Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
File: PComfc4HIjjpwEUV5n65kmcuNRs.mft (raw, json)
Hash identifier: 7hrmoKpR1aKFon+lkIIAaK+E7kV6uT3x2vVTSSUf214=
Subject key identifier: 57:73:AB:3D:5E:D6:E6:43:19:96:7A:9C:DB:E6:01:1A:3A:63:58:9C
Authority key identifier: 3C:2A:26:7D:CE:07:22:38:E9:C0:45:15:E6:7E:B9:92:67:2E:35:1B
Certificate issuer: /CN=3c2a267dce072238e9c04515e67eb992672e351b
Certificate serial: 019D25BAD1500B37AD08AAB02DF4927412AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 16:01:33 +0000
Manifest this update: Wed 25 Mar 2026 16:01:33 +0000
Manifest next update: Thu 26 Mar 2026 16:01:33 +0000
Files and hashes: 1: 0ko9UBY3qaWw4RiEppaPRG8PLpg.roa (hash: A/2dJRQ4DKhZbhuSe8F7VZVq5LLcY4OTIT5i7IA9sYI=)
2: PComfc4HIjjpwEUV5n65kmcuNRs.crl (hash: bljNnsUJ1WroD9qI/DUi88vlUy/vEEMjIKvlm7OsBDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:d1:50:0b:37:ad:08:aa:b0:2d:f4:92:74:12:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c2a267dce072238e9c04515e67eb992672e351b
Validity
Not Before: Mar 25 16:01:33 2026 GMT
Not After : Mar 26 16:01:33 2026 GMT
Subject: CN=5773ab3d5ed6e64319967a9cdbe6011a3a63589c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4f:6a:38:a2:19:c5:8e:dd:38:26:ac:60:6b:
be:37:52:2f:1a:ac:15:c1:8f:7e:26:72:55:1c:83:
f0:b3:31:65:34:9b:d5:59:0a:3a:a0:2e:ad:94:0b:
d4:f5:43:10:88:1b:5d:fd:d7:d1:c2:f4:10:df:7c:
fa:78:73:59:6e:48:d4:dd:b1:a8:1d:de:d8:94:ac:
4e:5a:4a:19:f7:56:0b:e3:5a:6f:7b:4a:ab:70:56:
31:af:b8:f8:7f:89:a6:3c:35:8f:8f:6d:67:af:d5:
d9:3c:84:c6:27:0d:96:b6:a4:9a:0e:22:3c:74:6f:
e5:f5:1a:6a:fb:9b:c6:2a:6a:dc:21:1d:1b:5a:5f:
94:db:b4:33:d5:7d:4b:46:59:4d:84:97:98:ef:17:
40:2c:fe:02:41:91:22:9d:8d:bd:9e:66:72:05:da:
9c:39:1e:96:2d:88:1a:48:f0:22:d6:a5:88:52:79:
30:16:41:62:03:75:10:3e:62:d7:dd:b6:f8:3d:1d:
15:ac:09:a9:d8:44:e5:67:02:f1:57:0b:d8:d8:27:
a6:ad:35:61:e9:32:9e:bf:0f:e9:a6:13:f6:e8:63:
77:2e:a7:a3:b9:b4:cb:4b:13:d1:3f:45:90:5b:86:
74:41:e0:cc:82:38:b1:1d:56:bc:49:1e:09:b9:37:
02:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:73:AB:3D:5E:D6:E6:43:19:96:7A:9C:DB:E6:01:1A:3A:63:58:9C
X509v3 Authority Key Identifier:
keyid:3C:2A:26:7D:CE:07:22:38:E9:C0:45:15:E6:7E:B9:92:67:2E:35:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d8:39:90:b8:b5:4c:13:6a:3d:d6:8b:fb:6b:d7:da:35:46:
32:23:c2:6c:08:83:be:5f:5c:f6:a5:39:38:58:55:53:44:80:
41:84:19:80:53:97:84:d7:b0:d5:02:9f:76:36:14:04:e3:f5:
43:88:36:d9:5a:a4:2c:2d:1d:87:fb:6e:db:08:f7:0b:f2:4f:
96:05:9a:c2:eb:24:ae:5e:59:a4:d5:1b:c5:c2:25:85:14:b9:
e7:99:cb:c8:46:fc:6d:ef:fb:b3:ca:d6:32:01:d5:3a:d1:13:
b8:24:09:39:de:e3:97:8d:48:8c:ef:5e:19:63:da:91:c6:93:
0e:b4:35:f8:1c:fa:ab:b2:ca:db:3c:5a:06:8a:35:ff:4e:76:
4d:3a:2c:16:3b:b6:35:ee:43:0d:c0:c8:16:62:e1:64:7e:9e:
41:ab:c8:f4:e9:4d:67:b9:c0:75:91:56:d0:61:4d:22:78:f0:
0a:6f:dc:e4:10:c4:b2:12:61:46:e7:c1:8e:1d:fb:23:d2:0e:
7d:78:4a:ce:92:df:f7:38:6c:e8:34:83:26:6f:bc:ae:8e:4e:
6b:1c:e3:31:1d:f2:c3:bc:ca:bf:0b:a1:80:87:3e:ad:e8:53:
89:bd:d3:f3:a3:fd:5d:65:e9:91:d4:9f:94:5f:7e:cd:1b:f7:
fd:ee:d6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:35 2026 by rpki-client