
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/P1oa6clM3jczsUz3HS5FAjYCG-c.mft
File: P1oa6clM3jczsUz3HS5FAjYCG-c.mft (raw, json)
Hash identifier: FuX+nzVL+2hSysxCxEl1bG9i7Ug1jgNlD4sQWfWny1A=
Subject key identifier: 5B:F9:3B:30:BE:A1:97:34:25:8C:D1:6C:88:16:27:A9:53:93:FC:47
Authority key identifier: 3F:5A:1A:E9:C9:4C:DE:37:33:B1:4C:F7:1D:2E:45:02:36:02:1B:E7
Certificate issuer: /CN=3f5a1ae9c94cde3733b14cf71d2e450236021be7
Certificate serial: 019F916D13EE4A176808390F54EEC5C0F8A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1oa6clM3jczsUz3HS5FAjYCG-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/P1oa6clM3jczsUz3HS5FAjYCG-c.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:12 +0000
Manifest this update: Fri 24 Jul 2026 00:01:12 +0000
Manifest next update: Sat 25 Jul 2026 00:01:12 +0000
Files and hashes: 1: 5tvg6R-aNFHAmDm8hsBhHIkdM_o.roa (hash: oPbe4w173UuB1VDOYJqEbd8iNWC/h8MGEf5qvBqUZd0=)
2: P1oa6clM3jczsUz3HS5FAjYCG-c.crl (hash: StUbK3SGUDZVe9sXPAaSrzZdp8lQZbb/ChvlUHgThmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/P1oa6clM3jczsUz3HS5FAjYCG-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/P1oa6clM3jczsUz3HS5FAjYCG-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1oa6clM3jczsUz3HS5FAjYCG-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:13:ee:4a:17:68:08:39:0f:54:ee:c5:c0:f8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5a1ae9c94cde3733b14cf71d2e450236021be7
Validity
Not Before: Jul 24 00:01:12 2026 GMT
Not After : Jul 25 00:01:12 2026 GMT
Subject: CN=5bf93b30bea19734258cd16c881627a95393fc47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:de:c0:ee:a9:bd:8d:4e:49:65:b9:8f:bd:75:
0b:ed:b8:b3:ed:c1:35:63:2c:33:85:d8:e5:c8:8a:
6e:84:7d:65:f1:20:89:22:e6:a7:e2:dd:24:a2:49:
0a:06:39:bf:f5:e4:83:95:0d:7b:03:d3:2c:3d:fe:
99:ca:19:32:b1:4f:a0:11:45:ab:43:c6:4f:16:78:
37:46:64:5e:db:84:b5:61:68:3a:fd:8c:a7:fa:42:
06:05:29:0f:c8:e2:41:a5:43:92:24:fd:1f:ed:7f:
ad:0f:73:c8:be:22:f1:c6:56:16:33:bd:23:f7:67:
38:4e:7a:15:94:6d:d2:35:e7:92:74:9f:93:81:75:
6c:f0:75:9d:94:60:00:23:97:57:ac:ee:1e:26:ee:
24:6c:24:03:29:6d:91:71:94:12:12:37:9e:3f:70:
50:8c:ad:b6:f2:26:0a:31:b3:5d:12:f8:53:51:9b:
5b:ad:0f:c4:33:03:72:c5:56:e3:81:4f:19:e9:1f:
6e:54:cb:1d:fd:54:34:bb:32:c2:fd:80:eb:72:73:
80:0e:0e:c0:9e:d9:6b:44:af:17:b5:90:6e:46:eb:
94:5b:8a:e6:66:34:7e:39:a7:c3:6d:63:0a:1f:80:
39:71:88:71:ff:54:67:03:2b:64:bb:8a:06:5b:ee:
77:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F9:3B:30:BE:A1:97:34:25:8C:D1:6C:88:16:27:A9:53:93:FC:47
X509v3 Authority Key Identifier:
keyid:3F:5A:1A:E9:C9:4C:DE:37:33:B1:4C:F7:1D:2E:45:02:36:02:1B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1oa6clM3jczsUz3HS5FAjYCG-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/P1oa6clM3jczsUz3HS5FAjYCG-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/P1oa6clM3jczsUz3HS5FAjYCG-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:af:24:e5:39:b4:97:7c:2f:6d:20:88:61:43:55:04:6d:d0:
cf:1d:f5:0f:b2:42:a5:94:58:28:e5:ca:92:90:51:00:e5:e3:
9b:4f:f7:67:af:3f:68:b3:f8:de:e0:d1:db:01:7a:ce:b8:3f:
ba:3d:79:d5:29:da:ff:0f:02:ee:15:b7:52:f6:3d:0a:56:58:
d8:e0:ed:c0:92:91:a8:05:c1:cc:9f:66:ff:d7:6b:e2:44:27:
19:a2:b1:f5:ba:0c:9d:3b:31:90:2d:43:9e:4c:d3:86:36:77:
7c:bd:43:38:ae:76:e6:17:a2:35:57:09:82:d2:82:10:4d:48:
fe:17:43:fd:c6:c6:a7:e1:26:7c:fb:f8:a8:cd:92:a4:9f:f4:
8f:e8:77:0f:17:d4:e2:2f:21:ad:e5:93:7a:8c:14:21:03:f4:
da:b6:8c:1a:0c:0c:de:fc:95:dc:e0:8d:2a:a0:08:ad:50:32:
3e:64:2b:15:65:31:ac:ff:72:c8:ba:a3:96:a6:f3:36:cd:14:
0d:ac:55:30:fe:3c:86:4e:a6:a8:f9:5c:d5:db:c9:77:d3:3e:
5d:b3:08:f2:c6:ee:14:19:c9:82:49:d9:a3:4c:98:cf:31:99:
0f:ca:cb:c8:e8:3b:6e:0d:d4:1c:30:b3:7b:e0:fe:e2:9f:e6:
8b:52:76:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:25:39 2026 by rpki-client