Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.mft
File: Pt1VHQpjbbS1B3xkjZ2Hva2quB4.mft (raw, json)
Hash identifier: 6KxFqkzMgahjjmrwEi1Qz5Ob3gRaP/WutZOoA79OMRE=
Subject key identifier: F6:B4:BD:65:A2:74:CC:8D:D1:6E:55:69:59:83:0E:2F:E1:BE:7F:83
Authority key identifier: 3E:DD:55:1D:0A:63:6D:B4:B5:07:7C:64:8D:9D:87:BD:AD:AA:B8:1E
Certificate issuer: /CN=3edd551d0a636db4b5077c648d9d87bdadaab81e
Certificate serial: 019D2A7242D9FDE8EF8AC70C2DFE23B66717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.mft
Manifest number: 0D26
Signing time: Thu 26 Mar 2026 14:00:24 +0000
Manifest this update: Thu 26 Mar 2026 14:00:24 +0000
Manifest next update: Fri 27 Mar 2026 14:00:24 +0000
Files and hashes: 1: Pt1VHQpjbbS1B3xkjZ2Hva2quB4.crl (hash: EkwJNwcLXQbt/yzcKr/3X0pC+aK8Y9lKr06VDFERVZU=)
2: _fVCgYixk1-0xn3hU8B4CDuES8A.roa (hash: 50SEbHFvY9N0bw+osvhscRiJFtc/2M+fqfc7az7v1gE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:42:d9:fd:e8:ef:8a:c7:0c:2d:fe:23:b6:67:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3edd551d0a636db4b5077c648d9d87bdadaab81e
Validity
Not Before: Mar 26 14:00:24 2026 GMT
Not After : Mar 27 14:00:24 2026 GMT
Subject: CN=f6b4bd65a274cc8dd16e556959830e2fe1be7f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d5:e7:1d:3d:11:a3:92:b1:86:e3:3e:26:8e:
3d:00:14:e5:ea:19:30:49:a6:46:79:dc:3a:b8:6d:
0e:51:b8:7a:0d:25:9e:66:1c:72:d0:13:47:f1:1d:
00:38:9d:51:d5:46:a3:1a:3a:93:df:42:ec:b0:b8:
12:c1:b9:eb:6e:1f:10:c3:bd:3d:67:3d:19:92:34:
aa:4f:f3:af:2a:1d:d9:8b:72:eb:88:ab:8d:41:c5:
f2:f7:33:f4:ed:3b:f6:a7:d8:c9:d4:03:94:88:02:
bc:59:74:c6:99:31:3a:71:27:76:08:ba:77:fe:6b:
80:99:ca:f7:92:cb:ea:9d:93:c0:b8:d8:8f:da:9e:
b8:a7:22:7e:52:12:42:c0:cb:b0:b6:b1:d0:b7:77:
87:f2:05:02:e9:51:41:a8:03:b0:53:03:a9:6b:6b:
42:19:af:1b:05:09:0a:f9:1a:cb:db:b0:1a:d5:2a:
85:3b:8e:77:66:4a:eb:f5:a4:45:b8:c6:1d:64:5d:
4f:90:4b:9b:15:56:46:f3:69:fe:4a:59:93:ed:cf:
64:25:54:e3:e4:38:9f:6d:25:99:ec:e9:f9:b7:da:
09:6c:e9:f0:9e:2f:4c:25:19:ae:36:ad:b5:b1:dc:
10:73:9e:7c:59:29:e3:6b:41:c4:87:a1:c5:d8:ee:
21:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B4:BD:65:A2:74:CC:8D:D1:6E:55:69:59:83:0E:2F:E1:BE:7F:83
X509v3 Authority Key Identifier:
keyid:3E:DD:55:1D:0A:63:6D:B4:B5:07:7C:64:8D:9D:87:BD:AD:AA:B8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:5d:49:f7:a4:f3:c7:1a:6b:e9:21:48:04:59:e8:85:28:1a:
af:f8:4d:f5:48:b5:64:2b:53:b1:b6:02:4c:2b:92:e6:b1:98:
2f:e5:a1:c7:96:eb:ca:46:c2:30:6d:e8:ec:c6:b1:18:cc:e6:
a7:ec:5a:4e:ee:5c:4e:68:c8:92:7c:8f:b7:23:62:5f:9d:9a:
27:fa:ee:b0:ec:c4:03:6b:5e:ff:98:bb:2c:2c:e8:7c:ac:d0:
79:21:2f:68:bd:e2:db:69:6c:44:bc:fd:bb:74:6b:47:bb:d8:
8c:bc:a0:15:12:c0:08:79:f1:73:af:7e:bb:75:45:ea:a3:46:
53:fb:6f:be:e9:b6:95:b1:ef:1c:62:c9:08:0b:1f:16:75:01:
48:91:2c:af:c3:c5:bf:2b:de:0d:cb:da:3b:e9:0d:d4:f1:7d:
a5:60:83:7a:7e:26:44:70:46:56:77:05:e8:cb:ed:a6:cb:07:
d2:02:04:68:d4:2e:00:78:a6:2a:7f:57:c2:4d:9c:f7:49:ee:
c7:da:cb:87:32:c1:74:ee:8c:67:cb:56:79:d6:af:51:f0:dc:
f7:78:d5:60:98:74:89:28:05:74:18:07:11:ce:57:55:a8:84:
d5:42:c8:33:fc:98:72:00:94:5c:92:e1:db:cc:fe:15:bb:4e:
76:e6:0c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:57:35 2026 by rpki-client