Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
File: P6xo-RIFxE5zAzbmALYzT4yB6MI.mft (raw, json)
Hash identifier: UERcfSKN+dSOfbG057Ya9Np5yxpAjn+nswrPFWmI5UE=
Subject key identifier: 98:CD:3C:23:36:FB:B1:A4:97:30:39:62:03:A7:BC:D2:C2:69:E2:33
Authority key identifier: 3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
Certificate issuer: /CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Certificate serial: 019E1FB5F07312FA2829E18D36A44200C012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
Manifest number: 04F8
Signing time: Wed 13 May 2026 05:01:17 +0000
Manifest this update: Wed 13 May 2026 05:01:17 +0000
Manifest next update: Thu 14 May 2026 05:01:17 +0000
Files and hashes: 1: B70dl_4-b5eVhvQvZuPSWgvFpmU.roa (hash: PEnqRbyIXEVxwwcn6v1NmFYPEb0k725A2k724/MK0vI=)
2: Ka34B6rBgIn3gd6cXePqD35HsVc.roa (hash: /Qd0BtNspWGLKcZicxcHQ+co2KBYSO2WlY4JEiRzWAo=)
3: P6xo-RIFxE5zAzbmALYzT4yB6MI.crl (hash: FRIwmKr3eQ2ckEPX8J1nuYKjvtu5iDIrf7f/ItQmKo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:f0:73:12:fa:28:29:e1:8d:36:a4:42:00:c0:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Validity
Not Before: May 13 05:01:17 2026 GMT
Not After : May 14 05:01:17 2026 GMT
Subject: CN=98cd3c2336fbb1a49730396203a7bcd2c269e233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:93:25:d1:ea:53:d7:9b:aa:1b:6f:3f:87:84:
c1:52:83:80:11:d1:20:7d:0e:94:99:c7:80:b2:82:
6f:8b:52:8a:ee:3c:b5:9f:2c:27:7b:ff:51:f7:ca:
bc:bb:ae:43:35:4e:47:00:aa:d9:7f:61:6c:a8:d3:
b3:e3:b1:81:11:cd:dc:d2:85:f4:ae:78:56:65:a4:
c3:ee:e2:7f:04:18:07:c6:bc:61:79:7b:6a:7e:f6:
e9:23:5a:6e:20:3b:4b:e6:c9:fc:68:b1:03:d2:0f:
0d:d1:18:e7:0f:59:e9:22:33:10:02:fc:a7:5f:7c:
7d:d3:42:31:07:81:ca:1e:e7:78:a0:04:a9:10:a0:
19:9f:3d:cb:51:6f:f7:fe:aa:df:0c:4d:52:35:5f:
64:da:49:ad:50:e0:33:43:98:02:ec:d7:58:54:80:
19:c9:95:05:b2:0e:78:7d:3f:ef:a1:17:bf:a9:a2:
e4:1a:08:c6:fb:2c:47:e4:45:ff:1e:fe:c3:e2:39:
f8:3e:0a:56:38:21:2b:aa:22:1f:c9:bd:4f:27:ec:
ea:77:b0:ff:d0:08:22:93:d9:59:7d:7b:6e:53:9d:
c4:e6:3a:15:01:36:7b:22:50:38:00:36:31:db:1e:
4f:a4:74:60:a7:f9:3b:ed:04:ec:2f:42:e0:32:f9:
4a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CD:3C:23:36:FB:B1:A4:97:30:39:62:03:A7:BC:D2:C2:69:E2:33
X509v3 Authority Key Identifier:
keyid:3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:e0:54:dc:54:bc:45:4c:4c:c1:7b:32:24:a2:59:52:96:0d:
bc:ca:b9:e5:85:47:e5:d2:a1:0e:4c:cd:d5:6c:a9:f5:25:0a:
68:3e:bb:7b:d9:22:d1:26:56:96:98:1b:14:8f:24:d8:5d:89:
dd:8a:7e:ea:cb:7c:51:c1:0a:56:e7:af:9a:83:82:28:4c:6b:
b1:89:17:25:90:ce:ca:a1:35:e8:9a:ef:47:70:91:70:8a:96:
6b:40:93:6b:88:a8:58:75:59:64:9e:f3:7d:f0:e4:3b:bc:ad:
c2:15:2e:54:b1:90:49:14:18:0e:c9:7c:cb:af:9c:89:a6:a8:
20:18:00:87:c4:41:64:33:11:15:c6:84:e7:58:90:44:91:f3:
7f:89:e2:ba:e9:ff:8d:57:39:86:25:03:c1:f1:52:88:c8:28:
35:4e:28:6e:76:b6:88:77:54:e6:4a:ad:8c:35:c4:22:8b:a5:
1e:ca:0b:45:f9:21:49:d5:74:1b:23:a1:80:87:aa:ee:7d:9e:
aa:0f:ee:0a:fc:7f:82:1a:82:16:97:10:b1:b9:86:89:8f:1e:
7d:d4:6a:26:a9:84:58:0c:be:d8:a6:98:96:7b:4d:c0:20:ee:
8d:c8:0a:60:a7:62:13:ae:d3:07:a9:58:9c:9b:36:e8:24:ec:
de:5c:95:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:39:57 2026 by rpki-client