Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
File: P-XZqjR4a6oW1Fa9857K-12XMPg.mft (raw, json)
Hash identifier: H9Ezl+2zB4YLdYXYjXVzrvxGDQCE2uYmBuXFMf5mVkQ=
Subject key identifier: D7:73:7D:F0:DD:F1:E3:77:5C:BB:20:2C:D4:23:A6:41:AE:E1:0A:9B
Authority key identifier: 3F:E5:D9:AA:34:78:6B:AA:16:D4:56:BD:F3:9E:CA:FB:5D:97:30:F8
Certificate issuer: /CN=3fe5d9aa34786baa16d456bdf39ecafb5d9730f8
Certificate serial: 019D2C9848BAFE76E86598A22DEF2151728A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
Manifest number: 1888
Signing time: Fri 27 Mar 2026 00:01:10 +0000
Manifest this update: Fri 27 Mar 2026 00:01:10 +0000
Manifest next update: Sat 28 Mar 2026 00:01:10 +0000
Files and hashes: 1: P-XZqjR4a6oW1Fa9857K-12XMPg.crl (hash: OS2cbVSKLlAegCq4Rw2nHLaRDLS84XotEhhsXWpB6tw=)
2: g5nPMDhR1xXE3aUl3Zj948mnSZo.roa (hash: hy3Afkla54p1JUhAk/RCQlLZSfZ1AsKTh6gnAbaPJ04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:98:48:ba:fe:76:e8:65:98:a2:2d:ef:21:51:72:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe5d9aa34786baa16d456bdf39ecafb5d9730f8
Validity
Not Before: Mar 27 00:01:10 2026 GMT
Not After : Mar 28 00:01:10 2026 GMT
Subject: CN=d7737df0ddf1e3775cbb202cd423a641aee10a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:46:f9:64:2d:86:65:d2:47:59:a1:e6:3f:e8:
b0:52:fb:78:a0:49:0b:0f:6e:10:ca:34:c3:c8:ec:
7b:77:2a:54:61:15:9d:0e:26:bd:a5:dc:69:ca:94:
9b:1b:3f:4d:86:6b:f3:58:3b:19:e7:71:1c:83:e0:
3a:2d:96:0e:88:b5:e5:f9:3f:1e:62:79:21:a2:d2:
d5:c4:4c:02:ac:b4:c5:f3:7c:fc:4b:58:be:c5:1e:
fb:aa:a9:ae:fb:70:96:b3:8e:bb:d3:60:13:ec:f9:
0c:47:ac:89:89:1c:a3:4c:c6:09:29:be:1e:e0:d8:
3f:e9:73:1c:13:76:af:f2:ef:ee:d5:92:63:e1:8d:
eb:40:e0:1d:f5:30:58:45:11:f8:bd:ad:17:8c:a3:
ab:fe:bf:c2:8a:b1:86:cd:0d:d4:f1:06:64:56:68:
9d:e5:88:4e:4d:a8:34:d4:25:7e:8d:e3:72:4c:bb:
cd:23:f3:78:4e:43:e1:50:ed:24:94:73:3d:f9:16:
df:69:51:45:b9:c7:21:36:63:90:8f:7e:f7:66:ca:
b8:65:b0:83:1c:0d:99:d5:97:30:e3:ad:ba:34:38:
6b:bb:63:f8:82:28:c0:3a:a2:53:be:89:d9:f5:9c:
7f:d3:e7:d9:0a:b5:38:c9:dd:a6:06:38:23:dc:98:
77:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:73:7D:F0:DD:F1:E3:77:5C:BB:20:2C:D4:23:A6:41:AE:E1:0A:9B
X509v3 Authority Key Identifier:
keyid:3F:E5:D9:AA:34:78:6B:AA:16:D4:56:BD:F3:9E:CA:FB:5D:97:30:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:0a:c6:45:4b:13:e3:b3:eb:1a:90:2d:50:ae:d8:0d:fd:62:
