Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft
File: P2LKnF7__TIKvS2Px-j4Nee70es.mft (raw, json)
Hash identifier: mtzuLYnIQboUJpQbBo/3HiZGh1DaAVwWTxnXNwuzQEo=
Subject key identifier: FD:F0:C3:6C:7C:4D:0F:28:B9:A0:3A:0D:7F:BB:38:BE:BF:83:2E:82
Authority key identifier: 3F:62:CA:9C:5E:FF:FD:32:0A:BD:2D:8F:C7:E8:F8:35:E7:BB:D1:EB
Certificate issuer: /CN=3f62ca9c5efffd320abd2d8fc7e8f835e7bbd1eb
Certificate serial: 019D28BBCA91A8A6EA8FB8BFD9153A992BC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P2LKnF7__TIKvS2Px-j4Nee70es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft
Manifest number: 0C80
Signing time: Thu 26 Mar 2026 06:01:28 +0000
Manifest this update: Thu 26 Mar 2026 06:01:28 +0000
Manifest next update: Fri 27 Mar 2026 06:01:28 +0000
Files and hashes: 1: P2LKnF7__TIKvS2Px-j4Nee70es.crl (hash: cEAAttUyW8PyEo8cJdNiZ/CGu51Nrz+uNotaCaqf6L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft
rsync://rpki.ripe.net/repository/DEFAULT/P2LKnF7__TIKvS2Px-j4Nee70es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:ca:91:a8:a6:ea:8f:b8:bf:d9:15:3a:99:2b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f62ca9c5efffd320abd2d8fc7e8f835e7bbd1eb
Validity
Not Before: Mar 26 06:01:28 2026 GMT
Not After : Mar 27 06:01:28 2026 GMT
Subject: CN=fdf0c36c7c4d0f28b9a03a0d7fbb38bebf832e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6c:44:dd:0c:ec:1b:b4:64:c4:86:a6:72:e1:
fc:64:4e:7e:b7:f5:06:8a:eb:c4:41:28:69:d9:22:
d6:1a:f6:12:36:ee:98:8b:bf:dc:3a:12:47:02:69:
16:b8:7c:e7:fe:ab:6f:95:7a:58:39:20:65:8f:d3:
4a:7c:f2:cc:a8:d0:f4:34:25:32:dd:16:10:06:c6:
ca:4e:f7:04:93:a6:40:e0:4a:58:a2:65:0d:ed:7f:
86:44:31:04:51:ee:cd:7f:e6:c0:cd:13:0e:89:b2:
2e:1d:d4:df:0f:d4:ee:1c:92:ee:3d:d9:9a:78:9a:
0b:53:b8:c6:69:73:f9:63:85:83:e8:46:68:ed:b4:
72:5c:7c:4b:10:23:23:32:f1:94:6c:7d:61:ad:ae:
cf:6a:78:21:5b:09:39:78:d5:b5:eb:b3:12:e7:42:
69:32:b7:e8:3c:5e:0c:10:c8:32:d2:4a:be:47:99:
a4:8c:11:0e:f0:60:eb:e2:71:cf:32:81:12:37:d0:
40:30:d0:87:8d:04:a8:80:ff:1d:7b:f2:8d:09:92:
b3:0a:75:6f:03:b2:68:da:69:ee:1c:5f:c3:e5:1a:
e0:d6:df:08:e9:cb:92:1b:59:b5:b5:e5:29:de:35:
8a:ff:ad:6f:39:a8:aa:6c:a5:d7:31:90:76:04:b0:
ad:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F0:C3:6C:7C:4D:0F:28:B9:A0:3A:0D:7F:BB:38:BE:BF:83:2E:82
X509v3 Authority Key Identifier:
keyid:3F:62:CA:9C:5E:FF:FD:32:0A:BD:2D:8F:C7:E8:F8:35:E7:BB:D1:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2LKnF7__TIKvS2Px-j4Nee70es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:59:42:e5:17:b8:4f:55:ad:05:f0:3e:a0:6e:88:94:7e:25:
fe:1a:b6:11:95:41:7f:c6:17:c7:11:87:fc:64:f7:f7:23:2d:
b5:50:9d:32:91:12:3e:c9:c0:23:5c:ac:7c:10:3c:10:c7:03:
bd:de:3b:b1:7f:a2:57:25:36:0a:cc:95:ff:d4:d8:e2:06:e9:
4e:ea:62:ec:73:30:5f:46:47:c0:48:9b:3d:32:09:b1:b5:dd:
57:f0:fe:8d:01:9b:de:1b:06:14:ff:e9:43:a2:1d:77:1d:9e:
2b:23:bd:5e:98:38:73:dd:d4:cc:f3:09:d1:7a:8b:8f:5d:2f:
2c:62:47:ed:c5:0e:a2:f0:86:77:c1:03:1c:15:f2:b1:69:3b:
98:e6:b5:ed:6f:63:46:ec:4a:86:75:1b:58:dc:84:35:73:0b:
b6:50:83:cc:fc:71:a1:9c:7d:b3:66:08:6b:c2:4b:08:e6:08:
e8:19:01:f7:b1:06:b0:11:74:bf:ac:67:ca:e4:7b:72:1b:6c:
fe:16:58:15:90:e5:89:c9:f0:2e:c8:d4:b5:d2:22:20:e8:ca:
9f:4e:11:c2:0c:4b:01:c1:c0:31:65:76:15:30:14:86:af:aa:
79:48:6d:67:76:86:07:a3:78:b0:4e:c8:11:7b:08:0d:e2:10:
ca:31:5a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:38:34 2026 by rpki-client