Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft
File: P2U3Wk029crhof4kWKOAUmz-22o.mft (raw, json)
Hash identifier: 8jrI6ANctl2sVzePria/wkZRQTnFArPhc3oMpO7Rzug=
Subject key identifier: BA:D4:B3:DC:76:B4:28:14:05:F3:80:F5:00:D9:C0:6D:7C:65:25:4D
Authority key identifier: 3F:65:37:5A:4D:36:F5:CA:E1:A1:FE:24:58:A3:80:52:6C:FE:DB:6A
Certificate issuer: /CN=3f65375a4d36f5cae1a1fe2458a380526cfedb6a
Certificate serial: 019F927F8FF3997B3E1D78979BB0DB28B43B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft
Manifest number: 0525
Signing time: Fri 24 Jul 2026 05:01:01 +0000
Manifest this update: Fri 24 Jul 2026 05:01:01 +0000
Manifest next update: Sat 25 Jul 2026 05:01:01 +0000
Files and hashes: 1: 8WGCMkLHivRZtBn2lCr7Peb5fB8.roa (hash: Lec00BWr1FDj5Se46w/SW9Oe5vFyDVib4D6WgGcoj3Q=)
2: P2U3Wk029crhof4kWKOAUmz-22o.crl (hash: KSJVmW1JtdvQ+09kex/GYLlUdf6OkPyZIqz0UGhe83k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft
rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:8f:f3:99:7b:3e:1d:78:97:9b:b0:db:28:b4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f65375a4d36f5cae1a1fe2458a380526cfedb6a
Validity
Not Before: Jul 24 05:01:01 2026 GMT
Not After : Jul 25 05:01:01 2026 GMT
Subject: CN=bad4b3dc76b4281405f380f500d9c06d7c65254d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:eb:61:4f:ef:b1:c5:ec:3f:d2:5c:1b:bd:26:
76:a3:c5:6a:2f:11:63:f4:50:e6:1d:25:6f:f1:86:
0c:b4:c0:23:60:34:fe:5f:62:09:31:b9:61:03:50:
c9:3c:ff:9c:20:fc:2d:fe:cb:33:7c:5b:e1:6e:2e:
98:74:83:b1:14:e4:21:ef:d3:3c:22:17:4f:1e:12:
e9:02:b2:40:06:3b:36:ce:dd:b8:b9:3a:6e:c5:2f:
0c:d5:6a:16:4e:df:58:af:2f:cc:10:d9:8f:6e:bb:
9d:01:b1:f4:9f:72:e9:63:1d:59:69:42:da:d1:ae:
af:37:13:4c:f8:2c:70:d9:7f:35:e7:be:60:bd:32:
ca:63:ba:96:f9:67:d9:6a:fa:be:9d:c7:41:52:1e:
92:55:7f:d5:68:88:a5:bd:f8:8f:38:e3:c7:34:d3:
43:36:61:4d:90:cd:ab:49:e5:de:9a:37:91:89:b5:
d7:22:b4:48:11:a9:76:54:ab:87:55:46:2c:4d:4a:
b2:77:9f:79:ab:06:c3:80:26:9b:fb:4a:de:66:c9:
6b:f6:ad:39:50:82:e8:f6:d1:a4:fa:a8:10:35:79:
f6:52:15:0b:ed:a6:b2:25:5c:88:9a:c3:3e:ca:35:
97:2a:4d:ae:45:5e:0b:af:b7:b9:7e:ed:fd:93:32:
37:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D4:B3:DC:76:B4:28:14:05:F3:80:F5:00:D9:C0:6D:7C:65:25:4D
X509v3 Authority Key Identifier:
keyid:3F:65:37:5A:4D:36:F5:CA:E1:A1:FE:24:58:A3:80:52:6C:FE:DB:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:bc:98:f9:0e:db:dd:c1:11:b0:51:29:69:84:6e:43:31:c6:
7c:19:3f:7c:ed:7c:0e:48:78:24:66:5d:5c:16:35:b6:4c:8e:
c2:bf:9e:88:b3:1f:a2:24:c5:5d:c2:46:e0:8b:d5:a6:9b:af:
d3:d9:b3:09:c5:a1:9c:f6:c6:cc:27:d5:cb:7c:0c:cc:c2:19:
ed:18:b6:1c:ff:63:25:42:cb:cb:54:36:d7:69:47:4d:34:93:
eb:66:ba:f6:23:32:05:57:73:8a:d2:a8:be:c2:c2:72:4c:5e:
59:3d:f1:5e:12:a3:92:ca:23:92:35:95:b6:65:4e:44:ed:f0:
31:d2:82:89:a5:29:6d:20:b4:d0:57:de:05:73:9c:14:3a:3b:
9d:08:59:38:1e:08:a3:b6:bf:5a:a3:7a:4e:17:16:eb:b1:17:
b1:7e:15:98:aa:b0:0f:1c:2a:90:3b:26:6d:51:99:14:39:aa:
84:00:c4:6e:48:b0:b4:2b:dc:6f:c4:dd:29:32:14:05:3e:ff:
b7:27:ad:a4:8a:1c:b9:a4:ee:28:b3:76:52:32:bc:a5:4f:9c:
13:e2:e8:65:f0:21:ba:c7:77:4f:0a:c7:c9:1d:d9:c1:5c:6f:
20:8e:4c:0a:1f:b1:a3:1f:81:a6:60:4b:e2:b3:8e:2f:a3:b0:
59:b5:3c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:57:21 2026 by rpki-client