Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
File: P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft (raw, json)
Hash identifier: kZG7Zk7mTLDt01oIJ3UrsVRxlV4Hi/P5R7s7lc/6aoU=
Subject key identifier: 8F:8A:94:AF:AA:00:98:A8:C1:73:FD:0C:DD:B1:B6:56:40:CC:EC:43
Authority key identifier: 3F:F5:8D:FF:BA:4D:F6:AC:34:BD:9F:48:11:9A:E1:1C:FE:F8:A7:6C
Certificate issuer: /CN=3ff58dffba4df6ac34bd9f48119ae11cfef8a76c
Certificate serial: 019F9248F0CA88BE8E08E16720E0558567DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
Manifest number: 1758
Signing time: Fri 24 Jul 2026 04:01:21 +0000
Manifest this update: Fri 24 Jul 2026 04:01:21 +0000
Manifest next update: Sat 25 Jul 2026 04:01:21 +0000
Files and hashes: 1: KZNB7lWAg2ccw6OEH22PfuTr474.roa (hash: oNpR7vBBKKyNPGUa7GkD8mmfi4bNftZfBrk2/MA9hZw=)
2: P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl (hash: uW3f8gxS7axuqJdnvHwQmBkmZLfCcEttUgDo5XH43Sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:f0:ca:88:be:8e:08:e1:67:20:e0:55:85:67:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ff58dffba4df6ac34bd9f48119ae11cfef8a76c
Validity
Not Before: Jul 24 04:01:21 2026 GMT
Not After : Jul 25 04:01:21 2026 GMT
Subject: CN=8f8a94afaa0098a8c173fd0cddb1b65640ccec43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:be:d0:84:60:3c:10:88:50:9c:be:a5:0e:6b:
32:af:24:71:43:ec:b0:7e:5f:4f:a1:ca:e9:8d:da:
00:97:71:a1:a6:6f:07:35:5b:ca:d0:0d:d6:25:0f:
8a:ee:f6:ce:49:05:12:26:ea:38:79:1f:5b:b5:07:
4f:04:1b:93:27:67:76:a5:01:86:d1:41:db:ad:8a:
42:8b:c3:52:45:6b:1e:c5:1e:d4:32:4f:2b:d1:c9:
64:24:23:01:da:ba:19:df:9a:95:c4:56:fb:3c:0f:
e8:73:8d:c7:83:ea:34:2d:6c:32:b0:01:e9:9c:3a:
69:c7:ab:75:9d:b9:b5:be:be:3d:84:04:f9:fe:93:
59:7d:5f:0a:85:fe:5a:0c:64:ec:59:f3:d2:fe:51:
f4:2a:1f:f4:2a:0d:1e:8e:53:cc:a2:94:c8:c5:de:
56:14:e4:f5:ef:b1:02:ff:f5:79:f8:cc:1f:c8:0d:
bb:5b:d9:40:61:c3:98:83:da:b9:5a:07:0c:dd:e8:
48:b7:53:56:c0:8d:3d:d7:3f:79:8c:e0:7e:bb:d0:
d5:eb:2e:2a:6d:68:8b:16:94:90:d0:42:2a:45:a8:
63:62:65:39:68:3c:0c:20:5f:a2:91:31:14:b1:69:
03:98:d5:00:c1:c4:a1:0f:e9:04:e7:9b:2a:ba:fb:
3a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8A:94:AF:AA:00:98:A8:C1:73:FD:0C:DD:B1:B6:56:40:CC:EC:43
X509v3 Authority Key Identifier:
keyid:3F:F5:8D:FF:BA:4D:F6:AC:34:BD:9F:48:11:9A:E1:1C:FE:F8:A7:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:6d:ac:8c:6c:99:2f:af:c1:69:aa:22:d1:f9:23:87:8c:30:
ab:b4:fa:7e:fa:5b:3f:88:a9:4b:a2:1a:00:01:4b:6c:6e:00:
4e:3f:7d:01:f9:75:cd:85:3f:08:83:9c:2d:01:39:27:7b:c7:
ad:4a:d5:b2:ee:fb:4b:7e:21:50:ba:5e:d0:f2:73:36:0b:3a:
0f:43:47:be:6c:ae:e5:f9:fe:bc:11:b7:dd:1d:ab:97:30:ef:
60:c8:bf:0d:17:08:97:0e:c6:2d:a8:9d:f3:76:b6:f5:db:fc:
07:7b:12:61:9e:93:68:1b:97:83:6f:b1:c0:0e:79:dc:cc:a6:
41:0f:f3:27:5d:aa:9a:74:3b:e8:66:e5:62:2d:70:94:fb:5c:
6b:a6:dd:bf:1b:f1:e4:e7:27:e1:85:6c:76:10:a0:cc:c5:42:
7c:cf:ed:06:b1:09:3f:e2:e2:7e:45:0d:71:60:65:1e:7a:7e:
ef:02:6c:07:bf:58:ee:88:47:0a:c6:8f:1f:c8:59:74:b7:4b:
ea:61:88:6a:3b:4d:6e:18:8a:0a:1b:cd:d1:85:0e:42:d7:5b:
8a:5b:7e:c0:6d:8f:93:d4:8c:ca:09:de:e9:1a:24:a1:f2:a5:
2f:69:de:f1:56:c1:e2:0f:da:2a:88:bc:ed:7a:0b:f0:f9:11:
e9:60:49:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:46:02 2026 by rpki-client