Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.mft
File: p3tNEFqlxNZemaq2926tWJ5ih8w.mft (raw, json)
Hash identifier: BErPjWG1g7BVk+9P1jVFl6JaNGPWbS/l0yJWMm+UJz8=
Subject key identifier: 32:42:2E:2D:D8:2B:10:D3:88:BD:45:9D:64:17:4B:1C:CD:7C:07:F4
Authority key identifier: A7:7B:4D:10:5A:A5:C4:D6:5E:99:AA:B6:F7:6E:AD:58:9E:62:87:CC
Certificate issuer: /CN=a77b4d105aa5c4d65e99aab6f76ead589e6287cc
Certificate serial: 019D277207D44B32D6A870AD86DB4D20C347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3tNEFqlxNZemaq2926tWJ5ih8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.mft
Manifest number: 0683
Signing time: Thu 26 Mar 2026 00:01:17 +0000
Manifest this update: Thu 26 Mar 2026 00:01:17 +0000
Manifest next update: Fri 27 Mar 2026 00:01:17 +0000
Files and hashes: 1: p3tNEFqlxNZemaq2926tWJ5ih8w.crl (hash: INogGKOTc2cQqBW1p0ZVaHvo/hBSnSANk+hjKkrVTbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/p3tNEFqlxNZemaq2926tWJ5ih8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:07:d4:4b:32:d6:a8:70:ad:86:db:4d:20:c3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a77b4d105aa5c4d65e99aab6f76ead589e6287cc
Validity
Not Before: Mar 26 00:01:17 2026 GMT
Not After : Mar 27 00:01:17 2026 GMT
Subject: CN=32422e2dd82b10d388bd459d64174b1ccd7c07f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e2:4e:c7:0b:ab:e7:f3:3d:9b:ef:c9:53:22:
28:b2:d2:3c:2d:41:f6:f9:27:91:14:43:85:e9:35:
c7:2e:58:83:33:60:85:81:91:9c:09:9c:5f:05:4b:
ca:f8:9d:06:31:93:5b:5c:5a:aa:ba:dd:d6:31:5f:
a0:dc:f2:0a:1e:43:15:f3:8d:d9:f1:ff:6d:27:b4:
f8:8b:f3:22:e7:05:43:75:c3:58:1f:8a:eb:21:21:
48:cc:5e:36:44:db:9a:c4:1c:74:2a:b8:8b:ab:5b:
7f:d2:77:43:10:24:b1:fe:f9:fd:2d:8e:12:89:73:
d8:6b:d6:bd:6b:5d:a0:f1:c0:4e:e4:d9:90:bd:0d:
d4:2e:8a:b0:5b:3b:2c:56:74:64:c6:b3:b2:a3:3a:
d5:be:6d:c5:a5:98:d1:00:32:8f:80:94:4a:07:08:
c3:65:d3:0f:59:90:6e:67:fa:95:f7:53:0d:39:27:
42:3e:f5:9c:6e:ee:b1:13:28:b3:7d:38:a6:20:8f:
95:22:bf:3c:bb:3c:2e:b7:df:4a:be:ef:2d:c3:2d:
61:2c:b8:af:07:a1:eb:95:95:8f:ea:ec:65:02:46:
fd:a3:0c:31:89:bc:37:8a:0f:26:b3:0c:86:3f:46:
29:76:a1:7d:30:08:73:9a:37:b2:43:14:ae:e0:fb:
30:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:42:2E:2D:D8:2B:10:D3:88:BD:45:9D:64:17:4B:1C:CD:7C:07:F4
X509v3 Authority Key Identifier:
keyid:A7:7B:4D:10:5A:A5:C4:D6:5E:99:AA:B6:F7:6E:AD:58:9E:62:87:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3tNEFqlxNZemaq2926tWJ5ih8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:44:39:22:05:74:13:08:35:af:c7:88:83:a9:fd:63:63:c5:
d1:a9:d9:ac:04:be:cf:72:87:ca:34:59:f3:97:2a:a4:78:20:
29:ef:1d:f2:e9:be:5c:a6:9e:2d:00:24:09:7e:e2:a8:53:97:
df:c0:30:b1:ad:55:d1:aa:20:17:d4:44:fe:5e:ab:b3:21:f2:
3d:d7:e7:d6:be:a5:d9:8d:3d:2e:1b:21:0f:a5:32:78:23:51:
6b:de:b3:36:ae:57:cd:9d:51:5a:39:82:6f:ee:a6:64:64:0f:
6c:75:9f:29:79:50:45:51:6d:d4:d5:01:08:a3:76:54:69:7f:
a9:4b:f9:b4:33:8d:96:a2:4e:d9:6b:84:41:52:6a:9a:5a:61:
8b:f7:60:6e:35:a9:1b:98:97:74:0c:fb:46:a5:07:f1:0f:43:
cc:84:f0:26:ec:6e:9b:e3:25:57:9e:70:af:4c:55:45:a9:42:
26:0b:e3:2c:4f:4b:0b:33:7c:03:96:69:a6:98:8b:25:cb:76:
f3:a3:da:7f:49:70:17:36:4e:97:55:be:1f:ac:9f:45:5f:cf:
79:f9:08:90:a9:41:ae:c9:e0:76:3a:54:db:0f:5c:71:21:57:
df:9f:66:30:93:53:10:98:a2:53:42:73:c8:59:36:63:61:52:
73:ce:fb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:20:04 2026 by rpki-client