Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.mft
File: PxP6dbPOiUzEZAQaipX4WffBxNI.mft (raw, json)
Hash identifier: li2oAaMXvpScV84FnaSJBT57ylpQ/GWy7czG30ld5Dk=
Subject key identifier: FE:96:AD:50:78:5F:28:8D:D3:2F:DE:BC:DB:5A:E2:4D:01:E0:E0:A3
Authority key identifier: 3F:13:FA:75:B3:CE:89:4C:C4:64:04:1A:8A:95:F8:59:F7:C1:C4:D2
Certificate issuer: /CN=3f13fa75b3ce894cc464041a8a95f859f7c1c4d2
Certificate serial: 019D2B854725C4B14860856A740C202A4328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxP6dbPOiUzEZAQaipX4WffBxNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.mft
Manifest number: 040D
Signing time: Thu 26 Mar 2026 19:00:47 +0000
Manifest this update: Thu 26 Mar 2026 19:00:47 +0000
Manifest next update: Fri 27 Mar 2026 19:00:47 +0000
Files and hashes: 1: PxP6dbPOiUzEZAQaipX4WffBxNI.crl (hash: PboY0BjkHcRWn31NowCdwjuLY+IzfZsLwqeby1BlpxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxP6dbPOiUzEZAQaipX4WffBxNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:47:25:c4:b1:48:60:85:6a:74:0c:20:2a:43:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f13fa75b3ce894cc464041a8a95f859f7c1c4d2
Validity
Not Before: Mar 26 19:00:47 2026 GMT
Not After : Mar 27 19:00:47 2026 GMT
Subject: CN=fe96ad50785f288dd32fdebcdb5ae24d01e0e0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b1:dc:3c:b9:3c:e2:69:db:7c:fb:22:a0:d7:
f6:a2:f6:3e:92:fe:95:5f:d1:91:23:dc:1e:7c:d0:
86:91:20:0a:84:3f:d7:ca:df:7f:13:28:4d:a3:a6:
b1:e5:ca:54:b3:59:a4:6f:bc:8e:9b:e8:4b:8a:0b:
15:85:f9:7a:24:3b:fc:f1:e0:6d:8d:99:14:5e:78:
df:0c:61:56:d6:37:6c:24:11:9a:b0:01:26:cf:ec:
ef:75:ff:67:a5:8c:d3:7d:7a:68:49:9c:4c:7e:b7:
fd:20:2d:38:99:98:4f:e9:6a:d3:b2:f4:f4:39:34:
29:ba:52:28:57:c3:95:5a:a7:e2:9f:f3:65:72:48:
86:a9:7d:90:2c:20:42:eb:1b:7e:02:d9:50:49:8a:
a6:3e:98:e7:1e:fb:ae:e2:2a:23:c3:c0:42:e6:1f:
ac:e9:96:df:55:08:88:80:5e:eb:ff:17:7a:f3:2e:
e5:b3:a4:b0:73:47:32:0b:b8:c1:ca:c5:40:80:1c:
26:55:49:2c:75:19:9a:8b:f7:85:8f:54:03:35:1e:
04:4f:c6:ba:45:2d:8b:2c:be:18:f5:6b:0a:f6:be:
a8:01:8d:ae:ba:91:2a:60:8a:83:a9:ba:1a:71:d3:
8d:ad:ea:93:9c:35:ac:b6:13:38:54:73:e7:35:3b:
4f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:96:AD:50:78:5F:28:8D:D3:2F:DE:BC:DB:5A:E2:4D:01:E0:E0:A3
X509v3 Authority Key Identifier:
keyid:3F:13:FA:75:B3:CE:89:4C:C4:64:04:1A:8A:95:F8:59:F7:C1:C4:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxP6dbPOiUzEZAQaipX4WffBxNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ce:b2:d4:ef:2e:86:3e:ef:7b:c6:e5:09:89:c1:90:8b:98:
4f:0d:b2:53:9e:c6:2b:20:94:02:03:bb:81:7c:37:f3:88:45:
9e:58:fa:af:73:93:71:bb:41:3e:6a:da:cd:a4:27:39:be:de:
6b:27:76:0b:1e:49:cb:eb:28:49:10:75:7a:11:61:6f:90:68:
da:59:39:9e:bd:6c:f5:cf:89:9f:92:fd:cb:de:ec:c0:c4:b0:
a7:e1:24:49:19:ce:bb:a4:c7:c6:4b:33:da:e6:15:b9:09:ef:
21:fa:38:7c:51:db:47:06:63:7d:5a:58:86:a3:69:28:69:74:
b3:9e:da:5c:76:24:c3:10:87:df:c6:4e:23:26:98:d0:7a:43:
d1:08:8e:8d:32:1f:ae:8b:da:8b:c9:17:5b:dc:7b:c3:47:96:
95:64:54:d4:22:a8:63:49:30:ce:27:cc:ac:b0:01:fc:46:5a:
aa:23:a7:cb:3c:c0:2a:c4:5e:e7:f9:8c:9a:fb:1c:52:be:3b:
1f:80:b0:f5:26:a2:48:89:d3:ce:f4:4d:6c:7a:c0:b4:8e:e1:
23:83:f5:b9:cd:f5:3e:04:02:47:d9:2b:04:20:f1:d4:df:df:
b4:71:43:86:c8:d7:85:32:66:92:0b:73:8c:76:c6:45:eb:67:
6f:38:22:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:18:27 2026 by rpki-client