Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft
File: P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft (raw, json)
Hash identifier: ySz2cnor+OtQxMp4mLc9HWPA6C8qy0N6N4wGPG3qETc=
Subject key identifier: 26:05:89:6C:5F:8D:D3:0E:8D:1F:86:AB:1A:F9:6A:68:D5:32:04:57
Authority key identifier: 3F:B7:8C:D1:A3:10:C9:9D:63:77:14:0E:52:8A:A3:E6:E0:DC:AB:9F
Certificate issuer: /CN=3fb78cd1a310c99d6377140e528aa3e6e0dcab9f
Certificate serial: 019D2583ADBDCD7EEA6376F53C7BFA415670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P7eM0aMQyZ1jdxQOUoqj5uDcq58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft
Manifest number: 03BB
Signing time: Wed 25 Mar 2026 15:01:19 +0000
Manifest this update: Wed 25 Mar 2026 15:01:19 +0000
Manifest next update: Thu 26 Mar 2026 15:01:19 +0000
Files and hashes: 1: AjQ9aGrRgiCSMlcEOaQOc1QG7FA.roa (hash: gcQqIdjRrwkMqVcdcn63V2cLzw0R6xsBAxjOG/G39YM=)
2: P7eM0aMQyZ1jdxQOUoqj5uDcq58.crl (hash: gR04STAxrg5fd73VfWP++5pSGzGUpWYZTSJrF+K5dPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft
rsync://rpki.ripe.net/repository/DEFAULT/P7eM0aMQyZ1jdxQOUoqj5uDcq58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:ad:bd:cd:7e:ea:63:76:f5:3c:7b:fa:41:56:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fb78cd1a310c99d6377140e528aa3e6e0dcab9f
Validity
Not Before: Mar 25 15:01:19 2026 GMT
Not After : Mar 26 15:01:19 2026 GMT
Subject: CN=2605896c5f8dd30e8d1f86ab1af96a68d5320457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:70:f2:31:d7:33:8d:6a:c5:14:ea:2f:e3:a4:
61:77:d5:8e:ba:87:04:02:43:ff:78:69:23:59:f6:
12:0b:d7:21:3a:5a:cd:68:33:ba:a1:c9:59:1d:b8:
e6:62:fa:06:9b:22:88:3e:9a:1a:fd:0e:35:54:64:
06:a8:d3:b6:de:8a:b8:95:1b:bc:ce:b1:3a:0e:4a:
a8:5a:89:78:10:19:dc:7c:44:7e:7b:0a:75:0e:35:
8c:4b:d4:a3:85:19:4b:00:07:bd:68:b5:15:72:00:
81:b5:00:ad:5d:7e:ee:d2:8c:b0:d0:b4:85:9c:b4:
28:84:06:f5:2c:f7:5a:d1:e6:bc:a1:9d:c7:39:33:
f4:ee:2c:9b:7c:f7:22:33:a2:40:f8:0d:f4:3d:f0:
fb:d2:7f:78:e7:cb:ee:63:c1:d4:56:8d:16:66:6c:
6e:58:c7:35:46:0d:f4:da:be:13:03:44:13:70:13:
d1:a0:29:b4:38:0e:87:34:e3:f0:a1:1d:ec:5a:e0:
09:2e:85:48:7a:71:9e:0d:2b:a6:a1:82:86:78:e6:
38:06:8a:c1:fa:68:39:9d:18:16:f9:1c:6a:db:2d:
ff:2a:4a:a3:5c:59:d8:39:10:f5:38:5b:2e:91:71:
37:55:11:b0:eb:4c:73:a1:4b:38:a8:af:42:cc:9a:
bd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:05:89:6C:5F:8D:D3:0E:8D:1F:86:AB:1A:F9:6A:68:D5:32:04:57
X509v3 Authority Key Identifier:
keyid:3F:B7:8C:D1:A3:10:C9:9D:63:77:14:0E:52:8A:A3:E6:E0:DC:AB:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P7eM0aMQyZ1jdxQOUoqj5uDcq58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:29:42:b6:f0:1c:c8:64:c4:ec:27:6c:92:f9:aa:01:2d:e5:
f3:9f:59:f4:91:f5:64:3b:49:bc:28:fb:3f:4a:cb:e1:17:5f:
d4:58:8d:5f:f4:d8:8e:88:2a:46:a7:97:c9:44:fb:54:05:c5:
d6:c5:94:41:01:32:1b:2c:8b:44:41:52:7e:43:c0:44:24:da:
44:85:47:a6:cc:48:22:44:2f:81:07:73:ca:b3:c7:b4:12:d5:
ea:4a:a7:83:a5:5f:71:76:0f:56:10:59:14:5c:1a:83:1c:63:
37:9c:dd:65:20:27:02:47:bb:97:de:0d:9c:c9:2d:9f:20:1d:
e7:7a:36:60:00:42:01:fa:7c:7d:0b:2c:cd:8f:86:3c:ca:16:
62:df:d3:c2:91:a6:75:c3:55:2c:9b:92:39:60:7e:2b:2d:ce:
b6:67:12:94:82:3d:23:05:a1:96:eb:50:73:32:a3:df:d7:75:
fa:83:6d:a8:ac:a8:c6:10:28:89:00:47:68:03:a4:97:df:23:
07:ba:1b:33:ac:83:14:11:0a:86:b1:9f:d8:18:c9:77:00:9a:
b2:e7:28:91:dd:57:c2:04:64:fd:57:9c:2e:99:60:c8:8a:fe:
4b:58:2f:af:3e:f7:71:bf:19:af:92:e9:93:04:74:48:c1:65:
5b:ef:88:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:48 2026 by rpki-client