Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
File: PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft (raw, json)
Hash identifier: C2bs9iEq8bm/Jrrebxjrv19OGdLUWXiFSOwNCtXRbzE=
Subject key identifier: 92:8E:0E:CB:81:05:30:A9:91:B7:7E:AB:DA:0E:ED:08:9F:BD:9D:4A
Authority key identifier: 3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
Certificate issuer: /CN=3cc94ff479778651a605121f1ffe678196328f35
Certificate serial: 019D2816F9D3C0F82D7DBC67ACB5EE539081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 03:01:27 +0000
Manifest this update: Thu 26 Mar 2026 03:01:27 +0000
Manifest next update: Fri 27 Mar 2026 03:01:27 +0000
Files and hashes: 1: 5ApvAMni12n_Tl97hQfErFu1d6c.roa (hash: CMR/4LXkDxQdsem1khNHlRD0gmxgV2kLwB9hrxJKQb0=)
2: PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl (hash: KRy6SupiPiiO7MVo653X4OUzgyQ0jKlmaDrfQukDgAQ=)
3: XuBRU-qTaIe3iIMhEcyOCN_o1WE.roa (hash: aMfF2+emhhqGrwHfGQBas1ojIcyc28sSmp2XmBjy3No=)
4: kq8a46tLEeqaFqiTieRfOg3LWKo.roa (hash: qYlRFmIgG79GEajldFvoiEkS/VYV56G5bugYQU8ZN5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:f9:d3:c0:f8:2d:7d:bc:67:ac:b5:ee:53:90:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cc94ff479778651a605121f1ffe678196328f35
Validity
Not Before: Mar 26 03:01:27 2026 GMT
Not After : Mar 27 03:01:27 2026 GMT
Subject: CN=928e0ecb810530a991b77eabda0eed089fbd9d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e5:fb:5e:d7:70:80:ab:6a:d7:87:82:d6:59:
de:7d:cb:48:bd:3e:3c:5e:90:7c:ae:1c:9e:af:56:
37:5e:e6:6c:03:52:1d:5c:12:e3:2e:f4:4a:83:00:
1e:62:e9:6c:82:2a:b6:3f:46:ec:e1:2c:7a:9b:12:
80:66:14:bc:7a:75:cc:13:b4:8c:b1:00:a5:d0:30:
d7:60:59:3c:c9:cb:68:2b:cc:41:88:c4:5c:27:55:
55:22:97:4e:de:0d:5b:4b:4c:bd:83:af:8f:03:a6:
af:77:72:a3:ee:e5:c4:dc:0a:24:bd:ae:67:31:f0:
5c:a7:be:76:d7:b9:57:fe:69:00:dd:bf:90:53:0c:
d7:0d:2c:70:56:02:ae:c3:76:01:7f:34:51:d7:68:
db:c0:fa:a3:79:8f:d5:df:b0:4d:08:15:5d:64:22:
eb:c6:7a:67:db:ba:fc:cb:3d:db:22:f2:5d:a7:7b:
e5:55:b9:78:6c:fc:03:6c:44:99:d8:73:3b:91:b3:
c7:27:55:81:a4:61:64:51:d8:f3:0a:25:2b:bc:40:
e9:10:5e:5b:ef:70:e6:43:d5:03:6c:a7:7c:7b:c8:
6c:9f:b9:c8:02:54:d5:e3:a2:13:72:3c:05:bb:d0:
35:99:ff:d0:17:12:b8:4c:10:80:62:08:45:86:a6:
d1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:8E:0E:CB:81:05:30:A9:91:B7:7E:AB:DA:0E:ED:08:9F:BD:9D:4A
X509v3 Authority Key Identifier:
keyid:3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:bf:9d:96:41:02:fa:4f:7a:81:2b:c9:f8:fd:32:65:a9:f4:
ab:3a:f2:cb:07:b6:c7:12:9c:9d:33:d4:43:02:b4:78:f4:2b:
79:67:50:98:6b:d9:cb:87:0e:a3:22:c3:5b:1e:a4:f7:ab:68:
1d:9f:3b:e6:5b:69:bc:5f:5f:7b:86:cd:27:b0:a2:63:b1:17:
f8:0d:3f:0e:fb:d1:27:fb:ca:9b:1f:21:ed:85:69:34:ea:c1:
c8:85:d5:2c:19:15:87:ae:a8:d2:82:1f:7f:72:36:37:b6:30:
7b:87:47:56:2b:92:c2:ec:cb:29:67:bb:57:8c:4a:c6:a4:1b:
8a:12:c2:69:e3:12:d1:1c:9d:9f:03:98:fd:f0:74:bc:14:af:
4d:cc:36:72:ca:89:58:16:20:6c:3f:a3:23:db:51:22:8a:98:
7a:78:d1:fb:1c:b5:1a:da:4c:72:a6:c2:99:ae:b0:a7:e7:26:
73:7d:7c:83:c8:b6:33:fa:88:2f:88:70:a1:af:81:e5:50:64:
3c:2a:fc:fd:2e:1a:1a:52:ca:b8:ac:a3:46:9c:12:d2:c6:58:
4c:9f:17:7b:2f:d4:fb:c9:27:b6:05:f1:5d:e9:d0:e8:80:9c:
37:97:62:bf:47:ed:37:76:00:e0:ce:49:a5:0d:b0:e5:70:0c:
f5:7e:f2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:33:57 2026 by rpki-client