
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
File: P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft (raw, json)
Hash identifier: iOSvl8ysNOwozc2h0szQR0LAlIfyVZDbs63g/JzWzf8=
Subject key identifier: 7B:01:E2:C2:23:E5:CA:F3:B1:D2:E8:C4:64:4F:ED:E8:9F:AB:66:2A
Authority key identifier: 3F:8B:0D:CB:79:FE:0A:E4:8B:A8:32:69:EC:12:83:84:70:CA:E9:0A
Certificate issuer: /CN=3f8b0dcb79fe0ae48ba83269ec12838470cae90a
Certificate serial: 01A1DE705105B64473091F73DB05F2586A78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
Manifest number: 02EC
Signing time: Sun 15 Nov 2026 09:01:05 +0000
Manifest this update: Sun 15 Nov 2026 09:01:05 +0000
Manifest next update: Mon 16 Nov 2026 09:01:05 +0000
Files and hashes: 1: P4sNy3n-CuSLqDJp7BKDhHDK6Qo.crl (hash: TZbzYlg+LGEYFNLYPhiBuOYW2YyUB2RyodaaHBTxfFI=)
2: Z2hi7ItQ4ePG-89oC3NsOmcwohk.roa (hash: hpOgQ0YBy/9da8UmbyZyoarOicwd5QMZEwe4cjjhqvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:51:05:b6:44:73:09:1f:73:db:05:f2:58:6a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8b0dcb79fe0ae48ba83269ec12838470cae90a
Validity
Not Before: Nov 15 09:01:05 2026 GMT
Not After : Nov 16 09:01:05 2026 GMT
Subject: CN=7b01e2c223e5caf3b1d2e8c4644fede89fab662a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6d:15:ac:29:4a:e4:85:a2:25:df:13:c9:4e:
94:d7:c0:94:96:99:8f:5b:3b:df:10:aa:65:d1:cd:
7c:8e:67:0b:a0:32:d5:40:ce:8a:ed:66:4d:5c:bf:
0b:1e:4c:7d:53:e3:84:bf:1c:ca:c6:03:dd:e7:33:
16:49:9b:72:cc:72:18:f2:e4:d7:6e:ca:47:b5:68:
3e:f5:98:53:9b:15:f4:b6:b8:7b:15:46:f1:68:e4:
63:0a:66:47:67:21:1a:4b:8f:f8:01:2b:a8:ba:ac:
4f:ce:f7:40:da:ca:e6:72:8a:7a:59:3c:3b:da:42:
33:55:56:a9:49:f5:25:b0:a5:2d:f6:3e:59:8a:30:
50:3f:1a:2e:e7:8e:89:d4:1c:cc:c1:92:e0:6e:d4:
82:8c:5d:b4:4a:0f:d8:9e:67:3f:df:f6:7a:c0:e1:
99:9e:e3:d7:63:86:c7:fb:1a:1d:d6:d2:b9:4b:81:
f5:67:4b:82:b1:d8:ea:5f:11:fa:16:4c:47:0f:44:
2b:68:08:5f:7a:6c:4b:88:77:96:7c:07:47:43:84:
ac:9f:40:f5:b1:82:a7:fb:48:29:53:0a:aa:ed:62:
e0:e0:35:7b:b8:9d:70:ff:6f:31:37:af:f4:e9:b6:
20:bf:e2:99:2e:e3:41:e8:ed:28:fa:63:ab:75:33:
9b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:01:E2:C2:23:E5:CA:F3:B1:D2:E8:C4:64:4F:ED:E8:9F:AB:66:2A
X509v3 Authority Key Identifier:
keyid:3F:8B:0D:CB:79:FE:0A:E4:8B:A8:32:69:EC:12:83:84:70:CA:E9:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:04:05:51:e7:1d:bb:14:b7:26:ab:11:17:e7:b1:38:aa:2a:
79:a4:cd:5b:a2:70:b3:27:f0:d4:ba:08:11:38:c8:23:8e:55:
c1:e4:48:6a:2f:77:08:01:2d:e2:47:5e:e7:52:d8:6e:4a:9a:
a3:04:a1:ea:97:ed:6f:98:6f:ae:24:e5:48:85:d3:3a:5e:87:
c6:6c:71:48:14:5f:c3:be:3e:ab:73:8d:74:8a:28:50:92:44:
90:72:ab:5f:04:5e:6c:28:34:92:2c:90:eb:0f:b2:fc:90:b0:
dd:3a:67:a9:7c:ae:3c:86:97:2a:c5:1f:3d:f4:9f:61:1e:ba:
4a:76:12:f3:21:88:ac:0f:38:17:0d:95:31:c3:a9:f3:68:06:
b0:f9:87:80:3e:87:32:10:8a:78:26:7d:75:aa:99:e9:43:b7:
e5:33:f7:55:d4:8e:df:18:33:37:19:75:c0:cc:b8:27:ba:f8:
9d:47:30:4f:a0:71:d7:73:5e:bb:02:4b:bc:60:31:a9:eb:0d:
d5:3b:1c:0c:34:ab:48:7a:ea:77:e2:bf:12:d7:45:22:4d:ba:
51:18:a5:70:6a:98:01:40:2b:39:19:11:12:99:03:3d:0a:ba:
fc:1f:10:6e:3e:2d:d6:a8:48:30:92:72:7a:a2:9d:32:f5:54:
ee:3a:1f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:15:54 2026 by rpki-client