Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
File: p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft (raw, json)
Hash identifier: DE0S7x3ka7nNfuOZ8+3+lxZAehtGmS/bATVALTSNtRc=
Subject key identifier: 42:65:D8:28:D3:1A:E8:6C:FA:04:C2:B6:F0:31:8D:8F:40:E0:0F:0F
Authority key identifier: A7:77:20:C7:DC:1D:C3:ED:D1:D0:D4:7F:92:3B:CD:83:3F:06:AF:36
Certificate issuer: /CN=a77720c7dc1dc3edd1d0d47f923bcd833f06af36
Certificate serial: 019D26CCBE44541BC35FB9719E36CC3A1CB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
Manifest number: 088D
Signing time: Wed 25 Mar 2026 21:00:45 +0000
Manifest this update: Wed 25 Mar 2026 21:00:45 +0000
Manifest next update: Thu 26 Mar 2026 21:00:45 +0000
Files and hashes: 1: 21Jbw3da00l2RfX7zi9kRFgSmrM.roa (hash: HGuE0z5LJjKPviNSDptaL2Mkp6ZVk44S+NLMLMUZ9/k=)
2: 8HLfSggRfCQKqxfP5-UeXb00I7g.roa (hash: Z2nghP6xwioSl3jH3QUVmpIFKFZILHts7G8PmuEqq+Y=)
3: CYXPumOChSdoMa-5o0FCbfSsOYE.roa (hash: Ki1vUDNQjiNnTFWXimQLwQJZU9YwEW1064X+1jbc6MM=)
4: p3cgx9wdw-3R0NR_kjvNgz8GrzY.crl (hash: GSwuAXUJibzZ68otoYerOuxh281v6t8NqoKslZyfaXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:be:44:54:1b:c3:5f:b9:71:9e:36:cc:3a:1c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a77720c7dc1dc3edd1d0d47f923bcd833f06af36
Validity
Not Before: Mar 25 21:00:45 2026 GMT
Not After : Mar 26 21:00:45 2026 GMT
Subject: CN=4265d828d31ae86cfa04c2b6f0318d8f40e00f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ee:cf:c6:e0:e5:a9:5c:e9:2a:53:e7:ce:b5:
d5:86:aa:0f:2e:ca:10:52:c1:91:da:19:e7:97:a3:
ac:94:c2:bb:45:e0:40:48:d4:ee:ff:28:c7:3c:0f:
74:d7:6b:67:2c:df:02:2d:38:3a:7a:35:77:31:22:
ee:86:4f:4d:4a:f3:12:55:ab:e3:27:13:da:7e:ea:
88:b1:48:31:de:4e:5b:f5:d4:f5:5f:de:0b:7b:a7:
24:7d:ea:d9:b1:66:57:43:8b:72:3e:18:73:ab:51:
b0:ac:34:a4:08:ad:65:1f:b2:43:8b:73:ee:52:33:
54:01:03:e0:70:0f:26:9a:5a:6a:9f:7b:24:4f:44:
3e:9c:9d:73:0f:1a:96:d9:fb:da:61:9a:d8:13:1c:
cf:ea:e6:b9:36:5a:d3:e9:05:4d:33:f5:75:10:1b:
9e:06:ec:f5:52:6f:3a:56:c3:27:55:c1:b0:90:51:
c0:c5:04:ec:db:04:03:96:ab:81:72:e9:ab:46:ee:
9b:b8:83:7d:62:68:a6:e2:4a:85:a2:97:2a:01:02:
0e:66:16:b9:5f:29:9c:36:70:cf:4e:13:14:70:e3:
6b:d9:29:82:10:01:47:00:3c:87:8a:6f:25:f3:ff:
f1:4b:5b:11:3d:13:8f:6b:51:bf:ca:63:01:eb:11:
a2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:65:D8:28:D3:1A:E8:6C:FA:04:C2:B6:F0:31:8D:8F:40:E0:0F:0F
X509v3 Authority Key Identifier:
keyid:A7:77:20:C7:DC:1D:C3:ED:D1:D0:D4:7F:92:3B:CD:83:3F:06:AF:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c9:5f:43:11:5e:45:92:61:ea:2b:3c:b8:d8:94:b2:4e:70:
13:6c:d3:9f:99:b2:54:dd:7b:89:8f:08:d5:26:b5:b4:3f:56:
74:07:3b:f3:ab:df:58:bb:77:34:76:3d:1d:f5:3b:5c:65:f0:
b5:2a:19:1f:cd:ff:cc:d6:bc:2f:ac:b2:e3:0e:59:43:19:05:
b5:8c:da:8f:6b:94:78:13:41:38:a0:c4:56:cf:f8:23:9b:c9:
5e:a7:46:1f:ea:43:55:86:8c:d7:a7:ae:06:a2:f7:2a:6b:b0:
9b:63:a7:9f:4c:92:c1:9e:5c:5a:00:79:fb:97:1b:72:07:65:
9f:b7:a6:f8:61:4e:af:1c:e9:1a:1c:02:dd:4d:9f:53:18:34:
af:0f:db:26:76:0f:77:d5:eb:fa:f0:6c:40:f7:f3:b6:6c:f4:
ed:09:be:ac:4d:55:bf:dd:d2:f4:a2:e8:e0:1e:ca:7b:e2:71:
f3:c8:c4:5e:74:f9:2d:cf:3a:ff:13:f5:e7:70:18:98:d7:83:
e1:ce:4f:a2:73:af:e5:a9:a4:2e:d6:d2:da:c7:7f:27:47:68:
24:ad:ca:c7:b5:6b:36:a2:af:80:60:e6:6b:3c:5f:1a:a1:7f:
9f:57:e1:5a:6d:50:95:7b:b7:df:97:82:51:ba:bc:c4:29:35:
15:91:bc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:59:40 2026 by rpki-client