Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
File: P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft (raw, json)
Hash identifier: yzl0ICwmYoDOmm+qFSgfL6yIraAmbxP9CMaqfe8wWuo=
Subject key identifier: 8C:38:B9:5D:5A:34:E8:7D:B6:3C:B8:7F:E4:B7:B4:40:3D:A4:23:6B
Authority key identifier: 3F:F5:8D:FF:BA:4D:F6:AC:34:BD:9F:48:11:9A:E1:1C:FE:F8:A7:6C
Certificate issuer: /CN=3ff58dffba4df6ac34bd9f48119ae11cfef8a76c
Certificate serial: 019E1D90BD613374CDEECD4318D43174F0D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
Manifest number: 1697
Signing time: Tue 12 May 2026 19:01:25 +0000
Manifest this update: Tue 12 May 2026 19:01:25 +0000
Manifest next update: Wed 13 May 2026 19:01:25 +0000
Files and hashes: 1: KZNB7lWAg2ccw6OEH22PfuTr474.roa (hash: oNpR7vBBKKyNPGUa7GkD8mmfi4bNftZfBrk2/MA9hZw=)
2: P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl (hash: WFVBMtXZy8C/Fl2KZTTG+aJZBHgqnK9gCsIHbL4Z4kY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:bd:61:33:74:cd:ee:cd:43:18:d4:31:74:f0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ff58dffba4df6ac34bd9f48119ae11cfef8a76c
Validity
Not Before: May 12 19:01:25 2026 GMT
Not After : May 13 19:01:25 2026 GMT
Subject: CN=8c38b95d5a34e87db63cb87fe4b7b4403da4236b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:59:65:69:38:5b:e3:11:dc:bc:c6:98:6d:59:
12:b7:9f:e8:be:c3:35:02:25:9b:7b:89:01:93:57:
f8:45:65:cd:e4:c5:d1:f3:bf:5a:3d:60:46:f5:bf:
88:fd:9b:97:be:98:dc:e2:9c:ad:6d:cf:96:a0:d6:
38:2d:1a:f1:ee:89:70:3e:49:44:84:f1:12:83:ad:
83:57:88:04:c7:ec:60:40:d9:24:48:05:48:f9:5a:
ee:7a:90:fc:67:b0:e0:85:52:75:b2:0e:5a:e2:d7:
03:72:e5:f7:60:7a:d9:f3:7b:58:72:a7:c6:57:7d:
39:37:2e:18:02:23:5b:3e:4a:03:ea:d3:d4:10:8a:
79:a5:39:ff:79:c5:a7:23:d2:10:2a:70:bc:e3:05:
67:a4:d8:41:14:00:92:c1:99:fc:f5:fd:d7:8a:2c:
77:97:9e:38:8f:05:fa:42:a7:b9:92:26:28:c2:d2:
f6:01:05:d4:f0:9d:41:05:a8:81:ec:ba:ca:40:a4:
0b:6a:0e:44:3a:95:d3:ee:80:ed:d6:61:7c:a2:c3:
90:dc:3e:7c:a0:53:0b:6a:71:28:58:89:45:07:2a:
42:60:55:a5:61:df:8c:8b:a0:1c:35:48:8e:32:c1:
a0:37:13:1f:ef:38:09:a7:23:e2:9a:55:d9:2c:79:
a6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:38:B9:5D:5A:34:E8:7D:B6:3C:B8:7F:E4:B7:B4:40:3D:A4:23:6B
X509v3 Authority Key Identifier:
keyid:3F:F5:8D:FF:BA:4D:F6:AC:34:BD:9F:48:11:9A:E1:1C:FE:F8:A7:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ba:74:f8:40:2b:3c:e9:58:83:a8:1f:77:68:f7:04:7e:4e:
c2:e0:0d:46:3f:04:78:f2:5e:01:91:cd:33:14:da:0c:c2:4b:
ca:1f:f5:fb:e7:c3:6a:f9:5e:4e:aa:aa:b6:eb:de:22:ef:8c:
ef:0d:d1:d2:6e:47:ce:42:d5:f2:e3:c9:95:82:4d:6f:51:a7:
e9:94:9c:9f:00:98:eb:2d:20:fb:ac:47:82:3e:f1:d8:5d:d8:
ab:4a:44:85:80:ee:55:1c:62:8a:0a:cc:66:b2:74:5d:14:a6:
f1:fb:4a:96:1d:2b:8e:b6:50:c8:67:d4:bf:4c:f9:b3:e3:83:
c6:72:05:b6:ff:aa:65:d6:48:9f:a4:c0:b6:2a:e4:73:45:a8:
61:cb:24:be:17:f3:75:d8:6b:92:eb:f1:79:85:0c:4d:cd:f7:
44:95:a5:25:f9:69:e1:d5:83:18:41:4d:f6:ea:c3:f3:39:11:
78:80:26:e2:e3:8a:d7:37:b1:ae:d7:ed:94:36:53:4c:c3:dd:
28:92:8f:54:04:18:be:de:5a:70:09:01:b1:91:58:17:2c:41:
5a:07:d8:7c:52:09:c0:c4:b7:ce:c6:2b:6d:fe:31:8c:bd:76:
ee:02:10:b9:f5:74:c2:1f:d5:eb:a1:44:e0:d0:76:94:b8:3f:
06:a9:c2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:30:27 2026 by rpki-client