de:47:3a:c0:2f:da:81:95:b2:f8:4e:0a:06:4d:62:c9:1b:26:
ac:37:1a:35:dc:42:57:31:d1:2d:6d:80:9c:11:00:dd:0d:f6:
8c:ae:29:de:51:20:ff:e8:36:88:9b:14:8e:c3:44:eb:95:78:
f5:91:9d:bf:30:6c:01:07:d5:5e:fc:dc:e6:de:b0:61:d1:30:
78:73:1a:dd:74:67:3b:29:dd:db:3c:dc:2b:e6:a4:2b:cd:7e:
12:b9:b1:a6:c0:92:67:6d:f7:c5:52:e5:57:18:7c:09:42:46:
74:35:50:cd:75:43:d9:c4:cf:de:43:25:03:b3:77:3b:80:ee:
63:8f:7b:89:86:ab:76:f5:df:20:b3:8f:c1:99:1d:73:64:84:
c4:2b:43:1c:08:7e:d4:48:16:31:77:52:ba:df:34:2f:99:9a:
60:29:fb:0f:74:c2:26:89:0f:8d:38:82:92:9d:24:79:37:41:
34:c8:e5:88:d2:c1:b4:86:07:7f:50:45:91:9d:10:d6:dc:a0:
42:b0:2d:60:8b:59:60:fa:da:2a:c1:48:1d:31:fd:f2:3b:8a:
7b:63:d8:bd:96:8b:8d:20:48:9e:a1:d6:39:a3:e0:7d:17:dd:
49:49:eb:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0smEi6/nboZZiiLe8hUXKKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZTVkOWFhMzQ3ODZiYWExNmQ0NTZiZGYzOWVjYWZiNWQ5
NzMwZjgwHhcNMjYwMzI3MDAwMTEwWhcNMjYwMzI4MDAwMTEwWjAzMTEwLwYDVQQD
EyhkNzczN2RmMGRkZjFlMzc3NWNiYjIwMmNkNDIzYTY0MWFlZTEwYTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kb5ZC2GZdJHWaHmP+iwUvt4oEkL
D24QyjTDyOx7dypUYRWdDia9pdxpypSbGz9NhmvzWDsZ53Ecg+A6LZYOiLXl+T8e
YnkhotLVxEwCrLTF83z8S1i+xR77qqmu+3CWs46702AT7PkMR6yJiRyjTMYJKb4e
4Ng/6XMcE3av8u/u1ZJj4Y3rQOAd9TBYRRH4va0XjKOr/r/CirGGzQ3U8QZkVmid
5YhOTag01CV+jeNyTLvNI/N4TkPhUO0klHM9+RbfaVFFucchNmOQj373Zsq4ZbCD
HA2Z1Zcw4626NDhru2P4gijAOqJTvonZ9Zx/0+fZCrU4yd2mBjgj3Jh38QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdzffDd8eN3XLsgLNQjpkGu4QqbMB8GA1UdIwQY
MBaAFD/l2ao0eGuqFtRWvfOeyvtdlzD4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC1YWnFqUjRhNm9XMUZhOTg1N0stMTJYTVBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9hMmZlNjgtNzYxZC00ZTZjLTlkY2Qt
NTk0YzFhY2Q5ZGFmLzEvUC1YWnFqUjRhNm9XMUZhOTg1N0stMTJYTVBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9hMmZlNjgtNzYxZC00ZTZjLTlkY2QtNTk0YzFhY2Q5ZGFm
LzEvUC1YWnFqUjRhNm9XMUZhOTg1N0stMTJYTVBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxArGRUsT
47PrGpAtUK7YDf1i3kc6wC/agZWy+E4KBk1iyRsmrDcaNdxCVzHRLW2AnBEA3Q32
jK4p3lEg/+g2iJsUjsNE65V49ZGdvzBsAQfVXvzc5t6wYdEweHMa3XRnOynd2zzc
K+akK81+ErmxpsCSZ233xVLlVxh8CUJGdDVQzXVD2cTP3kMlA7N3O4DuY497iYar
dvXfILOPwZkdc2SExCtDHAh+1EgWMXdSut80L5maYCn7D3TCJokPjTiCkp0keTdB
NMjliNLBtIYHf1BFkZ0Q1tygQrAtYItZYPraKsFIHTH98juKe2PYvZaLjSBInqHW
OaPgfRfdSUnrTw==
-----END CERTIFICATE-----
Generated at Fri Mar 27 03:26:18 2026 by rpki-client