Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
File: P1umH85V_19gjjr27FYLN67CNf8.mft (raw, json)
Hash identifier: 7W3M7h8oYIdA4O/H2XjxNIWQhqo2YLk0le0QztvY5sY=
Subject key identifier: 7A:60:6F:44:44:ED:E9:48:B0:4A:1E:18:D6:F2:05:1A:3C:E1:69:04
Authority key identifier: 3F:5B:A6:1F:CE:55:FF:5F:60:8E:3A:F6:EC:56:0B:37:AE:C2:35:FF
Certificate issuer: /CN=3f5ba61fce55ff5f608e3af6ec560b37aec235ff
Certificate serial: 019D3376748F32944D0FD73A13EEDF3CCFEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
Manifest number: 06E2
Signing time: Sat 28 Mar 2026 08:01:34 +0000
Manifest this update: Sat 28 Mar 2026 08:01:34 +0000
Manifest next update: Sun 29 Mar 2026 08:01:34 +0000
Files and hashes: 1: P1umH85V_19gjjr27FYLN67CNf8.crl (hash: bFNVBSCBhfayiWyNHZF7nOhY4wvZBFXUmVtvhk7HapM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 08:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:76:74:8f:32:94:4d:0f:d7:3a:13:ee:df:3c:cf:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5ba61fce55ff5f608e3af6ec560b37aec235ff
Validity
Not Before: Mar 28 08:01:34 2026 GMT
Not After : Mar 29 08:01:34 2026 GMT
Subject: CN=7a606f4444ede948b04a1e18d6f2051a3ce16904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:49:a2:10:31:3e:bc:24:65:2e:c6:9c:7d:27:
94:9c:74:d9:69:54:1d:80:10:5e:b0:56:53:87:10:
4c:71:60:71:84:91:9c:12:2d:7d:75:c5:ec:e1:49:
96:fc:52:21:1f:e2:3c:cb:1b:91:1d:2f:f6:33:8a:
e9:a9:1b:d5:ef:dc:bc:d9:4a:71:ac:0f:0f:94:6e:
69:dd:b8:aa:7b:a9:02:00:c2:d5:8c:48:c1:ec:4a:
e4:c7:b7:85:00:cb:03:f3:54:6e:35:c9:7b:9c:bb:
7c:0f:b0:a6:69:7b:dc:97:b1:c9:e3:e4:71:29:47:
90:49:4d:f7:ee:39:65:49:bc:8c:f0:3b:e8:77:2c:
d8:a3:d6:03:a5:1c:76:6b:8a:72:62:6d:b5:05:c6:
8e:66:a0:2c:5e:66:b2:1a:2d:83:08:79:e7:3b:46:
55:6e:f2:7b:db:43:a6:11:09:50:96:3e:0b:49:1d:
de:92:b7:75:0e:5a:d5:5c:14:35:9f:48:af:56:c1:
45:a5:af:f4:33:04:94:22:a2:bb:67:d7:fc:0a:96:
9f:e6:51:03:84:77:c2:62:67:ce:3c:8c:23:90:31:
57:45:b5:46:19:0d:d8:de:22:06:5d:ac:63:73:8a:
a5:88:8b:b3:ca:d7:d7:d5:88:94:b5:40:05:db:ea:
b8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:60:6F:44:44:ED:E9:48:B0:4A:1E:18:D6:F2:05:1A:3C:E1:69:04
X509v3 Authority Key Identifier:
keyid:3F:5B:A6:1F:CE:55:FF:5F:60:8E:3A:F6:EC:56:0B:37:AE:C2:35:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:fd:9a:f3:8f:08:e1:a0:6f:57:13:dc:8b:36:7a:de:ed:b8:
0b:47:5c:92:6e:86:bc:01:0d:18:9a:c6:dc:94:44:44:50:fe:
d2:12:f3:76:0d:6a:bc:13:59:ed:bd:d0:2a:e7:cc:09:6c:de:
25:54:75:91:c5:1d:eb:08:04:75:f0:dd:18:c0:d7:a6:cd:4d:
2b:3d:48:6c:8f:c0:cf:c3:b7:49:4c:33:9b:a6:1a:d5:d1:c0:
8b:d9:cb:25:6f:20:d9:ef:bd:38:66:73:14:d8:b1:07:c8:d2:
1c:3c:ae:28:bf:1f:e7:8c:70:c9:45:c9:c9:83:82:b9:ac:3d:
7c:5d:ac:d8:69:67:13:6b:0f:ad:aa:58:ac:f7:54:36:64:63:
75:21:3d:65:98:4d:b3:d5:f5:ae:ce:52:2f:1a:53:40:08:f3:
52:b8:81:5a:c8:a5:be:c4:24:b8:ea:ca:1f:db:1f:cf:49:e4:
f7:7d:16:68:0b:55:03:cd:ed:11:4f:af:ea:6c:fc:4b:22:a3:
f4:c0:c6:a2:31:fd:53:63:47:80:f8:dc:73:c7:9f:05:f9:2a:
6b:9b:69:00:b2:80:29:fc:29:df:0e:1b:96:b9:bb:8e:83:19:
18:9d:fa:c9:f1:0c:d2:60:40:9d:e3:36:0b:2e:e8:e8:ff:93:
fa:d2:b9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:24 2026 by rpki-client