Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
File: P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft (raw, json)
Hash identifier: owDQ1feG6DD8WVK2vkEOH573vPbIV3TGu+RD5NK1lHs=
Subject key identifier: 44:6C:AA:72:09:A3:D9:77:01:F9:6A:04:6B:0A:E8:19:6B:D6:89:30
Authority key identifier: 3F:DA:63:02:13:CD:42:38:80:F9:FE:F1:6D:78:FB:43:6E:08:F2:47
Certificate issuer: /CN=3fda630213cd423880f9fef16d78fb436e08f247
Certificate serial: 019D2627E9DAC1979F4A8DD0A3BC62EE9C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
Manifest number: 0F66
Signing time: Wed 25 Mar 2026 18:00:43 +0000
Manifest this update: Wed 25 Mar 2026 18:00:43 +0000
Manifest next update: Thu 26 Mar 2026 18:00:43 +0000
Files and hashes: 1: P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl (hash: Eti4YNiX6KPHmxIC7SwnTfB4qtTRePebX3KwQpjysBE=)
2: qVEqTtkKfrVc5YzchSUNgfDRorc.roa (hash: K5fpw+GM90GMUvrPrbhqWZwOZsGaqvdsEI7pyNmXxYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:e9:da:c1:97:9f:4a:8d:d0:a3:bc:62:ee:9c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fda630213cd423880f9fef16d78fb436e08f247
Validity
Not Before: Mar 25 18:00:43 2026 GMT
Not After : Mar 26 18:00:43 2026 GMT
Subject: CN=446caa7209a3d97701f96a046b0ae8196bd68930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d2:28:fb:19:10:59:e4:b6:9e:2b:2b:43:ba:
9d:00:09:7d:02:c0:f1:77:dc:49:49:17:2f:95:c9:
5e:44:47:e2:ba:0b:8a:3a:c6:93:46:7d:65:93:f2:
2d:8f:37:e9:8e:88:21:43:84:5c:17:a9:9b:2a:c5:
37:a7:07:a6:20:f9:d3:78:2c:4c:b2:50:08:fb:de:
23:a8:3a:49:7f:c4:da:95:43:7a:b6:df:04:5b:e3:
40:72:c4:59:25:b1:cc:6b:ae:4b:67:82:87:4b:2b:
e7:6a:32:6c:2f:18:7a:1c:16:9a:45:a4:99:c7:8d:
ff:d2:91:1c:5a:07:d1:0a:6a:2a:c8:32:ee:10:b8:
63:e5:a0:0f:6c:ff:e1:b6:a9:3f:de:6b:d3:2c:03:
cd:94:b9:96:f9:e6:60:d8:08:1a:7f:a9:d7:34:17:
b2:9a:ad:32:25:e3:1d:d2:b2:f8:30:61:db:cd:09:
c6:d4:89:5b:d7:6e:a5:c4:86:23:ea:15:d1:37:99:
d5:c7:cf:e7:8d:e7:c5:ba:62:ba:2c:3c:c0:86:27:
d3:5c:81:c4:c3:99:2e:15:02:36:9e:d9:a8:d4:33:
b3:02:4f:6d:7f:22:02:5f:e2:cb:4f:9b:32:e9:03:
92:fa:23:ed:66:82:c3:e6:7a:a1:a6:ca:16:fc:04:
50:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6C:AA:72:09:A3:D9:77:01:F9:6A:04:6B:0A:E8:19:6B:D6:89:30
X509v3 Authority Key Identifier:
keyid:3F:DA:63:02:13:CD:42:38:80:F9:FE:F1:6D:78:FB:43:6E:08:F2:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:f9:e5:ac:f1:cd:7b:d8:5f:f2:16:66:25:a3:13:38:b4:33:
d2:d5:98:0e:fa:a5:29:41:36:25:4b:60:32:d7:26:cf:b6:b8:
4a:0a:bd:13:d1:2a:14:66:9a:18:67:6c:fc:ef:1e:d6:a1:dc:
39:b6:cd:82:a8:76:f8:92:31:b9:4f:5d:5e:b0:89:89:d1:08:
b3:5a:99:1c:87:71:f3:3c:36:38:58:95:23:79:14:b6:de:a0:
a2:c8:58:36:1a:78:d5:33:a7:f6:d1:9b:24:e7:2c:13:90:77:
fc:5f:2f:64:84:1c:71:36:e0:a0:94:03:d7:29:2c:8b:0f:c2:
1f:9a:2e:47:43:eb:42:4b:74:4a:ee:a3:72:ff:d0:b7:d1:24:
f2:72:14:f9:c2:bf:1c:6c:86:72:af:23:16:d1:b8:a7:32:dc:
8b:08:fa:63:89:2d:e5:fc:6d:9f:b7:e4:92:5b:63:53:07:03:
e5:21:33:5b:3e:ca:48:57:ce:77:14:61:0d:95:a6:ed:31:69:
c5:a1:11:9c:c5:1a:9c:ba:3c:e6:ea:19:6a:41:15:62:c5:87:
5b:3a:52:13:f4:d2:32:b9:18:c8:ba:df:15:97:4f:67:a3:65:
89:70:2d:ae:e1:02:8c:0c:3e:79:e6:62:4a:3e:aa:8a:cc:b0:
53:a6:9d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:44:06 2026 by rpki-client