Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/P2D25rQE4DQBrD10kbq2M_5qEp8.mft
File: P2D25rQE4DQBrD10kbq2M_5qEp8.mft (raw, json)
Hash identifier: t0g8p1APYiFDI0M+j2r1kxA1qjNQdZQdG1a4geKlzdQ=
Subject key identifier: 44:AE:04:65:08:A0:23:1A:06:63:80:6C:28:34:0E:24:1E:60:33:24
Authority key identifier: 3F:60:F6:E6:B4:04:E0:34:01:AC:3D:74:91:BA:B6:33:FE:6A:12:9F
Certificate issuer: /CN=3f60f6e6b404e03401ac3d7491bab633fe6a129f
Certificate serial: 019F935B268062C5C9B7C6279F4934EBB9D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P2D25rQE4DQBrD10kbq2M_5qEp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/P2D25rQE4DQBrD10kbq2M_5qEp8.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:00:52 +0000
Manifest this update: Fri 24 Jul 2026 09:00:52 +0000
Manifest next update: Sat 25 Jul 2026 09:00:52 +0000
Files and hashes: 1: P2D25rQE4DQBrD10kbq2M_5qEp8.crl (hash: WSbTTcBYTlbxfj/5iSz1M8r/ejCclMxkyiGyK2/xMI0=)
2: p3zDIjcAWzrwrNrpwE_PsccEM3A.roa (hash: jLiAzTfka0/Q0jf7zmlCDsBaadFbTH7kx2Q/ozkOt3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/P2D25rQE4DQBrD10kbq2M_5qEp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/P2D25rQE4DQBrD10kbq2M_5qEp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P2D25rQE4DQBrD10kbq2M_5qEp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:26:80:62:c5:c9:b7:c6:27:9f:49:34:eb:b9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f60f6e6b404e03401ac3d7491bab633fe6a129f
Validity
Not Before: Jul 24 09:00:52 2026 GMT
Not After : Jul 25 09:00:52 2026 GMT
Subject: CN=44ae046508a0231a0663806c28340e241e603324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7c:25:43:81:4e:b1:5a:06:e2:6a:b3:aa:59:
4a:f4:f2:11:6f:a7:83:d4:fc:7f:c7:6b:03:19:40:
f9:b8:27:68:61:d1:cd:d4:ce:55:cb:e6:5b:71:7c:
17:80:7d:7c:18:c2:82:5a:40:7e:b7:39:c9:a1:23:
2d:8c:73:91:06:d0:f4:59:fd:69:f0:0c:7f:20:21:
9c:2d:a6:81:ee:07:52:ba:74:72:b8:0e:ac:a8:bf:
fc:ae:a9:1d:b9:b5:16:74:09:64:ea:ca:2d:4f:6f:
87:32:d1:ff:38:b3:25:24:d6:1c:07:73:37:0a:e2:
75:45:db:f4:b0:da:5a:35:0d:11:45:da:70:95:af:
cb:67:93:0e:37:ce:3d:c8:1b:f2:6e:45:60:91:9d:
58:9d:b0:dd:06:60:16:b4:31:44:7e:a9:0a:0e:d3:
c0:41:ec:a8:3f:5c:4b:b7:bc:82:2f:82:4b:1d:20:
50:8a:d9:af:bf:85:01:40:e9:92:3b:c0:6c:67:f8:
4a:99:49:05:f6:d0:31:7c:ec:ef:5e:79:ab:24:c1:
fc:11:60:c3:2b:b1:ab:26:fe:15:08:9a:b6:38:95:
2e:1b:71:a7:04:92:e9:c3:85:60:35:99:08:7e:93:
d2:95:53:4b:a1:f1:6a:70:c2:b0:99:31:2e:4c:f9:
c0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AE:04:65:08:A0:23:1A:06:63:80:6C:28:34:0E:24:1E:60:33:24
X509v3 Authority Key Identifier:
keyid:3F:60:F6:E6:B4:04:E0:34:01:AC:3D:74:91:BA:B6:33:FE:6A:12:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2D25rQE4DQBrD10kbq2M_5qEp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/P2D25rQE4DQBrD10kbq2M_5qEp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/P2D25rQE4DQBrD10kbq2M_5qEp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:fe:e9:50:85:57:89:70:36:b8:39:ed:6c:90:8f:d0:73:9f:
ed:36:41:f0:26:12:91:73:3e:21:45:4c:e6:a5:5a:e9:a4:d4:
a7:62:8a:57:8b:db:0b:79:dc:92:36:9e:7e:94:d2:2f:0f:15:
e3:b2:cf:30:a3:89:8d:19:29:9c:5f:cd:01:96:4a:44:3f:d9:
c5:fb:4d:6b:84:d9:7f:b1:7e:80:c6:cb:98:08:8e:d8:74:17:
c3:8e:ce:46:25:dc:31:d7:53:aa:b6:ec:06:60:45:0b:be:5f:
84:ce:a5:00:39:4f:9a:3e:d8:d1:68:93:62:18:7f:80:72:19:
1f:84:3c:be:fe:e8:47:9a:c7:6d:7a:d4:65:c6:86:db:50:c9:
82:5a:68:af:e3:11:7d:59:a9:8e:4c:0a:2a:83:16:c0:31:b9:
55:44:48:cb:73:50:90:75:14:29:27:31:a0:07:68:49:63:64:
08:f1:ed:f8:8b:46:67:90:ba:c2:cd:3e:e4:9a:8b:8a:c7:60:
46:2f:0c:58:d5:07:67:72:93:c9:61:5d:d9:5f:4f:29:b8:66:
49:cf:16:7a:d0:12:3e:97:40:77:07:fa:b7:3c:69:86:23:43:
cd:d5:16:b8:5a:47:b2:9e:86:26:52:3b:8e:9a:37:be:8e:fa:
fd:34:a7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:37 2026 by rpki-client