Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
File: P6xo-RIFxE5zAzbmALYzT4yB6MI.mft (raw, json)
Hash identifier: WNnOJKQIXkSZwm+gcgLCpHv2jd02y9jDc24Qjvcgmc0=
Subject key identifier: DD:92:89:A5:C5:88:35:40:41:80:1B:EB:10:B5:9F:22:6A:84:EE:40
Authority key identifier: 3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
Certificate issuer: /CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Certificate serial: 019D2A72A2A96A0FBA6D62EDE5A461BF1005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
Manifest number: 0479
Signing time: Thu 26 Mar 2026 14:00:48 +0000
Manifest this update: Thu 26 Mar 2026 14:00:48 +0000
Manifest next update: Fri 27 Mar 2026 14:00:48 +0000
Files and hashes: 1: B70dl_4-b5eVhvQvZuPSWgvFpmU.roa (hash: PEnqRbyIXEVxwwcn6v1NmFYPEb0k725A2k724/MK0vI=)
2: Ka34B6rBgIn3gd6cXePqD35HsVc.roa (hash: /Qd0BtNspWGLKcZicxcHQ+co2KBYSO2WlY4JEiRzWAo=)
3: P6xo-RIFxE5zAzbmALYzT4yB6MI.crl (hash: +quhmcrTr1UtHl2oTtGDGVNNh1tLEIe0b+hL2uqgJtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:a2:a9:6a:0f:ba:6d:62:ed:e5:a4:61:bf:10:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Validity
Not Before: Mar 26 14:00:48 2026 GMT
Not After : Mar 27 14:00:48 2026 GMT
Subject: CN=dd9289a5c588354041801beb10b59f226a84ee40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:46:a3:7e:80:22:9e:c4:89:e4:e0:18:fb:f2:
df:a9:89:f9:07:28:44:97:59:a9:2b:ca:d9:80:0c:
1a:16:8d:17:fb:96:f7:2f:86:cd:a4:b3:d1:99:7b:
91:9f:02:4b:e6:96:a1:3e:ef:cf:25:59:07:fc:e7:
cd:37:aa:8b:7e:df:85:12:f4:18:10:5a:77:ed:19:
4d:13:00:6c:75:ee:ad:11:66:4e:79:02:de:c5:73:
42:61:36:b8:f3:f4:9c:ee:56:f3:b8:f0:47:00:30:
1c:5e:88:2a:6e:d1:f5:e0:f2:2c:1f:15:76:0a:bc:
a9:b5:a0:0c:e1:40:ac:1b:7b:c8:a5:8b:be:31:5a:
f6:ae:4a:ca:c8:45:cc:06:35:13:9a:a6:d3:bf:40:
e0:1d:65:53:30:75:0a:b2:f8:ff:c7:a8:6e:91:35:
c6:83:95:b8:73:e4:4d:2c:29:ab:59:68:52:ce:d0:
18:76:a8:8e:22:d0:5b:5e:58:a9:ba:42:f9:95:36:
97:85:51:54:0f:f5:c1:66:5f:ae:0c:67:79:54:e6:
7e:52:c0:a3:4e:5b:23:72:f4:f4:80:dd:40:39:f9:
69:c4:de:8b:4f:4f:84:29:db:a7:dd:33:48:50:10:
6c:5b:ee:49:df:ee:0b:e3:a5:0e:02:08:59:62:c2:
42:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:92:89:A5:C5:88:35:40:41:80:1B:EB:10:B5:9F:22:6A:84:EE:40
X509v3 Authority Key Identifier:
keyid:3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:3d:c8:64:ce:07:ad:8e:e4:b8:b8:a5:06:e7:37:e4:7a:27:
60:a1:8b:c0:a7:b3:0d:84:0f:a5:a9:d6:c4:1e:da:a0:48:ce:
94:fd:56:f3:d2:05:6b:a6:45:fd:24:7f:92:15:05:93:87:34:
8a:9e:b7:86:81:51:59:10:a3:7d:aa:34:69:7f:1e:2f:da:c8:
c8:07:51:4f:ef:50:5d:60:97:9f:ed:1b:5b:fd:88:b6:bf:4c:
ba:14:b2:78:c0:53:87:9b:9f:f4:2b:62:ce:ed:4c:d4:52:58:
8b:e9:20:fb:9d:a3:e1:6d:a5:27:97:06:c9:f4:4e:96:00:cf:
fe:f6:7e:73:23:e0:ab:c6:0b:07:7c:ce:37:94:34:b1:4a:fb:
1a:39:d1:05:2b:e7:3d:5e:c3:09:3f:e4:83:90:a0:1b:7b:5d:
39:77:9b:dd:c8:ce:bb:93:ae:81:8d:ec:fb:db:dc:bf:6f:85:
fc:33:7d:72:b6:36:4f:d6:12:a3:06:3b:f1:ea:63:fd:00:24:
3e:63:d3:c4:ea:37:be:88:8c:88:cb:1b:04:69:9c:b4:6e:1b:
37:12:25:c0:5e:69:2e:5a:34:4f:3d:b4:9e:1c:cb:f7:a8:68:
24:e5:4c:5d:1b:a0:f3:53:ef:51:ff:18:11:d0:b4:8a:d4:fc:
bd:78:7b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:17:02 2026 by rpki-client