Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft
File: _PU0Avp2-gY3bN6mvNOV4YAHnbc.mft (raw, json)
Hash identifier: CQOzoU6n3WYDO38LkZq4GMpKpcn1GfjQNtVB4iHGkww=
Subject key identifier: 9D:D4:4A:87:7B:03:02:28:05:08:5A:6D:00:B8:BF:B7:07:93:2F:29
Authority key identifier: FC:F5:34:02:FA:76:FA:06:37:6C:DE:A6:BC:D3:95:E1:80:07:9D:B7
Certificate issuer: /CN=fcf53402fa76fa06376cdea6bcd395e180079db7
Certificate serial: 019D25BA682B83A1CEDD1F462735E3794F30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PU0Avp2-gY3bN6mvNOV4YAHnbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft
Manifest number: 1595
Signing time: Wed 25 Mar 2026 16:01:06 +0000
Manifest this update: Wed 25 Mar 2026 16:01:06 +0000
Manifest next update: Thu 26 Mar 2026 16:01:06 +0000
Files and hashes: 1: CAzUJBJl_S6fY4g8OpP_PRPQJAc.roa (hash: 6YZqZyeQI2OCFKYEz3xohlsoJMTAW7st+b+x7M/6aO8=)
2: _PU0Avp2-gY3bN6mvNOV4YAHnbc.crl (hash: xMpnx8AngeseXAtsdKaZbr0YooGryQxEmHR1TNepsSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PU0Avp2-gY3bN6mvNOV4YAHnbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:68:2b:83:a1:ce:dd:1f:46:27:35:e3:79:4f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf53402fa76fa06376cdea6bcd395e180079db7
Validity
Not Before: Mar 25 16:01:06 2026 GMT
Not After : Mar 26 16:01:06 2026 GMT
Subject: CN=9dd44a877b03022805085a6d00b8bfb707932f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:59:44:32:14:4a:ec:c8:62:b4:11:d3:f2:73:
d5:88:9e:30:77:b8:72:dc:5b:dc:a6:e2:0a:c8:e4:
c7:fe:19:d2:e0:b5:ca:bb:e6:9d:ef:cf:93:2d:ac:
3d:52:9f:39:8e:c5:8a:6a:2c:2b:58:65:19:aa:30:
4d:0b:fd:64:10:a4:6d:22:d5:ca:77:c3:15:ec:98:
75:bd:11:3e:f7:74:70:a8:89:a4:da:c4:32:b6:e9:
bd:b8:44:36:5d:db:e4:e3:a4:b6:e5:7e:6f:29:3c:
4f:e8:75:f6:dc:3d:62:8f:a6:88:6f:4b:96:ae:13:
57:2c:38:98:ae:5a:d1:0c:66:36:36:6c:9e:ff:f4:
2e:c3:c6:bb:f3:32:d7:cf:3e:74:b6:90:9a:c0:30:
0a:ac:85:17:7d:89:8a:23:b6:1f:01:98:10:f0:9a:
aa:f5:82:ee:40:01:94:24:e4:91:c0:ac:9a:61:7c:
5f:4d:a0:a2:18:75:ae:f4:58:64:9e:05:c9:44:c9:
c5:76:83:d3:47:99:e2:01:22:01:71:11:27:ee:ff:
85:6d:e1:ce:f2:e1:5b:6e:56:04:c6:78:b4:d3:39:
8e:cb:14:b9:a1:f2:6a:ca:2b:d1:0a:83:e2:0e:9c:
00:f0:0d:82:f6:28:4a:39:2f:2e:43:9d:ec:a3:e8:
10:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D4:4A:87:7B:03:02:28:05:08:5A:6D:00:B8:BF:B7:07:93:2F:29
X509v3 Authority Key Identifier:
keyid:FC:F5:34:02:FA:76:FA:06:37:6C:DE:A6:BC:D3:95:E1:80:07:9D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PU0Avp2-gY3bN6mvNOV4YAHnbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:df:71:6c:39:1f:08:43:23:d0:9a:6e:31:f9:c1:02:b5:68:
54:1a:ea:9d:d5:bf:67:f6:08:08:9f:74:23:3a:c6:86:3b:14:
f2:fc:b3:71:06:d3:d7:35:63:7b:d7:e5:fa:9c:3f:4f:d6:2c:
d8:7a:93:b4:a1:ac:1f:6f:42:93:1d:ab:b3:68:f0:eb:ca:6c:
5c:77:82:19:45:60:e8:21:24:5f:b2:39:54:e7:f2:e0:57:ef:
42:0d:76:ee:42:e8:1c:d0:f3:9b:6a:6b:ea:21:a5:85:b1:1e:
6a:df:5d:50:2d:90:dd:de:88:68:63:3c:7a:c0:a7:97:5c:2b:
0e:62:60:63:0e:fb:95:6d:1d:f0:cb:3b:de:7e:6f:81:60:38:
e4:fc:5f:9a:0a:a2:58:94:c7:03:3e:11:a2:42:db:68:25:04:
6a:21:8e:91:be:be:72:eb:18:3e:04:87:af:2a:e0:6d:9f:36:
12:0d:ea:aa:a9:5a:88:b2:50:1f:0b:c5:60:ab:c1:2d:9f:0f:
7d:25:54:97:0c:94:89:8a:df:cc:21:a7:0a:c9:e5:ee:85:06:
40:c0:4d:63:7f:8b:0f:be:3a:aa:1a:ac:10:4a:b3:ad:7e:b4:
8c:62:18:b3:e0:fa:83:30:c0:f8:34:16:8a:01:ef:18:09:9a:
89:ba:6c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:37 2026 by rpki-client