
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
File: P1vEQBQoW28-KHKuz11PM-Jozos.mft (raw, json)
Hash identifier: Cl3zlMvXX9eTAQolN3N9tmioKxkCe2J0fIQrsptaUbI=
Subject key identifier: E4:5C:CF:02:2D:1E:47:DC:5B:8B:A7:49:CA:93:CA:13:19:CD:D7:46
Authority key identifier: 3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
Certificate issuer: /CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Certificate serial: 01A1046E3F46C72B6999E4AD9CFA4A52EBBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
Manifest number: 0B85
Signing time: Sun 04 Oct 2026 01:01:36 +0000
Manifest this update: Sun 04 Oct 2026 01:01:36 +0000
Manifest next update: Mon 05 Oct 2026 01:01:36 +0000
Files and hashes: 1: Mr6edMVNczrnTD4fPbHhkJ_t0BI.roa (hash: B3H6ipVEXV+RUc2+4VXrDuLYCDQcw876zTiowv2ss50=)
2: P1vEQBQoW28-KHKuz11PM-Jozos.crl (hash: CYqBiM+acFW0gS6ylwJLxyefoc/jl4s27r9W5daaV4o=)
3: UZU-y9KjwHBRwAFBMLEzFqF8gQE.roa (hash: 8IesYOSWF04JS1YDSdciYf6tHgm62U6HhGDalYAE7s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:6e:3f:46:c7:2b:69:99:e4:ad:9c:fa:4a:52:eb:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Validity
Not Before: Oct 4 01:01:36 2026 GMT
Not After : Oct 5 01:01:36 2026 GMT
Subject: CN=e45ccf022d1e47dc5b8ba749ca93ca1319cdd746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fe:f8:38:5a:f3:55:4c:97:9a:0c:b3:3e:ab:
75:c0:67:e1:14:b4:e0:63:7c:42:ef:18:f9:e0:a4:
0a:2d:55:cf:3a:bd:80:67:a1:9b:04:d6:dc:92:50:
53:9a:fd:c2:3d:b7:6d:ba:07:58:04:80:27:98:b9:
23:8e:f5:dc:d1:52:fd:a1:ab:df:82:4d:0d:9e:91:
9c:08:23:de:bd:c6:86:73:83:68:1c:f1:e1:69:d2:
13:9b:52:ef:3a:ab:0b:24:c6:3e:1c:4d:22:6f:a9:
6b:0a:08:7d:43:b1:0b:e5:3c:db:a9:7f:b8:8d:58:
0b:a7:8b:ac:41:ed:8c:96:c9:43:e7:58:16:44:56:
e2:06:20:fc:d7:1b:72:73:c6:5a:96:42:b2:67:ad:
8a:3f:9a:bd:1f:1a:53:ea:be:f7:97:dd:18:c0:ea:
16:a8:34:3b:af:20:b5:08:54:07:2c:ee:3a:e2:8f:
bb:e1:9e:bd:75:ec:a5:db:5a:55:3f:a2:c4:51:d4:
2c:f7:b4:b4:52:a3:8e:43:24:d8:a1:a2:35:c6:6d:
d4:0a:54:57:5c:33:dd:37:17:43:4b:e9:0e:17:48:
e9:49:a3:39:66:6f:e3:52:62:3b:d2:05:16:0b:65:
3a:d5:ed:29:cd:a1:d8:c2:d3:d3:ce:0e:cc:0b:79:
ce:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5C:CF:02:2D:1E:47:DC:5B:8B:A7:49:CA:93:CA:13:19:CD:D7:46
X509v3 Authority Key Identifier:
keyid:3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:9b:16:92:5a:36:55:4c:af:3f:86:c8:ea:bc:0c:45:a5:8f:
94:8b:7a:e3:d4:af:e5:b9:5e:d4:06:6c:8e:24:7f:b4:c1:2b:
9b:5d:32:2c:f5:11:83:ab:32:3b:24:b9:2f:01:c5:b7:8e:0f:
cf:27:ff:c1:e9:c3:8b:ee:8a:ca:b3:39:82:de:9e:f7:2a:90:
86:cf:bc:78:bd:0d:fc:f4:92:cd:75:f4:be:2b:de:69:e7:e7:
d3:9b:c9:f5:b0:12:27:fe:83:73:a2:4c:31:ba:39:a7:6f:a2:
2b:18:b9:f2:c8:1c:91:8e:6b:97:7e:75:a8:23:ac:da:2a:79:
85:10:82:86:9c:78:20:b6:60:c8:cd:a3:0f:92:26:06:71:1c:
03:56:59:ad:d0:99:da:42:aa:f6:98:a6:47:92:76:39:06:80:
89:b0:61:90:2f:6d:6c:62:93:92:07:5d:9e:70:39:96:fd:1a:
4a:eb:93:a0:25:53:cf:51:e0:75:a8:56:77:46:80:db:4c:53:
87:12:7f:2a:a9:7a:27:14:be:a5:b7:0f:bf:a9:53:0c:06:e2:
ea:04:79:88:c1:61:d5:f7:16:2c:a3:98:8a:d1:90:b0:12:2f:
ed:bf:4d:02:82:17:91:5f:29:0c:79:51:18:29:07:07:9e:20:
50:4a:d9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:21:28 2026 by rpki-client