Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
File: p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft (raw, json)
Hash identifier: jsPVTplii8R3GX23xBWFcry5pR+eOyWG6hvS5sCzy00=
Subject key identifier: 09:8F:4C:1E:25:B6:CD:C6:92:30:CA:A8:A1:50:91:36:AD:B5:24:1B
Authority key identifier: A7:64:A2:6F:76:35:51:40:AA:69:6E:0A:4F:1F:0C:31:2B:72:77:C0
Certificate issuer: /CN=a764a26f76355140aa696e0a4f1f0c312b7277c0
Certificate serial: 019D25F1CD8339683439E56C0C6FC77A92F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
Manifest number: 15C0
Signing time: Wed 25 Mar 2026 17:01:36 +0000
Manifest this update: Wed 25 Mar 2026 17:01:36 +0000
Manifest next update: Thu 26 Mar 2026 17:01:36 +0000
Files and hashes: 1: p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl (hash: 9hjCa79ZuG7OyHY/bIpZiFWFXPYme39ymVbFxxz7hws=)
2: ui7FUzschC45AaandKwrKd4ZLOE.roa (hash: p64p3A+w4Rzd9qzg1tn0C4YDnUbbDXUrufa5/DaN5QU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:cd:83:39:68:34:39:e5:6c:0c:6f:c7:7a:92:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a764a26f76355140aa696e0a4f1f0c312b7277c0
Validity
Not Before: Mar 25 17:01:36 2026 GMT
Not After : Mar 26 17:01:36 2026 GMT
Subject: CN=098f4c1e25b6cdc69230caa8a1509136adb5241b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ce:46:9e:77:b7:5e:20:5e:f9:b7:47:e3:d7:
de:26:28:15:92:48:45:f0:ad:50:51:07:ba:56:58:
41:29:5e:ab:5c:23:2a:91:8a:38:42:1f:6f:54:57:
c1:53:0a:01:56:44:11:60:50:cd:13:ff:a2:1b:7d:
da:35:d3:74:37:ee:b9:4e:e7:19:4f:d5:93:c7:e5:
5f:2b:5b:8e:20:cc:06:a3:b8:17:f2:81:55:c8:fd:
4c:c5:5a:6d:da:69:da:b6:49:8c:e0:b8:b8:e8:8f:
c0:0f:0f:4d:c1:a6:97:e1:58:b0:5e:c7:9a:f6:ed:
e3:a9:ea:92:c8:b4:69:86:84:58:82:61:12:dd:72:
78:71:ca:5e:d6:5b:78:bb:4f:df:8f:5c:fa:f6:28:
aa:02:ce:d9:8d:78:3b:1d:78:7d:4f:84:7a:4c:a4:
e2:e3:65:7f:5b:56:b5:a0:f4:d8:ee:88:bc:4d:72:
32:7e:9b:8d:70:48:c1:d5:d4:f9:4f:c3:e1:0d:5c:
21:6c:bf:2c:93:01:a2:f9:32:9b:b4:dd:c7:67:45:
d9:59:f0:1b:7f:1f:27:ff:a7:4c:f3:0f:d3:b1:fa:
2c:0b:bc:e3:df:dc:93:a7:66:e5:7b:ec:87:70:18:
9e:9a:f9:cf:7e:3b:a3:40:8e:05:ec:57:29:f4:1d:
21:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8F:4C:1E:25:B6:CD:C6:92:30:CA:A8:A1:50:91:36:AD:B5:24:1B
X509v3 Authority Key Identifier:
keyid:A7:64:A2:6F:76:35:51:40:AA:69:6E:0A:4F:1F:0C:31:2B:72:77:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:73:58:8b:d2:30:29:62:26:b2:c2:cb:9d:c5:9f:ca:d4:96:
35:12:fd:f8:2e:5b:4d:6f:03:ea:f1:6c:ac:0e:8b:18:1c:d5:
e7:6a:39:55:81:43:7b:e2:92:a7:2d:18:96:77:15:ae:98:18:
98:dd:f9:ac:98:7f:79:3b:ea:87:0f:da:da:b2:4c:6e:50:c6:
1a:05:c2:75:0f:70:84:4d:a2:9e:df:93:8a:67:3d:5b:6b:40:
a0:71:1c:69:6b:5a:47:dc:b9:13:e2:30:c5:6b:bd:8d:4f:a3:
7f:0f:13:0f:35:4a:34:4b:06:28:d6:7b:80:42:a7:67:73:b3:
e8:6f:b8:fc:0f:08:47:dd:d1:af:b1:b3:97:0c:29:27:18:5b:
99:32:d0:7e:96:c6:b0:69:dc:b7:be:c1:9a:5e:ec:3e:82:4b:
61:74:e8:73:44:66:75:e5:5b:66:19:c9:de:09:f8:08:ea:3e:
3d:b3:0c:9f:12:38:19:c6:73:61:b1:da:48:50:2d:69:42:16:
b5:ef:3c:35:89:c6:d1:ce:e2:d9:05:e5:43:c4:47:db:dc:c3:
70:6d:29:ce:f7:8b:df:93:54:35:10:06:03:2b:87:3b:4d:3e:
28:d9:23:e3:f6:89:6c:e0:51:97:25:8c:76:a4:72:29:7e:c9:
94:b0:6f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:11 2026 by rpki-client