Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7e2ce3-3fc4-473a-a3d6-694868091883/1/P6NM0-FkjlyNMFRd65qVqtul5sE.mft
File: P6NM0-FkjlyNMFRd65qVqtul5sE.mft (raw, json)
Hash identifier: wG3PFr2g+V7texnkM1uJswbzmYsgImbjhnSKdz8UkiY=
Subject key identifier: C2:11:25:80:AD:79:8F:D5:5E:E3:6F:6E:E6:14:1E:6C:1C:1E:C6:58
Authority key identifier: 3F:A3:4C:D3:E1:64:8E:5C:8D:30:54:5D:EB:9A:95:AA:DB:A5:E6:C1
Certificate issuer: /CN=3fa34cd3e1648e5c8d30545deb9a95aadba5e6c1
Certificate serial: 019D25F1353B1044663BD2DF710E355B064F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6NM0-FkjlyNMFRd65qVqtul5sE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7e2ce3-3fc4-473a-a3d6-694868091883/1/P6NM0-FkjlyNMFRd65qVqtul5sE.mft
Manifest number: 77
Signing time: Wed 25 Mar 2026 17:00:57 +0000
Manifest this update: Wed 25 Mar 2026 17:00:57 +0000
Manifest next update: Thu 26 Mar 2026 17:00:57 +0000
Files and hashes: 1: P6NM0-FkjlyNMFRd65qVqtul5sE.crl (hash: FBxOmTsa4pLQ30XKUFKp9P1XTBqmJVIFd6vmF2yWdEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7e2ce3-3fc4-473a-a3d6-694868091883/1/P6NM0-FkjlyNMFRd65qVqtul5sE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7e2ce3-3fc4-473a-a3d6-694868091883/1/P6NM0-FkjlyNMFRd65qVqtul5sE.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6NM0-FkjlyNMFRd65qVqtul5sE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:35:3b:10:44:66:3b:d2:df:71:0e:35:5b:06:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fa34cd3e1648e5c8d30545deb9a95aadba5e6c1
Validity
Not Before: Mar 25 17:00:57 2026 GMT
Not After : Mar 26 17:00:57 2026 GMT
Subject: CN=c2112580ad798fd55ee36f6ee6141e6c1c1ec658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:57:13:dd:54:0b:4f:d7:0e:55:ad:3d:fd:85:
60:f9:52:22:a8:db:e8:f2:2c:7f:f5:d7:a0:d2:93:
42:d0:74:4d:c9:45:03:c7:80:20:34:37:b4:d4:fe:
2b:3a:9f:c2:ec:93:45:f7:ec:2a:dd:09:ea:df:8c:
00:c7:a7:96:c9:64:e8:65:af:e2:69:1b:0d:9a:ce:
58:36:89:18:7b:2a:a2:af:a0:d1:e0:f7:c6:23:d3:
67:bd:7b:db:fe:bb:fa:44:8e:30:77:b1:4d:ef:fe:
d4:3a:e8:a3:03:b0:92:ea:ba:3b:35:e1:bd:ce:52:
cb:c0:04:6e:b4:a3:78:a5:b2:99:f1:92:29:82:4f:
76:c7:06:10:f3:7c:20:0c:ca:7d:6d:62:fc:0c:51:
52:b9:cc:89:d0:f5:5f:c4:fb:b6:2c:ba:01:61:d8:
5a:aa:e2:e8:4a:72:f0:a4:d4:62:bc:b5:c3:d0:86:
c2:2f:6c:37:d4:5a:aa:7c:ed:63:f1:38:22:a2:9a:
57:9e:70:b9:69:68:bb:44:19:d2:ab:3c:ad:17:4c:
3b:c9:3b:08:2b:7a:3b:d6:6e:c7:ee:73:5f:b0:5e:
73:49:be:bc:01:b5:11:8c:31:7a:48:31:9f:d4:02:
8d:fc:4f:fe:af:3c:89:b1:29:82:92:62:a8:7e:17:
12:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:11:25:80:AD:79:8F:D5:5E:E3:6F:6E:E6:14:1E:6C:1C:1E:C6:58
X509v3 Authority Key Identifier:
keyid:3F:A3:4C:D3:E1:64:8E:5C:8D:30:54:5D:EB:9A:95:AA:DB:A5:E6:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6NM0-FkjlyNMFRd65qVqtul5sE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7e2ce3-3fc4-473a-a3d6-694868091883/1/P6NM0-FkjlyNMFRd65qVqtul5sE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7e2ce3-3fc4-473a-a3d6-694868091883/1/P6NM0-FkjlyNMFRd65qVqtul5sE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:9b:bf:e8:60:e8:16:ad:ca:cd:24:70:83:08:36:23:ca:59:
45:da:a5:74:39:97:fc:05:86:02:dd:ff:2d:77:cf:ff:6d:98:
75:32:0a:0f:a8:7a:36:81:2a:93:bc:a9:8c:d5:06:2e:8a:a4:
e3:ef:fc:e3:7a:2f:11:e0:49:79:eb:99:df:f0:1f:54:4d:ab:
0c:3f:d1:a2:c3:98:2c:46:f2:ed:66:19:c3:a7:3d:0f:53:f2:
3b:90:4e:b4:69:1e:ec:5b:ec:35:ab:38:7b:b2:a8:b3:01:fd:
5f:5d:ee:5a:7a:03:e3:e2:b1:f7:e2:43:d7:4a:f0:a1:3f:e3:
88:67:d9:48:07:41:d0:c2:8b:0c:43:46:06:86:0b:17:b8:e2:
25:a8:7c:e5:db:5e:38:aa:42:c3:7e:5a:30:9d:28:72:9f:7b:
0c:6d:63:27:6f:10:76:c0:73:41:5d:77:4a:2b:8e:31:fb:f7:
43:a5:1b:4b:a8:69:68:21:e1:9c:e9:b0:a3:0d:4f:69:96:7a:
86:79:41:2d:3a:74:5a:4c:f8:08:c3:79:f1:93:6d:9f:e9:04:
96:1c:f1:ea:e2:62:1a:4a:34:8c:e5:1f:d8:7a:01:97:5b:35:
e0:d0:da:56:57:be:f8:24:58:00:8f:0e:94:f3:dd:ec:5e:1b:
2a:d2:b4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:27:53 2026 by rpki-client