Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
File: p4kEQNrxw6w4dz6FIVES90twYjI.mft (raw, json)
Hash identifier: XxgYzvPzOQ9uE7gGt72qOexaQiQ4NoGYXWhEQfcCpLc=
Subject key identifier: 05:93:6A:F3:FB:E2:CD:1C:5D:7E:98:53:36:B4:6F:E9:D6:09:80:37
Authority key identifier: A7:89:04:40:DA:F1:C3:AC:38:77:3E:85:21:51:12:F7:4B:70:62:32
Certificate issuer: /CN=a7890440daf1c3ac38773e85215112f74b706232
Certificate serial: 019D2A3B88F5B45BAD630C995B69F25C8FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
Manifest number: 3F
Signing time: Thu 26 Mar 2026 13:00:37 +0000
Manifest this update: Thu 26 Mar 2026 13:00:37 +0000
Manifest next update: Fri 27 Mar 2026 13:00:37 +0000
Files and hashes: 1: U3lhosWDCWkOpFdsH0InZo3L2So.roa (hash: cA9YSxfYf8puSlmrAh+xgnlh5hfoxYmLxjTNe6lxvv0=)
2: p4kEQNrxw6w4dz6FIVES90twYjI.crl (hash: ivpvDwRPqtP8RzEyUlS3U2viyILnze+Hl5bWIgulbUU=)
3: rbySto4bwasyCSyfLG3tTaOVj_s.roa (hash: wd1Ap/uduw/P7yoJlzMsKGRJqc4D/dsTIBcvCHP1qZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:88:f5:b4:5b:ad:63:0c:99:5b:69:f2:5c:8f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7890440daf1c3ac38773e85215112f74b706232
Validity
Not Before: Mar 26 13:00:37 2026 GMT
Not After : Mar 27 13:00:37 2026 GMT
Subject: CN=05936af3fbe2cd1c5d7e985336b46fe9d6098037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:56:04:4f:8f:04:5c:69:d5:f9:4d:7d:00:6c:
68:0d:44:31:aa:f6:6d:e2:45:63:fb:6c:2b:54:24:
6c:ca:aa:ac:46:bd:51:07:e7:ed:70:e9:86:07:49:
ed:b2:3e:37:53:29:90:8d:96:8d:e5:d5:1f:38:6b:
8a:f7:e8:1a:99:cc:c1:c4:cf:a2:9c:98:90:8e:be:
55:17:24:33:e5:6e:c1:1c:de:b8:06:e4:61:9c:84:
a1:25:41:97:b0:e0:2e:65:a1:70:23:a0:25:e9:ce:
35:4f:b5:84:85:e5:9e:e1:d6:2e:ba:49:d0:99:60:
1f:bf:99:d1:8a:b8:1e:80:dd:a7:e8:9e:41:a6:91:
d8:0c:9b:ef:6b:dd:db:4b:bd:ce:9b:81:7d:2b:42:
8d:07:70:bb:42:fd:2a:c9:25:dd:85:5a:de:ee:98:
81:25:d4:c4:a5:6b:5c:ab:90:e3:82:a8:10:aa:3e:
e6:98:97:2f:49:7a:02:51:3c:4d:fc:fa:98:05:4d:
37:5c:bb:00:54:77:ba:08:f7:2b:b2:54:f9:8d:fd:
c1:8f:53:ff:18:00:4b:dc:03:28:14:b3:e6:6f:8e:
80:2e:af:d6:25:57:83:f9:2e:0c:75:fe:2a:33:8f:
04:d6:95:fb:67:c1:ec:a4:6d:ac:3c:3f:46:1f:e5:
8e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:93:6A:F3:FB:E2:CD:1C:5D:7E:98:53:36:B4:6F:E9:D6:09:80:37
X509v3 Authority Key Identifier:
keyid:A7:89:04:40:DA:F1:C3:AC:38:77:3E:85:21:51:12:F7:4B:70:62:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:3e:95:db:c3:bf:c3:23:ab:26:48:44:be:1d:90:a8:2a:76:
42:e1:ad:0d:53:49:ec:69:2e:49:37:b0:5f:1b:4d:79:7e:d0:
df:88:42:8b:dc:4c:99:b4:18:b5:7a:ad:ff:39:58:02:f4:2a:
5b:98:3e:18:32:03:eb:65:1d:1d:e8:64:e7:a0:79:17:3b:16:
07:ad:11:59:3d:8b:0d:8d:b0:9d:b6:d5:2f:54:5e:89:f0:56:
e7:e2:80:d5:0f:b5:3c:8f:19:44:d9:ab:0c:c1:ff:b9:3d:5b:
42:8a:eb:16:c5:48:f0:7a:dc:84:5c:d6:41:b7:a8:8c:56:32:
d4:d7:08:f7:bf:91:4f:67:95:ad:aa:e2:ce:b8:1a:61:d1:2b:
b6:98:43:ff:fd:42:11:d8:03:d6:8b:1f:ef:ee:3c:cb:90:00:
1f:1b:ad:bf:dd:70:f4:0e:9c:68:54:90:15:79:81:83:7c:86:
cb:dc:b8:31:13:c6:3f:08:d4:ae:52:17:f0:f9:93:2a:e4:f7:
7f:31:95:e9:65:65:e2:01:35:35:f5:bc:f3:5b:a1:f5:9c:08:
ae:40:f0:46:76:75:ab:9d:06:26:7e:b9:86:bc:af:95:0f:21:
bb:9d:a2:83:7a:1c:61:bf:91:34:14:85:7d:f9:9b:e9:08:c4:
b3:22:5b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:17:20 2026 by rpki-client