Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
File: PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft (raw, json)
Hash identifier: Hgt5DdGrBQpymTzesva1XhnpkrdJpFEaSGOxBMD/xrM=
Subject key identifier: 85:47:F7:0D:B7:8A:DE:CB:87:78:CE:F0:B2:3E:97:09:6C:EE:38:88
Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
Certificate issuer: /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Certificate serial: 019D2703A34619BC858566DE00C25FA04528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
Manifest number: 12C6
Signing time: Wed 25 Mar 2026 22:00:42 +0000
Manifest this update: Wed 25 Mar 2026 22:00:42 +0000
Manifest next update: Thu 26 Mar 2026 22:00:42 +0000
Files and hashes: 1: PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl (hash: oR8YGr/7/nO+R1vyS4h1QXb/A3ZWeD7TNcDoPIttZxE=)
2: _b_jh41DtvYlyJbVt2vmUxy_03c.roa (hash: Y4f7kKKKelGhsZykUm6x2Et6p6M+4yMQNJ8fkfC21Wk=)
3: ggxxocqcTwq22NipEXSDZh95C_4.roa (hash: 1HSVk52TYwL3CTNvQK16vezfpvhjf/FZgW8yY/AHmMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:a3:46:19:bc:85:85:66:de:00:c2:5f:a0:45:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Validity
Not Before: Mar 25 22:00:42 2026 GMT
Not After : Mar 26 22:00:42 2026 GMT
Subject: CN=8547f70db78adecb8778cef0b23e97096cee3888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c0:dd:c4:0b:7b:5d:bc:69:00:91:89:8c:ba:
a5:ca:09:ea:cc:c2:de:a2:c7:1d:f9:be:c0:69:23:
ea:16:b0:76:63:02:27:7b:11:85:d3:23:cd:6e:70:
1e:4a:9b:ef:7d:37:88:0f:4f:de:82:09:3d:af:d2:
86:d5:9b:10:e2:d0:46:2a:24:a6:0b:85:42:8f:04:
dd:48:a8:29:14:53:e8:98:b3:ef:d1:2b:ce:e3:78:
e5:e7:5f:29:1c:8d:d2:e5:c4:5a:db:67:a5:16:ea:
98:f7:46:be:86:1c:ce:71:ae:38:be:88:51:7e:37:
d3:32:f9:a8:89:7f:81:d5:c2:10:fe:1c:a3:29:b2:
fe:1a:d9:af:33:fa:e1:f8:f8:97:33:92:8b:09:d4:
b4:cd:9a:33:af:47:96:7f:de:2a:b9:b8:e5:db:65:
7b:ea:54:7a:0b:a6:91:13:9f:4a:90:53:f2:0f:81:
46:fe:73:7a:52:4f:90:09:f8:90:7f:d7:37:58:76:
49:1f:ce:7b:20:d8:48:d8:e0:fd:88:6a:45:4b:25:
ea:6c:c9:90:3a:17:07:7d:51:3f:96:75:69:f3:db:
3b:a7:13:bc:93:07:ef:55:b6:fe:0c:4c:8f:1d:92:
3b:b3:a2:c4:1f:8d:7c:d0:aa:ef:d1:e3:67:40:81:
07:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:47:F7:0D:B7:8A:DE:CB:87:78:CE:F0:B2:3E:97:09:6C:EE:38:88
X509v3 Authority Key Identifier:
keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:24:be:ea:4f:ee:14:1d:e4:10:e5:5d:60:85:e9:e8:0b:f8:
90:59:40:7b:37:91:74:72:bc:ac:6a:7a:be:88:d6:ed:42:5c:
2a:e2:b1:74:81:d6:3d:9b:56:69:d4:8e:bb:db:42:a7:e9:a0:
5c:3f:b0:9d:8f:5b:0d:2a:19:c0:2d:8a:6a:8d:d9:a1:e4:98:
51:22:b3:78:1b:88:72:a2:3b:08:01:0c:d2:09:2b:74:fd:fc:
3f:d0:46:b7:71:c2:30:41:8a:87:8e:3c:c8:a7:db:2b:59:9b:
84:1c:0c:3c:6a:16:c9:69:36:8c:b7:f2:7b:73:14:77:f1:26:
b5:12:ae:a9:fc:ce:4b:dd:8d:ff:f9:a1:d2:c7:03:e7:3e:df:
49:1a:88:84:be:82:9f:9d:f1:10:ad:8c:84:37:4a:66:26:fb:
e5:2c:46:5b:60:7c:37:2c:2a:df:81:d2:79:67:ff:3d:bb:78:
15:bf:6b:e4:e6:5f:42:c0:fd:29:f1:b5:a0:52:3b:9d:ad:21:
07:7c:ea:cb:19:47:3d:d5:37:54:1e:7e:c7:82:b4:5c:4e:e4:
cd:1b:64:dd:49:7a:2b:43:af:68:a3:02:74:99:cd:da:6c:bd:
17:00:91:0f:74:28:c0:59:1d:31:24:ba:91:70:8c:db:52:f1:
a8:90:e1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:55:40 2026 by rpki-client