Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/P2D25rQE4DQBrD10kbq2M_5qEp8.mft
File: P2D25rQE4DQBrD10kbq2M_5qEp8.mft (raw, json)
Hash identifier: wMZsLjDFpkXy1z7zS/TkA4PfHRwdjI7yTUdwEJ7iubw=
Subject key identifier: C7:01:33:81:1A:68:C9:C3:60:4A:05:EE:52:B8:5C:80:0E:9D:9D:8D
Authority key identifier: 3F:60:F6:E6:B4:04:E0:34:01:AC:3D:74:91:BA:B6:33:FE:6A:12:9F
Certificate issuer: /CN=3f60f6e6b404e03401ac3d7491bab633fe6a129f
Certificate serial: 01A0EB1C29B92B19ED143BF66B8D51F5663A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P2D25rQE4DQBrD10kbq2M_5qEp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/P2D25rQE4DQBrD10kbq2M_5qEp8.mft
Manifest number: F3
Signing time: Tue 29 Sep 2026 03:01:26 +0000
Manifest this update: Tue 29 Sep 2026 03:01:26 +0000
Manifest next update: Wed 30 Sep 2026 03:01:26 +0000
Files and hashes: 1: P2D25rQE4DQBrD10kbq2M_5qEp8.crl (hash: q5gyx+EshnQjvDI5iLXKOdgjzZnXRDOD1s0fpWuo/34=)
2: p3zDIjcAWzrwrNrpwE_PsccEM3A.roa (hash: jLiAzTfka0/Q0jf7zmlCDsBaadFbTH7kx2Q/ozkOt3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/P2D25rQE4DQBrD10kbq2M_5qEp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/P2D25rQE4DQBrD10kbq2M_5qEp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P2D25rQE4DQBrD10kbq2M_5qEp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 03:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:1c:29:b9:2b:19:ed:14:3b:f6:6b:8d:51:f5:66:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f60f6e6b404e03401ac3d7491bab633fe6a129f
Validity
Not Before: Sep 29 03:01:26 2026 GMT
Not After : Sep 30 03:01:26 2026 GMT
Subject: CN=c70133811a68c9c3604a05ee52b85c800e9d9d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e4:2d:de:e2:2c:25:67:f6:65:03:0e:e3:a0:
11:c0:49:29:01:85:dc:5e:30:fd:60:7f:e4:fc:9e:
94:6a:e7:ea:a4:8f:b0:da:ce:72:6c:a4:7a:d8:28:
f1:bc:65:29:0c:76:4c:f0:8f:b5:c5:54:6b:95:09:
2c:c1:73:b5:85:b7:dd:d0:8a:9f:9f:e5:2a:01:0d:
3e:74:75:6e:de:78:b0:67:6b:8b:96:00:9f:22:3d:
98:d6:df:7c:c1:17:0c:a6:c9:31:22:83:40:3d:80:
f1:6a:20:e8:bd:46:0d:9b:24:29:c7:2d:e4:6a:78:
cd:5e:8d:f6:eb:a5:1f:c7:c0:54:8d:c3:c8:b4:61:
62:b1:a4:a8:77:e8:23:43:be:3f:60:7c:63:26:dc:
96:63:98:f3:36:86:34:1f:85:c0:58:8a:75:21:fe:
b8:7a:cc:44:d9:a6:5f:bd:80:4f:73:d8:c7:a1:7c:
31:b4:9d:4e:bf:e6:b0:76:d8:e7:3f:49:f2:92:4b:
9a:e5:5b:96:53:5d:9f:eb:e2:9a:e6:f6:b5:8a:9a:
c4:55:42:7f:bd:3b:99:13:89:02:5d:d6:f1:a4:c9:
fc:56:99:f8:59:32:88:7f:21:54:4f:2e:29:ab:f8:
ad:b5:61:c5:82:4e:90:b5:99:21:11:fc:82:16:a9:
88:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:01:33:81:1A:68:C9:C3:60:4A:05:EE:52:B8:5C:80:0E:9D:9D:8D
X509v3 Authority Key Identifier:
