Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
File: P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft (raw, json)
Hash identifier: eUGMTyddBM2/y4jZ5zYruvEnEWv9raghLaz/ZR5e8lg=
Subject key identifier: B4:2B:00:98:FA:F8:B7:81:8A:D6:F5:3C:61:B9:44:83:5E:CE:C9:C1
Authority key identifier: 3F:F5:8D:FF:BA:4D:F6:AC:34:BD:9F:48:11:9A:E1:1C:FE:F8:A7:6C
Certificate issuer: /CN=3ff58dffba4df6ac34bd9f48119ae11cfef8a76c
Certificate serial: 019D284D93A15821431D0A90C3195B739C31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
Manifest number: 1618
Signing time: Thu 26 Mar 2026 04:01:05 +0000
Manifest this update: Thu 26 Mar 2026 04:01:05 +0000
Manifest next update: Fri 27 Mar 2026 04:01:05 +0000
Files and hashes: 1: KZNB7lWAg2ccw6OEH22PfuTr474.roa (hash: oNpR7vBBKKyNPGUa7GkD8mmfi4bNftZfBrk2/MA9hZw=)
2: P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl (hash: eKMxfPV3yEEMo9aalVpOquCB/iFEgEOFPezbNXOW/O4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:93:a1:58:21:43:1d:0a:90:c3:19:5b:73:9c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ff58dffba4df6ac34bd9f48119ae11cfef8a76c
Validity
Not Before: Mar 26 04:01:05 2026 GMT
Not After : Mar 27 04:01:05 2026 GMT
Subject: CN=b42b0098faf8b7818ad6f53c61b944835ecec9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:72:86:2b:b8:14:df:17:84:85:04:01:d8:bf:
8c:94:45:ca:e6:46:6a:b0:f3:6d:e8:45:11:c5:a1:
3d:5e:b0:51:6c:9d:eb:13:5d:ea:74:fc:94:23:e1:
81:35:40:51:8a:11:3e:34:70:6b:81:e9:4a:a1:a4:
32:b3:42:ca:f3:7c:ce:53:0a:ea:94:9f:f5:64:d2:
79:07:38:1d:f8:f9:63:9a:fd:8c:01:7a:19:19:c5:
82:5e:a5:ae:6f:83:b5:e8:95:ad:00:48:cb:f9:a0:
bc:f8:c0:79:55:e5:5b:fb:3f:62:b0:0a:7a:f5:ef:
2a:4f:ad:57:dd:b4:04:ae:49:2b:50:1e:ea:9e:63:
63:fa:58:fa:3a:09:71:c4:75:ec:44:89:12:27:a2:
75:2c:2c:73:d8:ad:9c:73:73:fd:83:e2:6f:a6:06:
71:a2:ce:bf:d9:7c:ec:3f:2f:d5:92:15:5e:0d:ba:
74:05:23:01:98:52:17:2b:4f:68:5d:ea:7a:58:49:
0a:9d:6b:3e:f8:43:30:1d:3d:6b:6a:b6:95:b3:10:
77:97:51:3b:8a:18:ec:30:79:4c:9f:6c:a2:68:56:
39:ca:d6:31:a0:10:19:c5:f9:0b:1f:c0:0a:91:50:
ca:5e:51:cd:f5:88:a6:0e:fe:ff:bb:d4:4b:24:f3:
59:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2B:00:98:FA:F8:B7:81:8A:D6:F5:3C:61:B9:44:83:5E:CE:C9:C1
X509v3 Authority Key Identifier:
keyid:3F:F5:8D:FF:BA:4D:F6:AC:34:BD:9F:48:11:9A:E1:1C:FE:F8:A7:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:4f:7b:d8:5c:b0:41:d8:47:bd:b1:a8:c2:9b:a1:41:f6:34:
9d:2d:e5:b4:42:da:9e:62:14:f5:9d:71:f0:ae:41:23:5f:68:
e1:f8:9a:c3:70:aa:80:a8:74:6d:8d:34:95:96:c5:55:bf:51:
70:81:e0:b6:7f:8d:a3:1e:e9:2d:10:5b:c6:61:48:84:70:e0:
64:82:b8:e3:ce:b7:07:0e:59:f4:03:b8:08:7f:32:7e:1e:e3:
de:2e:6b:88:4c:71:bb:a9:13:ca:86:e3:7d:9a:e2:6e:77:22:
f8:8e:54:20:af:c8:29:e9:34:c6:bb:05:8c:ba:15:eb:89:a8:
23:cc:a3:d7:41:3e:36:92:5c:63:9a:2a:b9:0d:c5:48:76:8b:
86:94:11:59:fd:28:cc:c3:c7:79:85:b1:f0:d1:ad:0b:29:59:
b3:15:52:b9:04:3a:b7:ed:bf:f9:c2:8b:58:b5:17:fa:09:45:
83:55:eb:bd:8d:c6:b8:9b:e3:f4:55:d2:29:4e:fa:fb:90:70:
6b:f8:b2:7f:b2:b8:f1:af:2b:11:ba:07:a5:6d:3b:53:4e:42:
b1:f7:ae:f8:f9:f5:7b:d6:71:3f:c3:b1:00:18:70:62:e6:5f:
4d:5a:28:38:75:64:12:44:97:f4:1d:12:6e:08:62:24:95:a7:
1d:d4:4c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:02 2026 by rpki-client