Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
File: PD9FAh1us0CkKy5d0fv3IaGmbWE.mft (raw, json)
Hash identifier: bNkwSC1ANJ/vx+xb1gVdsKIZsmksy95uQuK6Gr9bkKs=
Subject key identifier: 95:3B:BD:B9:90:9A:98:24:A3:E0:33:63:04:8F:25:4B:01:3F:F1:7E
Authority key identifier: 3C:3F:45:02:1D:6E:B3:40:A4:2B:2E:5D:D1:FB:F7:21:A1:A6:6D:61
Certificate issuer: /CN=3c3f45021d6eb340a42b2e5dd1fbf721a1a66d61
Certificate serial: 019D2704357E58AC830213A954092151135D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
Manifest number: 0F6D
Signing time: Wed 25 Mar 2026 22:01:20 +0000
Manifest this update: Wed 25 Mar 2026 22:01:20 +0000
Manifest next update: Thu 26 Mar 2026 22:01:20 +0000
Files and hashes: 1: KuWWtknOGKLAtEUJQ2qfl_jNlmg.roa (hash: W5TqBGi3Id1AxwKzwqUslwR28wws2MIYj5VeG6wq05Q=)
2: PD9FAh1us0CkKy5d0fv3IaGmbWE.crl (hash: ObnYihsJj+WZeG/qawknSxJBuy1w2gJqXi9rL99ymSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:35:7e:58:ac:83:02:13:a9:54:09:21:51:13:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c3f45021d6eb340a42b2e5dd1fbf721a1a66d61
Validity
Not Before: Mar 25 22:01:20 2026 GMT
Not After : Mar 26 22:01:20 2026 GMT
Subject: CN=953bbdb9909a9824a3e03363048f254b013ff17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a1:48:98:99:60:ea:b3:33:9e:f3:81:b7:41:
76:8a:ca:bd:d8:da:3a:87:d7:9b:30:98:a5:3b:c0:
f5:61:99:46:c4:1b:6e:8e:cb:32:33:cf:f1:dc:d0:
56:b6:99:1a:db:8b:3e:d5:7f:ef:e5:3d:47:68:c4:
47:3d:89:c9:dd:a9:35:b2:ad:33:4a:5b:c2:e9:32:
eb:90:8b:56:62:50:61:01:84:37:b7:f5:e6:aa:94:
5c:fd:e3:b4:06:69:3f:60:4c:1b:f2:35:82:37:f8:
b4:69:17:43:4b:8e:46:7a:c1:8b:05:4e:ff:3c:41:
b6:4c:21:32:7c:f4:0a:f4:0b:20:d4:80:2e:5c:08:
6b:e0:87:42:20:85:8c:90:80:d9:bb:70:18:f2:73:
00:06:ff:52:cd:81:c7:81:90:cc:66:19:d6:7e:cf:
6b:75:13:da:7b:d4:76:3c:c4:ec:1c:c9:4a:59:bc:
bb:6d:ab:87:57:d8:f7:66:3f:a9:c2:1a:1d:9c:84:
95:31:ed:48:bb:2c:a2:18:00:07:f2:e5:25:c3:f3:
59:bc:65:e1:21:bb:fc:ed:11:9f:e2:26:fb:37:99:
39:ff:e8:f2:59:e9:cf:20:52:3d:ae:e9:67:e8:85:
4a:15:f5:cb:d3:bc:18:fc:1e:1b:e0:b2:1c:48:e9:
a9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3B:BD:B9:90:9A:98:24:A3:E0:33:63:04:8F:25:4B:01:3F:F1:7E
X509v3 Authority Key Identifier:
keyid:3C:3F:45:02:1D:6E:B3:40:A4:2B:2E:5D:D1:FB:F7:21:A1:A6:6D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:6e:1d:58:4a:70:b3:fa:10:6d:bf:f6:15:da:21:11:d1:92:
5e:13:9e:91:a6:60:fd:8e:59:ae:b6:9f:3a:e3:f4:10:e5:2b:
3c:6b:4b:8e:35:25:7c:94:e7:6c:89:60:f9:7d:b6:5b:54:75:
0f:dd:b8:27:64:93:2f:0e:68:58:bf:7a:05:20:13:62:06:f8:
07:e3:c3:a3:fd:d3:0b:63:20:03:7b:bc:cf:38:b5:34:7f:c0:
fa:11:78:cb:fd:88:f7:da:b9:b0:ed:d8:48:92:09:50:0d:22:
c3:88:a7:c4:23:cf:9d:99:c5:cf:d3:70:4a:a6:3f:60:ca:b1:
c4:98:1c:13:aa:9f:02:0c:c0:81:d9:b9:a2:d8:18:6e:1f:a2:
af:97:e9:d8:75:61:b2:0d:52:81:b1:55:bf:d2:24:5c:c6:fb:
cb:16:6d:e4:29:43:8e:f6:f0:22:6b:8a:47:48:85:3a:23:ef:
6e:94:ad:f5:42:ac:54:13:c2:84:22:fc:55:2f:37:c3:a7:90:
35:c2:d6:35:b2:68:81:84:c4:78:54:76:2a:5c:bc:79:18:f0:
df:08:bc:4e:c7:7d:fd:c8:03:15:d8:0a:b3:2b:08:af:4f:0d:
d6:13:c3:53:60:e4:91:a8:9a:99:55:54:6d:07:13:35:13:02:
d2:8f:8a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:14:55 2026 by rpki-client