
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
File: P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft (raw, json)
Hash identifier: YdlTmKPXCqm95TuXTqa+6HVltnQYYJ8aJmnjrTvACow=
Subject key identifier: F8:7F:4D:D9:66:B2:0A:59:70:4D:FD:71:F1:BC:91:76:D5:30:AA:D1
Authority key identifier: 3F:A4:0F:CF:A8:36:BB:0B:5B:3E:12:94:04:CB:31:E8:52:50:B0:1F
Certificate issuer: /CN=3fa40fcfa836bb0b5b3e129404cb31e85250b01f
Certificate serial: 019D29297E8440C5439C5B20BFB71EC8175F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 08:01:18 +0000
Manifest this update: Thu 26 Mar 2026 08:01:18 +0000
Manifest next update: Fri 27 Mar 2026 08:01:18 +0000
Files and hashes: 1: 1KXvQIh327qa8zgtbWEnrPoCoxU.roa (hash: TbQTpElFCKmdyIXdOK2W/0UzDCWZ7/Rjwh/zQFAlE/U=)
2: P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl (hash: GORTNIBZiMhcjhqV/bG83g5tL4s4sbPH/PdSS7IGikI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:7e:84:40:c5:43:9c:5b:20:bf:b7:1e:c8:17:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fa40fcfa836bb0b5b3e129404cb31e85250b01f
Validity
Not Before: Mar 26 08:01:18 2026 GMT
Not After : Mar 27 08:01:18 2026 GMT
Subject: CN=f87f4dd966b20a59704dfd71f1bc9176d530aad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dd:4a:32:4f:8a:7a:8f:20:2f:4a:8d:38:f6:
d5:63:97:86:c6:ce:b5:f9:0f:fb:c6:9c:8d:ff:19:
40:b1:38:2b:6f:07:bd:7a:4f:5a:5b:d4:06:1a:cf:
5f:9e:bc:c6:87:59:da:5c:5f:28:6b:e6:7c:9f:00:
e0:79:ac:92:41:cf:66:89:74:91:38:d1:39:ce:61:
be:ce:7d:bf:2b:e2:f2:be:35:15:72:28:03:da:0c:
7a:b3:e2:b7:3f:0a:d0:aa:71:be:46:5b:81:8c:c4:
46:7e:f5:53:b7:74:55:ec:ec:7d:6b:1d:c2:0c:b9:
7c:50:40:a8:b8:38:7e:97:ac:3c:b9:f9:2f:d7:45:
56:16:8b:e7:b4:12:c6:aa:df:54:5b:3c:70:1e:42:
63:36:49:ba:6b:d5:5e:8e:f2:48:ea:bb:a8:2d:46:
07:89:da:a4:97:51:ca:d2:51:ef:0b:bf:bd:a5:eb:
6e:74:aa:3a:ee:3f:71:ac:61:7a:75:f9:0c:f1:70:
98:c0:df:f3:23:79:eb:61:ac:7b:6e:a4:18:4d:d7:
86:a7:67:fe:eb:42:79:2f:4f:06:b8:5f:6a:2e:cc:
f3:7b:60:1e:60:d7:53:05:6a:b8:91:f6:d6:b6:5c:
4a:c3:08:f5:c1:da:71:9c:28:b0:81:cb:a0:f8:e3:
9d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7F:4D:D9:66:B2:0A:59:70:4D:FD:71:F1:BC:91:76:D5:30:AA:D1
X509v3 Authority Key Identifier:
keyid:3F:A4:0F:CF:A8:36:BB:0B:5B:3E:12:94:04:CB:31:E8:52:50:B0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:3f:7a:bd:3b:bc:ae:04:ad:53:27:16:76:60:36:b8:19:de:
de:5b:d5:8f:84:2b:c9:18:5e:c4:f8:f3:7c:d1:f2:06:da:98:
fc:88:20:e6:88:60:7f:eb:89:89:05:c1:02:ee:da:c7:49:88:
51:72:e8:57:15:9d:3c:7b:8a:e3:87:2f:22:05:0a:74:42:56:
2c:a9:87:e6:83:94:21:00:b0:7e:6e:82:ef:27:8a:1c:a3:a1:
e7:26:31:0b:77:9f:07:db:35:05:23:85:71:c3:d9:7c:84:76:
8d:21:59:b8:0c:33:7f:97:b2:de:46:81:1d:86:86:9f:f5:e5:
4b:e2:80:ac:47:62:4d:71:da:96:5c:86:5b:c9:c1:a5:71:d3:
bf:ed:94:d5:4c:b0:da:55:66:ed:e2:a8:d8:7a:f4:65:1b:ea:
db:cc:f9:60:c3:69:03:9c:be:ab:84:da:3e:03:f8:a7:5f:77:
cb:72:bd:a3:fd:30:bf:16:e6:a1:73:b2:f2:f0:04:2d:96:d5:
4c:a2:76:db:4d:04:2e:c7:75:74:44:25:48:46:65:be:15:29:
a8:c8:4a:c1:37:05:77:4d:7e:a3:7c:98:93:ac:fa:81:79:84:
0b:f6:6c:99:ba:a5:0f:73:e2:ae:d7:d8:99:97:df:5e:9a:81:
a2:a2:e2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:55:02 2026 by rpki-client