Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft
File: P591E-0Eyp_o96RU6CeY0E8agKg.mft (raw, json)
Hash identifier: yS5pYGDxIY5wfFPQi5/Y/8sFHCcjm4P7ExHMtWKw+J4=
Subject key identifier: 8D:46:20:41:A3:77:D3:80:FF:DD:67:42:09:45:C7:1C:F5:18:55:04
Authority key identifier: 3F:9F:75:13:ED:04:CA:9F:E8:F7:A4:54:E8:27:98:D0:4F:1A:80:A8
Certificate issuer: /CN=3f9f7513ed04ca9fe8f7a454e82798d04f1a80a8
Certificate serial: 019D27040406E5E1634217A966432045CC4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P591E-0Eyp_o96RU6CeY0E8agKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft
Manifest number: 07A7
Signing time: Wed 25 Mar 2026 22:01:07 +0000
Manifest this update: Wed 25 Mar 2026 22:01:07 +0000
Manifest next update: Thu 26 Mar 2026 22:01:07 +0000
Files and hashes: 1: P591E-0Eyp_o96RU6CeY0E8agKg.crl (hash: QoTcWBac+dYpO+0xtJgHzWIoLdrwOYzQb7ckiRbFO9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/P591E-0Eyp_o96RU6CeY0E8agKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:04:06:e5:e1:63:42:17:a9:66:43:20:45:cc:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f9f7513ed04ca9fe8f7a454e82798d04f1a80a8
Validity
Not Before: Mar 25 22:01:07 2026 GMT
Not After : Mar 26 22:01:07 2026 GMT
Subject: CN=8d462041a377d380ffdd67420945c71cf5185504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2c:47:7b:e5:9e:f7:fb:65:a2:fe:e7:25:27:
6d:47:8c:9c:54:95:e1:ff:ad:4d:22:e9:ea:03:09:
76:ae:5f:25:20:24:2a:c7:8f:a7:bd:5f:17:84:83:
a6:4c:50:c7:23:30:88:58:62:47:89:f9:ef:a2:10:
41:db:2e:08:38:00:b6:9c:a4:1c:28:b1:01:93:2d:
b4:c4:df:e2:5a:f2:d9:79:c6:66:21:cb:d8:43:55:
67:d9:f0:9d:15:74:74:08:6c:8e:a2:06:d6:2a:8d:
b3:ad:8e:0b:42:19:d1:f2:c7:7b:47:b5:b4:a8:4c:
50:53:1e:3b:64:a4:cc:51:02:78:4d:0c:2d:e4:cb:
7c:ef:43:f1:f4:75:17:d8:0f:73:ac:31:ba:1c:b3:
b6:c4:36:e7:d3:de:1f:a2:f8:af:5d:77:24:2f:69:
44:b4:60:62:bb:c0:4d:01:38:c7:5a:db:84:9d:af:
90:6b:6a:bb:4f:59:7f:d7:6f:bd:d8:3f:42:69:38:
6b:1a:74:17:29:03:41:55:7a:0c:12:69:2c:eb:76:
1d:a6:a0:e4:11:45:5a:6f:ec:49:6a:6a:c8:8a:e3:
d1:2b:79:36:dc:10:f5:28:e1:6a:99:5e:74:e4:19:
cf:de:c5:91:77:5c:ce:58:e8:61:bf:f9:87:a7:e6:
6b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:46:20:41:A3:77:D3:80:FF:DD:67:42:09:45:C7:1C:F5:18:55:04
X509v3 Authority Key Identifier:
keyid:3F:9F:75:13:ED:04:CA:9F:E8:F7:A4:54:E8:27:98:D0:4F:1A:80:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P591E-0Eyp_o96RU6CeY0E8agKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:13:8e:a3:be:4d:c5:b8:bf:68:2e:23:4c:5b:19:a4:fe:42:
d8:b1:f8:a5:44:33:9b:de:3b:a8:c6:63:10:54:03:52:62:43:
f6:2b:61:f6:4c:44:21:2e:f2:09:29:71:37:a3:86:ea:8e:bb:
db:de:37:a0:24:3e:08:64:5e:bd:a9:e0:86:42:3b:dd:0c:61:
09:d4:5a:e6:46:bd:e0:ec:8b:79:cd:c9:2e:af:6f:d4:15:c5:
f3:80:72:d7:92:a8:b3:d7:c8:02:31:69:96:9d:81:78:9d:92:
a2:28:c3:31:7d:e5:63:48:70:21:90:b8:04:38:22:e7:a0:56:
e9:04:9e:14:c4:28:a6:f3:e4:a4:dd:15:ee:fe:8c:e7:ac:49:
b8:93:9f:b2:9b:32:21:a0:7b:31:10:f9:19:e9:48:d9:c0:ee:
de:64:51:91:30:0f:be:35:fd:0d:9a:4c:89:8b:fb:6f:f6:e2:
9b:0f:9b:b2:5f:4e:35:7a:4f:3e:7c:f6:5d:9f:84:dc:b3:2d:
ae:2d:87:86:13:6d:85:2c:0e:71:a5:bd:62:e6:ae:3a:76:96:
06:2d:52:f6:88:dc:d2:e3:c6:92:cf:0f:08:ca:4d:ed:d3:b7:
81:27:0b:cb:37:47:6a:dc:73:92:1b:72:68:01:4c:37:c2:81:
5e:60:29:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBAQG5eFjQhepZkMgRcxNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmOWY3NTEzZWQwNGNhOWZlOGY3YTQ1NGU4Mjc5OGQwNGYx
YTgwYTgwHhcNMjYwMzI1MjIwMTA3WhcNMjYwMzI2MjIwMTA3WjAzMTEwLwYDVQQD
Eyg4ZDQ2MjA0MWEzNzdkMzgwZmZkZDY3NDIwOTQ1YzcxY2Y1MTg1NTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyxHe+We9/tlov7nJSdtR4ycVJXh
/61NIunqAwl2rl8lICQqx4+nvV8XhIOmTFDHIzCIWGJHifnvohBB2y4IOAC2nKQc
KLEBky20xN/iWvLZecZmIcvYQ1Vn2fCdFXR0CGyOogbWKo2zrY4LQhnR8sd7R7W0
qExQUx47ZKTMUQJ4TQwt5Mt870Px9HUX2A9zrDG6HLO2xDbn094fovivXXckL2lE
tGBiu8BNATjHWtuEna+Qa2q7T1l/12+92D9CaThrGnQXKQNBVXoMEmks63YdpqDk
EUVab+xJamrIiuPRK3k23BD1KOFqmV505BnP3sWRd1zOWOhhv/mHp+ZrEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1GIEGjd9OA/91nQglFxxz1GFUEMB8GA1UdIwQY
MBaAFD+fdRPtBMqf6PekVOgnmNBPGoCoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDU5MUUtMEV5cF9vOTZSVTZDZVkwRThhZ0tnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8wZGYzMGUtYjBiZi00ZDEwLWEwNjYt
NjkxN2NiNGM5OWJjLzEvUDU5MUUtMEV5cF9vOTZSVTZDZVkwRThhZ0tnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8wZGYzMGUtYjBiZi00ZDEwLWEwNjYtNjkxN2NiNGM5OWJj
LzEvUDU5MUUtMEV5cF9vOTZSVTZDZVkwRThhZ0tnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZhOOo75N
xbi/aC4jTFsZpP5C2LH4pUQzm947qMZjEFQDUmJD9ith9kxEIS7yCSlxN6OG6o67
2943oCQ+CGRevanghkI73QxhCdRa5ka94OyLec3JLq9v1BXF84By15Kos9fIAjFp
lp2BeJ2SoijDMX3lY0hwIZC4BDgi56BW6QSeFMQopvPkpN0V7v6M56xJuJOfspsy
IaB7MRD5GelI2cDu3mRRkTAPvjX9DZpMiYv7b/bimw+bsl9ONXpPPnz2XZ+E3LMt
ri2HhhNthSwOcaW9YuauOnaWBi1S9ojc0uPGks8PCMpN7dO3gScLyzdHatxzkhty
aAFMN8KBXmApcA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:48 2026 by rpki-client