keyid:3F:60:F6:E6:B4:04:E0:34:01:AC:3D:74:91:BA:B6:33:FE:6A:12:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2D25rQE4DQBrD10kbq2M_5qEp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/P2D25rQE4DQBrD10kbq2M_5qEp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/P2D25rQE4DQBrD10kbq2M_5qEp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:1c:56:af:41:ac:66:1f:e0:73:0b:31:5d:22:e5:6b:68:a5:
59:0d:b1:30:91:33:2b:92:15:24:63:c9:e5:88:97:09:cf:ec:
f2:ee:9f:85:e5:c2:04:c7:c1:8d:df:dc:30:14:fd:70:e6:d0:
1b:55:64:8d:39:28:6e:0a:76:07:f3:13:54:11:b5:58:81:c7:
1e:fc:7a:7b:d0:58:35:69:80:ec:f9:f9:a9:93:d2:51:65:4e:
d6:ed:4a:2e:f4:7d:3f:72:32:7d:5a:de:91:f2:cb:16:6d:aa:
b5:0b:ca:52:c8:0e:45:66:eb:57:09:4f:2c:5f:73:b8:b0:39:
a1:99:83:4b:bf:0b:9f:a8:cc:5c:f7:e7:16:e0:76:8d:62:0f:
5d:72:c7:81:84:40:e7:b2:7b:60:04:e3:a2:7e:91:e3:82:5f:
b6:1d:8a:9e:3e:67:63:13:b5:a6:8a:66:ac:89:2d:07:3a:e8:
f4:14:c6:02:cf:0a:5e:26:4c:9c:53:b1:ac:ae:4d:77:49:e9:
fd:87:bb:55:53:c4:e9:9f:79:ff:41:b5:f6:10:84:45:13:eb:
c8:d6:5c:f7:bc:3f:b5:33:d5:e5:dc:6c:95:b8:96:a6:7d:56:
2a:1f:e4:b9:fc:64:84:02:5a:dd:ab:18:b7:25:0b:8d:cb:93:
8c:bc:cd:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDrHCm5KxntFDv2a41R9WY6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmNjBmNmU2YjQwNGUwMzQwMWFjM2Q3NDkxYmFiNjMzZmU2
YTEyOWYwHhcNMjYwOTI5MDMwMTI2WhcNMjYwOTMwMDMwMTI2WjAzMTEwLwYDVQQD
EyhjNzAxMzM4MTFhNjhjOWMzNjA0YTA1ZWU1MmI4NWM4MDBlOWQ5ZDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uQt3uIsJWf2ZQMO46ARwEkpAYXc
XjD9YH/k/J6UaufqpI+w2s5ybKR62CjxvGUpDHZM8I+1xVRrlQkswXO1hbfd0Iqf
n+UqAQ0+dHVu3niwZ2uLlgCfIj2Y1t98wRcMpskxIoNAPYDxaiDovUYNmyQpxy3k
anjNXo3266Ufx8BUjcPItGFisaSod+gjQ74/YHxjJtyWY5jzNoY0H4XAWIp1If64
esxE2aZfvYBPc9jHoXwxtJ1Ov+awdtjnP0nykkua5VuWU12f6+Ka5va1iprEVUJ/
vTuZE4kCXdbxpMn8Vpn4WTKIfyFUTy4pq/ittWHFgk6QtZkhEfyCFqmI/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcBM4EaaMnDYEoF7lK4XIAOnZ2NMB8GA1UdIwQY
MBaAFD9g9ua0BOA0Aaw9dJG6tjP+ahKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDJEMjVyUUU0RFFCckQxMGticTJNXzVxRXA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xMzU2Y2YtYWI3OS00YzY5LTllNTUt
NjI4NDAwNjcxZDBlLzEvUDJEMjVyUUU0RFFCckQxMGticTJNXzVxRXA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8xMzU2Y2YtYWI3OS00YzY5LTllNTUtNjI4NDAwNjcxZDBl
LzEvUDJEMjVyUUU0RFFCckQxMGticTJNXzVxRXA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMxxWr0Gs
Zh/gcwsxXSLla2ilWQ2xMJEzK5IVJGPJ5YiXCc/s8u6fheXCBMfBjd/cMBT9cObQ
G1VkjTkobgp2B/MTVBG1WIHHHvx6e9BYNWmA7Pn5qZPSUWVO1u1KLvR9P3IyfVre
kfLLFm2qtQvKUsgORWbrVwlPLF9zuLA5oZmDS78Ln6jMXPfnFuB2jWIPXXLHgYRA
57J7YATjon6R44Jfth2Knj5nYxO1popmrIktBzro9BTGAs8KXiZMnFOxrK5Nd0np
/Ye7VVPE6Z95/0G19hCERRPryNZc97w/tTPV5dxslbiWpn1WKh/kufxkhAJa3asY
tyULjcuTjLzNCQ==
-----END CERTIFICATE-----
Generated at Tue Sep 29 12:54:47 2026 by rpki-client