Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
File: PyixvqC1iXcj6nxfu918zSlSsFw.mft (raw, json)
Hash identifier: 8q191A9AVaDZBuoDhQcALsDGrnGfR7hzU/8FlGYmoR0=
Subject key identifier: 7B:F8:6E:44:16:BB:DA:E5:DF:B5:A9:FD:37:23:4B:2E:DD:3C:5D:8F
Authority key identifier: 3F:28:B1:BE:A0:B5:89:77:23:EA:7C:5F:BB:DD:7C:CD:29:52:B0:5C
Certificate issuer: /CN=3f28b1bea0b5897723ea7c5fbbdd7ccd2952b05c
Certificate serial: 019D27A884742F86068A7B2CA9A27254353F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
Manifest number: 094C
Signing time: Thu 26 Mar 2026 01:00:48 +0000
Manifest this update: Thu 26 Mar 2026 01:00:48 +0000
Manifest next update: Fri 27 Mar 2026 01:00:48 +0000
Files and hashes: 1: HFBIVRwGpzJll63ZQliW3YvEwfQ.roa (hash: PpccMH3E3902HeGqkwDft0ieaZ/z+dKhMdg631pjCEg=)
2: PyixvqC1iXcj6nxfu918zSlSsFw.crl (hash: xszjVjYEopJ/WMQoW1wDQKktr8mFii9BPl5XlXmerlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:84:74:2f:86:06:8a:7b:2c:a9:a2:72:54:35:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f28b1bea0b5897723ea7c5fbbdd7ccd2952b05c
Validity
Not Before: Mar 26 01:00:48 2026 GMT
Not After : Mar 27 01:00:48 2026 GMT
Subject: CN=7bf86e4416bbdae5dfb5a9fd37234b2edd3c5d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:94:75:62:49:55:92:9a:13:2c:23:a6:31:63:
79:54:b1:b0:b8:4d:0b:60:ae:d8:f9:ee:8b:5a:81:
a6:ea:fb:88:80:d4:1d:02:7f:02:53:2e:a3:bf:62:
b6:7b:b8:f9:ce:82:11:83:b7:5f:f5:c9:a2:c0:ce:
c3:88:41:6c:6b:07:4d:48:30:0d:26:f0:07:e3:fc:
b7:3c:83:91:2e:b6:c6:6a:e7:8d:97:26:16:83:dc:
fc:15:1e:04:48:44:b8:a9:e5:fb:6a:fe:84:0a:fc:
68:c1:69:19:b7:1b:5e:76:87:95:fb:10:7f:f7:4a:
d6:13:34:88:f3:70:21:d1:67:7d:1a:5a:a0:46:a5:
a5:3c:09:75:07:5a:c1:d3:70:54:cd:99:a2:3d:2e:
6c:39:2f:f3:4f:c8:54:1f:23:ff:1d:6f:3d:86:d5:
fc:aa:5c:30:9d:b7:79:18:2c:81:8e:33:f7:b6:2a:
18:3d:e3:68:04:25:1c:9c:7c:2c:64:e2:26:e1:a4:
bb:ae:69:4c:06:47:8d:52:10:63:57:4c:0f:f0:75:
cc:d5:2b:fa:38:ab:7f:d6:ea:9a:80:2c:79:47:27:
47:41:6a:61:de:a9:a2:a6:ef:d9:a7:e5:71:10:f6:
f3:f7:6a:75:35:85:bf:05:b9:07:8b:7d:ac:17:21:
2f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F8:6E:44:16:BB:DA:E5:DF:B5:A9:FD:37:23:4B:2E:DD:3C:5D:8F
X509v3 Authority Key Identifier:
keyid:3F:28:B1:BE:A0:B5:89:77:23:EA:7C:5F:BB:DD:7C:CD:29:52:B0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:49:3b:85:ec:a6:e3:77:7a:ed:01:e6:7a:b2:fe:88:b9:d3:
54:f3:84:16:97:fa:53:db:7f:c0:6c:73:4f:1d:83:47:05:d6:
7d:1d:bb:76:49:03:f3:af:b6:e0:51:a7:56:db:c9:8c:1d:b7:
92:3f:f8:c3:cb:e9:a2:59:33:c4:ad:90:78:b6:ef:a6:db:89:
55:30:4b:13:e5:0c:e0:02:c0:b9:68:eb:3f:0f:89:8a:2b:ac:
61:f6:fb:05:00:8e:c6:db:a5:2f:a6:11:4c:a8:7d:aa:f5:87:
12:2e:0c:4b:6b:15:7c:0c:6e:af:25:ab:bf:d2:b6:03:02:64:
04:fd:bf:a7:34:03:5f:9a:47:b5:4e:b1:2a:ba:45:f4:74:3d:
f0:4c:cb:47:8e:21:4e:2c:f5:a3:06:31:e0:83:c5:80:96:bc:
15:57:e2:30:da:a7:03:3f:92:18:95:42:b8:d3:85:65:af:e9:
a7:49:ba:db:07:1a:68:98:db:ff:92:7c:0d:df:78:31:2e:94:
a4:fc:30:97:6b:62:e3:69:bf:0a:d1:6a:e5:9d:09:3f:f9:06:
d0:4d:0c:cd:63:b2:57:f4:ee:e5:fc:de:56:f1:35:51:f7:37:
d5:ec:4e:df:1f:77:2b:ea:38:01:28:eb:81:4e:65:24:ff:6d:
f7:26:e7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:55:16 2026 by rpki-client