Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
File: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft (raw, json)
Hash identifier: xWrM7h/RANN/D4E8m6ZgSQPQF7GebHXgHY9bDhHstj4=
Subject key identifier: F0:92:64:27:76:B1:41:A9:37:6E:2B:76:A6:7D:33:54:E6:A2:17:CA
Authority key identifier: 3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
Certificate issuer: /CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Certificate serial: 019D2A3C70ED4422AD8AF5583AF6742163F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
Manifest number: 12BF
Signing time: Thu 26 Mar 2026 13:01:37 +0000
Manifest this update: Thu 26 Mar 2026 13:01:37 +0000
Manifest next update: Fri 27 Mar 2026 13:01:37 +0000
Files and hashes: 1: N4Y10Ua1e6-XUNgoamRd4hJuHM0.roa (hash: u/ttBIhtxAmlNbTBEOD7s6FeOeykOPEDDbaJasWKOp8=)
2: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl (hash: yWhD0ktkOl2MZitIGdG/UPMIQzy1R+SXz76gNb/xUHU=)
3: P7s6SkBNrB3yuV7739uVskU8ZG8.roa (hash: ZmJidlTbaMdMKLRXvEzc/VS03klVrtlteUmPhSejjJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:70:ed:44:22:ad:8a:f5:58:3a:f6:74:21:63:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Validity
Not Before: Mar 26 13:01:37 2026 GMT
Not After : Mar 27 13:01:37 2026 GMT
Subject: CN=f092642776b141a9376e2b76a67d3354e6a217ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:94:31:d1:17:a9:25:5e:68:51:7f:9a:52:4d:
a9:85:31:2e:c9:5f:36:ee:0e:0b:d5:6c:d6:5a:b0:
4a:ad:ad:d7:ad:b5:d6:9f:bd:d2:f5:10:04:f3:05:
f6:b3:23:37:44:8a:af:79:56:29:48:82:c1:1f:5a:
76:94:1b:79:75:d9:98:6e:a8:d3:2f:ec:c8:e8:6e:
0b:25:a9:44:0f:b5:de:88:9a:73:8a:14:09:1c:6a:
a0:ef:c3:06:f5:90:38:cf:7d:19:f2:5e:f4:53:7b:
a3:d6:1b:8e:64:cb:62:a4:bd:6c:af:7e:5c:7f:86:
5e:ad:d5:c8:78:20:d3:eb:18:6b:6c:1a:05:e4:53:
86:9e:ae:9f:a9:b5:32:fa:33:be:05:f5:e6:89:d7:
cd:9d:fe:db:52:0e:70:90:06:8b:5e:7c:54:44:98:
cb:2e:17:c9:00:fa:88:17:02:b6:c9:23:c0:8f:0b:
77:35:f2:88:34:66:0f:89:18:a2:d4:d9:88:e0:b0:
9e:4b:64:77:98:77:31:96:af:c1:1c:39:4b:1a:e8:
50:f5:e5:53:9c:18:37:f6:58:60:b3:54:10:f2:cf:
c9:e3:fe:af:44:c2:a9:a0:e3:ef:bc:fa:a4:0c:2e:
fb:40:e9:98:5a:48:f8:a0:98:24:83:d5:16:34:a4:
0a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:92:64:27:76:B1:41:A9:37:6E:2B:76:A6:7D:33:54:E6:A2:17:CA
X509v3 Authority Key Identifier:
keyid:3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b2:2f:08:5f:1d:e2:7f:96:3b:95:95:ea:69:cb:e5:2d:83:
a7:41:15:42:97:14:ea:41:f0:1b:50:4b:3d:81:5f:7d:23:5b:
0b:ba:7f:df:04:16:8d:33:7d:d5:88:81:99:82:50:48:e0:63:
41:2e:f5:3b:46:91:51:e2:b1:11:a7:f1:5e:55:0b:81:74:2c:
60:39:f6:de:db:fb:32:92:3e:66:43:3a:07:be:87:3a:5a:b4:
ff:5d:8d:b3:25:bb:81:bd:86:10:16:51:9c:28:bd:79:3b:74:
65:2a:31:f2:48:8a:50:ea:b7:a0:ce:2f:ed:c8:c5:18:46:16:
f5:58:73:9f:41:c2:f1:f7:58:92:89:21:88:73:4c:3c:0a:31:
35:ff:61:85:ab:d8:a7:d5:5e:f2:d5:86:47:6a:ad:49:33:fb:
af:32:02:4a:89:aa:a5:6d:f6:6e:fb:77:8c:03:b1:50:c7:04:
e0:8d:26:6e:e4:a0:b3:a4:d1:97:af:c7:aa:50:0f:92:a6:71:
49:59:5a:73:4b:0f:39:4d:42:04:f6:4f:45:fa:aa:47:b7:8b:
d3:d1:b8:7c:b6:b9:49:9c:7c:b2:7b:aa:f9:d4:d2:91:ef:19:
a0:a9:22:98:ac:97:c8:fd:84:53:a8:83:72:71:79:e2:da:68:
50:9f:09:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:28:24 2026 by rpki-client