Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
File: P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft (raw, json)
Hash identifier: /iqlstwEQxM0qf7JWT4pWvUuQtGtgcPTRKNjIayCBwE=
Subject key identifier: 4C:1F:BA:1A:E8:80:11:F5:79:26:E2:23:8F:82:35:D5:11:92:D5:92
Authority key identifier: 3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA
Certificate issuer: /CN=3f46c351ee89c9f5558167530704885b8be46eaa
Certificate serial: 019D27046B1EA7239975C26D44C364E0E8AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 22:01:34 +0000
Manifest this update: Wed 25 Mar 2026 22:01:34 +0000
Manifest next update: Thu 26 Mar 2026 22:01:34 +0000
Files and hashes: 1: 5L0ahpPNayrPxYi122Pi5vNAm_w.roa (hash: cz2iEH8qpiosJzyQ+ZNV5ATx1OTP4StLUP1VtKdnYPs=)
2: P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl (hash: z6OZbgPwcmRojx92CrEzn6jM/EHP/2JqBfu7hUqpBSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:6b:1e:a7:23:99:75:c2:6d:44:c3:64:e0:e8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f46c351ee89c9f5558167530704885b8be46eaa
Validity
Not Before: Mar 25 22:01:34 2026 GMT
Not After : Mar 26 22:01:34 2026 GMT
Subject: CN=4c1fba1ae88011f57926e2238f8235d51192d592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:69:ec:c0:e5:66:d1:aa:23:a2:62:86:e5:f6:
8a:b0:b3:d8:05:76:24:cb:14:70:7b:3a:ca:fa:b0:
36:59:7f:90:6e:be:22:44:2b:b4:9b:f8:98:64:8b:
28:ea:b0:5b:78:3e:3a:99:c7:39:22:cd:be:b8:f6:
72:96:b7:f5:de:ac:8a:61:9e:95:75:f9:7b:e3:30:
82:fc:9b:65:92:f4:31:57:8c:b7:d6:32:31:e1:d7:
20:ba:7c:67:5a:36:1f:8a:68:be:c1:d9:3c:62:5e:
08:c6:94:2f:5d:ef:e2:01:ca:8b:20:9c:63:08:15:
db:b6:c8:4a:c5:6b:39:dd:4e:70:3b:da:0c:08:9a:
6a:99:0b:12:ef:2f:8a:da:00:33:36:ff:57:a3:4e:
c2:77:0b:b3:27:d2:39:b4:34:a2:4e:0c:d5:b6:b0:
5a:6c:80:11:75:1d:72:b3:81:f9:e8:8b:f5:ea:e4:
13:dd:f6:7d:a6:3b:86:48:44:f3:c9:b8:6c:47:68:
30:cb:92:dc:67:32:0c:c3:cf:cb:9e:12:27:7f:70:
0a:86:9e:a6:6c:1e:8e:a0:32:bf:c7:a6:10:f7:ea:
34:62:42:19:6e:0e:70:9c:23:ce:9c:c0:02:2a:e1:
db:ad:95:44:6c:d9:ad:8f:75:15:ed:f9:f2:27:50:
e4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1F:BA:1A:E8:80:11:F5:79:26:E2:23:8F:82:35:D5:11:92:D5:92
X509v3 Authority Key Identifier:
keyid:3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e6:f8:53:fd:ac:d7:ec:42:b6:01:34:25:03:f2:1b:15:82:
9a:e0:32:73:27:81:a6:5d:8f:bb:1a:f5:7c:d1:61:ff:e4:64:
96:03:a1:d0:5c:53:45:18:29:77:b0:49:9b:41:5e:a8:03:5f:
a4:66:d7:77:88:36:f0:28:de:cd:96:40:cb:c5:02:f2:0f:27:
40:06:61:4b:ad:fd:0b:ab:eb:e1:c2:72:06:33:98:27:9c:bd:
f5:f1:c8:e9:b4:82:35:69:0f:10:21:06:35:e8:cd:c2:58:21:
5f:f0:97:ca:d9:34:8a:d0:4d:75:98:05:67:74:90:ee:1b:ef:
c1:c9:08:24:f9:8b:dd:e8:23:a1:71:58:36:61:57:d7:63:46:
52:e8:05:02:68:84:14:21:f0:b1:59:39:bf:46:0d:e1:12:95:
b6:0f:82:7c:55:c0:dc:24:d2:a9:eb:a4:6d:4a:c2:ac:f1:22:
01:ba:f2:b4:76:78:47:54:94:93:fc:1d:9b:8a:dc:3f:fe:67:
0a:e0:61:f5:e4:e0:d8:6b:ea:1f:94:b3:e8:f9:d1:d2:67:49:
ab:1c:d2:cb:1a:08:e2:5e:05:38:75:d9:f7:f4:10:6c:d5:e8:
5b:0d:c8:65:71:1d:91:15:b4:16:33:76:67:b5:5c:42:92:c6:
18:24:05:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:19:52 2026 by rpki-client