Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
File: Pt7grog0cFCIgFBEvnXHQDsdx-I.mft (raw, json)
Hash identifier: cfKrmeyIb+JrjsVRdVNUnn0FvzG6w8gJbavq5Y7L4/A=
Subject key identifier: 25:B9:A6:3B:66:51:56:FC:C9:10:12:2C:91:60:D2:C5:10:BA:A4:F5
Authority key identifier: 3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2
Certificate issuer: /CN=3edee0ae8834705088805044be75c7403b1dc7e2
Certificate serial: 019D281702744DA1AEB825F3B1ABADD246BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
Manifest number: 151C
Signing time: Thu 26 Mar 2026 03:01:29 +0000
Manifest this update: Thu 26 Mar 2026 03:01:29 +0000
Manifest next update: Fri 27 Mar 2026 03:01:29 +0000
Files and hashes: 1: N0lWMYy9L6tUgt5C_ALrdVgjFpM.roa (hash: 3TxHIvizHgvT9zapL1jqZMumyRmsqmWLMCRlhTI/E5A=)
2: Pt7grog0cFCIgFBEvnXHQDsdx-I.crl (hash: StrY6YueIO+rYBK8tgolbtDu6KxKAIsNJLNefwdRago=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:17:02:74:4d:a1:ae:b8:25:f3:b1:ab:ad:d2:46:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3edee0ae8834705088805044be75c7403b1dc7e2
Validity
Not Before: Mar 26 03:01:29 2026 GMT
Not After : Mar 27 03:01:29 2026 GMT
Subject: CN=25b9a63b665156fcc910122c9160d2c510baa4f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4c:0f:b8:93:a9:39:b6:da:01:4f:43:cd:c9:
1b:83:57:73:68:c2:9f:82:13:9e:bd:3b:f9:28:a5:
16:1e:c5:51:43:2a:fe:ba:38:d6:7b:72:ae:d1:c4:
cf:5f:e0:b7:dd:06:fd:c4:ad:3a:9c:43:58:b4:15:
64:74:11:46:aa:fc:b5:87:66:4d:98:45:f4:41:15:
d5:9f:c5:da:58:7f:f6:6d:10:ab:3c:ca:cd:1e:9f:
4f:f1:91:87:24:47:86:fb:29:34:5b:c2:79:7f:bd:
88:5a:a2:51:7d:96:ff:6e:36:8b:c6:18:5f:05:0b:
36:a9:16:58:1a:10:fb:3f:ff:7e:0a:94:08:a6:fe:
e7:4f:db:13:77:d8:f8:86:e8:8e:e5:2b:be:60:fb:
82:aa:d2:9d:81:47:a4:49:49:45:98:27:50:dd:1d:
aa:77:f7:87:bc:df:96:e9:53:45:18:d6:bc:0f:0d:
d8:ff:33:0e:60:a7:94:c7:71:6f:d2:d6:5c:09:dd:
24:d5:fb:a6:5b:e4:4c:b3:dc:ac:f6:86:7d:b1:fc:
b5:b0:e5:06:82:1e:04:44:90:57:50:49:c8:17:f1:
2a:42:0d:e7:1d:b2:3b:00:b0:b7:78:04:63:22:00:
a3:9d:f0:ee:6f:12:e5:89:03:98:bd:68:6e:4b:aa:
15:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B9:A6:3B:66:51:56:FC:C9:10:12:2C:91:60:D2:C5:10:BA:A4:F5
X509v3 Authority Key Identifier:
keyid:3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:fa:4d:1a:65:57:f0:68:99:8a:fc:e9:8c:29:54:df:96:7f:
19:f0:9b:65:60:1d:ae:bc:48:42:68:f0:7a:cb:fc:bd:1c:62:
97:89:12:39:30:70:df:0a:c7:99:0f:d8:88:70:e0:4e:4a:f3:
6f:b3:84:44:b8:f5:bb:f4:83:7c:90:f7:d4:cd:69:ea:5a:7a:
0f:d7:73:c0:61:20:35:f3:ef:0a:5a:03:91:c0:b9:09:ba:6a:
c6:80:16:da:74:e6:f9:19:b2:43:ac:8d:69:0c:c3:2b:e6:44:
18:8a:fb:e0:b3:c0:ca:a1:89:41:27:d2:2f:15:c7:35:78:70:
af:d3:22:6e:0a:9c:2f:a5:40:be:81:76:d0:26:5a:30:23:19:
3a:35:13:80:59:75:3a:3f:32:f6:9b:b3:b1:87:de:67:15:a2:
5d:37:1d:ff:a9:e1:22:f4:d0:67:eb:f8:e2:82:ba:5b:99:fd:
b0:27:89:fd:33:0b:da:97:cf:54:da:4c:e4:e4:42:53:69:06:
80:90:fe:7a:5f:64:fa:03:95:af:23:a5:e0:eb:b4:00:11:d1:
20:04:df:81:27:ae:b9:36:ed:fe:29:66:50:09:b2:78:30:80:
3c:6b:00:a4:cf:fd:77:b9:10:40:63:29:cb:19:f6:5a:e0:1b:
36:13:3e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:27 2026 by rpki-client