481C3D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
Manifest number: 120A
Signing time: Thu 26 Mar 2026 17:00:27 +0000
Manifest this update: Thu 26 Mar 2026 17:00:27 +0000
Manifest next update: Fri 27 Mar 2026 17:00:27 +0000
Files and hashes: 1: 03e_nKrMH4A4-r2jcWSKOro4hEs.roa (hash: DxycIoEklj35A1jvEiLRJ53FKAfEe2yJnQzuZq37gCQ=)
2: 5c-yJTh5qV_umaLR8gDO8QwCy9Y.roa (hash: jonWwn1zIDBZ/vrTcGpWTsw/eo5gVMGyObXA0g7CkyA=)
3: D4w1402cKEkHHCPC0Qrp-ROm6yo.roa (hash: EMcXFEgTqCUtUEK47llV6gmt5p0zphRz9x+4xZgTdwU=)
4: PT-Hu394dKp-Fc_sm79qrjyc4zo.crl (hash: Af3zqRG/eK4rZtI3zqxQ2ddmFtFyHlGmqbQVt7QIRrw=)
5: VkvT6baU95xG8FSlVbrDxq01-m0.roa (hash: wuSqKSYOAMUCrbWLjcaG0f0YLG5d5+8uKukQepwPM10=)
6: Zy9ArgNtGZeoSvcBNVhQm83CAtY.roa (hash: 2tInoyGIeDu4rQu0+WHE69OTAAXptyalAWcz50Rg2Q8=)
7: abaPwP2Q_8OSCHTWIlI0CKnEXZM.roa (hash: dryzgauXbdm4FHRf2Q1oRz+2w9ySHDpr4lqY5orU7Z0=)
8: l0yUF1IRmtUQWgAm0m-qwhJJad8.roa (hash: zejsAU9sJFQnGEhJNTn/fy3BN2ZirT1vXiw3WbJzNvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:19:05:b7:f8:63:a9:81:a0:1c:cf:d4:81:c3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Validity
Not Before: Mar 26 17:00:27 2026 GMT
Not After : Mar 27 17:00:27 2026 GMT
Subject: CN=0d49868d468a7d428e9415a5a2a3c7adf64c9394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2d:d5:74:43:98:4c:e9:f8:4a:7b:55:09:0a:
ce:f4:05:13:e7:1b:bf:36:4f:36:a1:4b:cc:c6:d4:
92:2a:e1:f1:32:bd:d2:05:1d:0d:7f:42:20:2d:e2:
fb:c8:91:e7:7e:7f:d2:7a:7f:0a:9c:00:04:84:65:
ec:bd:ba:8f:67:f0:6e:28:cd:ab:d2:5e:00:f5:f7:
74:8b:3b:ab:61:d4:77:2b:50:aa:74:7c:21:25:09:
8c:a3:12:77:85:93:ee:da:e5:f8:89:a0:bc:26:06:
4f:fa:db:9d:f3:f8:b2:f0:c9:35:97:99:6e:4d:26:
85:d6:62:36:4b:77:94:b7:47:76:11:e5:3e:b9:51:
f3:a8:f9:32:06:ce:ed:56:aa:cc:e4:60:fa:b2:0f:
1d:9f:70:0f:2d:99:ac:6b:7f:82:78:b4:bb:ed:9d:
4b:a0:ea:9f:2d:6e:ed:cf:f9:db:02:a5:97:71:28:
7a:d7:66:8f:6c:9d:40:be:34:14:f7:f7:57:e8:3c:
84:e0:2a:b8:47:8e:fa:74:10:d5:2b:bd:23:4a:15:
03:4b:9e:69:49:98:b2:05:c0:1d:85:a6:59:11:51:
e0:26:9f:69:48:e3:4b:29:76:83:d6:bf:d3:60:a6:
69:9e:88:52:7b:02:ac:b7:e9:e4:44:3f:60:40:b4:
88:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:49:86:8D:46:8A:7D:42:8E:94:15:A5:A2:A3:C7:AD:F6:4C:93:94
X509v3 Authority Key Identifier:
keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:10:6b:e4:d8:63:34:14:9f:f8:2d:e6:66:15:29:14:6b:6a:
ab:71:89:99:98:9e:94:fb:31:49:7a:0b:66:e5:05:f7:45:81:
93:ca:90:61:00:75:89:85:99:75:b6:ea:77:ad:35:68:b0:1e:
a3:76:f7:47:15:6e:d7:31:c3:04:e1:b7:25:7c:28:4a:14:e8:
a4:e1:70:5e:52:55:65:da:32:e7:e2:c8:c2:0c:1b:43:6d:73:
64:54:e6:f5:4e:4d:c9:18:1b:92:2c:ba:ca:9d:ff:7f:d8:c8:
2e:4e:18:e5:e6:43:a7:11:ab:3c:cb:1f:c6:8c:d5:69:13:8f:
f0:af:62:a3:df:38:ac:4c:4d:f1:4c:58:11:ea:5e:86:79:9d:
91:a1:7c:57:e4:5f:ba:d4:42:3d:a7:2c:b2:93:d2:37:fa:91:
23:c5:1f:61:cb:41:41:37:81:7d:fb:78:1e:62:84:01:71:7c:
86:c6:f8:a2:0f:c1:9c:a8:74:18:34:78:e6:1c:a0:e2:a9:aa:
14:ef:0f:11:3c:0e:b2:05:39:72:fc:ca:fc:0d:68:ab:8c:41:
33:da:95:40:d3:5e:1c:b4:a4:f1:96:3a:19:3f:29:ad:d5:76:
0d:a6:c2:42:1c:20:e6:98:85:a4:49:5b:eb:a2:72:c8:f2:7a:
60:c4:6a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:54:35 2026 by rpki-client