
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
File: P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft (raw, json)
Hash identifier: IN/Eg4vZCGBF8igzzbIyx6mpQ48QQyS61PvJFRJQeoA=
Subject key identifier: 61:09:B5:31:42:57:E3:4C:D7:2E:F2:07:2E:69:17:BD:21:79:1F:95
Authority key identifier: 3F:8B:0D:CB:79:FE:0A:E4:8B:A8:32:69:EC:12:83:84:70:CA:E9:0A
Certificate issuer: /CN=3f8b0dcb79fe0ae48ba83269ec12838470cae90a
Certificate serial: 019D25841F77829E54E76288D7012D1B0E62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
Manifest number: 7A
Signing time: Wed 25 Mar 2026 15:01:48 +0000
Manifest this update: Wed 25 Mar 2026 15:01:48 +0000
Manifest next update: Thu 26 Mar 2026 15:01:48 +0000
Files and hashes: 1: P4sNy3n-CuSLqDJp7BKDhHDK6Qo.crl (hash: VYY2aB9KNJe9AOLO4726uqTDvGiyXEigFfnzp6swW3U=)
2: Z2hi7ItQ4ePG-89oC3NsOmcwohk.roa (hash: hpOgQ0YBy/9da8UmbyZyoarOicwd5QMZEwe4cjjhqvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:1f:77:82:9e:54:e7:62:88:d7:01:2d:1b:0e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8b0dcb79fe0ae48ba83269ec12838470cae90a
Validity
Not Before: Mar 25 15:01:48 2026 GMT
Not After : Mar 26 15:01:48 2026 GMT
Subject: CN=6109b5314257e34cd72ef2072e6917bd21791f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:22:b4:a6:1b:78:36:d2:dc:ce:24:16:ef:a3:
20:dd:93:33:76:2c:d3:89:5b:6f:57:f8:c5:eb:dd:
c1:27:3c:c7:71:6a:80:63:28:4c:9b:45:92:44:d7:
f5:76:56:a8:c4:02:57:9e:0b:10:23:e9:ac:93:af:
0e:a8:70:2a:3a:1f:c3:1f:78:b2:df:0b:01:b1:2a:
d0:af:f2:3c:e4:35:43:1e:ff:96:c7:29:b7:9b:e2:
4d:dc:0f:a1:b4:44:0d:1c:9a:ba:58:0e:fd:e7:24:
ee:9f:b7:a2:c9:47:b0:2a:e2:f8:0e:91:8e:60:31:
84:6d:53:87:f9:0a:be:45:0d:e3:f0:76:3a:a8:38:
1d:b9:ba:bc:9e:78:2e:0d:53:0a:e9:d0:a5:91:91:
80:7f:5a:f9:f3:b9:84:2c:cd:a2:03:83:c3:8a:fd:
7f:98:eb:96:f5:44:01:22:14:61:97:53:a0:4a:74:
1e:b3:71:e0:46:90:34:d3:19:eb:15:eb:4d:5f:38:
12:35:fb:cd:33:91:94:48:62:86:63:95:d2:7f:3f:
c7:f5:63:e3:34:1a:f7:a8:d8:5f:05:80:92:09:a3:
39:8c:89:56:ad:9c:08:f3:96:ae:4d:b4:85:7c:d8:
b5:c1:91:7c:69:15:ff:97:9e:d4:72:29:1d:03:6f:
92:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:09:B5:31:42:57:E3:4C:D7:2E:F2:07:2E:69:17:BD:21:79:1F:95
X509v3 Authority Key Identifier:
keyid:3F:8B:0D:CB:79:FE:0A:E4:8B:A8:32:69:EC:12:83:84:70:CA:E9:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:69:c3:dd:e1:c9:77:48:81:5a:b0:d8:f3:25:d6:b4:81:3f:
a0:aa:53:da:ec:d3:10:1a:ad:63:c1:f0:ea:ce:d5:b5:3b:27:
9d:d9:9e:05:6f:ae:b7:5c:8b:9b:e4:28:b5:6e:85:1b:87:74:
c9:52:aa:ad:e8:6d:d5:83:31:ae:2b:21:88:ae:61:b5:64:b2:
dd:ae:05:f1:a5:6e:bb:79:c8:86:15:6c:75:7f:34:d1:21:6b:
fa:3b:ce:4c:c5:3d:77:cf:91:b9:6a:cf:d8:4f:f5:17:c7:7b:
82:13:fb:0a:d0:08:89:ce:f6:32:f3:db:bd:4a:c6:e7:90:fd:
b5:bd:b4:e0:07:9e:92:b6:c4:46:87:d3:70:fe:b4:84:95:b3:
ff:35:c0:3f:80:72:67:d4:39:b1:7d:ed:64:11:cb:8d:e9:62:
7c:f8:c2:3d:b1:20:4d:27:2e:f1:c9:50:b3:37:85:e9:54:ad:
51:21:2f:79:ed:74:87:ca:5e:42:53:3b:64:4e:3a:51:67:d0:
5e:e3:ba:18:ab:46:1c:80:ec:c0:a9:4e:22:74:72:69:b8:21:
d2:62:c0:dd:f0:66:e2:a2:80:ce:fb:ae:c3:f7:32:3f:ae:67:
07:a9:08:71:b7:54:8c:37:da:bc:16:c2:18:ff:7d:c5:ca:f0:
76:f3:ff:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:48:53 2026 by rpki-client