Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
File: P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft (raw, json)
Hash identifier: qVWZucNDmxSFydF9fF5+3myv1JqLPOaEL8h3P2E4GaY=
Subject key identifier: 84:9C:7C:93:F1:46:EE:AF:81:B1:E6:B7:86:20:49:3A:AA:FF:C2:D6
Authority key identifier: 3F:F5:8D:FF:BA:4D:F6:AC:34:BD:9F:48:11:9A:E1:1C:FE:F8:A7:6C
Certificate issuer: /CN=3ff58dffba4df6ac34bd9f48119ae11cfef8a76c
Certificate serial: 01A0D8A82669C5E2EE5425647680E13EBD88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
Manifest number: 1801
Signing time: Fri 25 Sep 2026 13:01:33 +0000
Manifest this update: Fri 25 Sep 2026 13:01:33 +0000
Manifest next update: Sat 26 Sep 2026 13:01:33 +0000
Files and hashes: 1: KZNB7lWAg2ccw6OEH22PfuTr474.roa (hash: oNpR7vBBKKyNPGUa7GkD8mmfi4bNftZfBrk2/MA9hZw=)
2: P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl (hash: lBeJVHekuqFNoXSq91xIaZOSToEtHRlfNYE006W2Lgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:26:69:c5:e2:ee:54:25:64:76:80:e1:3e:bd:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ff58dffba4df6ac34bd9f48119ae11cfef8a76c
Validity
Not Before: Sep 25 13:01:33 2026 GMT
Not After : Sep 26 13:01:33 2026 GMT
Subject: CN=849c7c93f146eeaf81b1e6b78620493aaaffc2d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:af:46:94:03:81:d1:8a:e3:c1:ac:31:c1:44:
95:ad:57:0f:10:ec:c3:bf:fd:34:04:b1:65:80:52:
54:a5:89:19:ed:7c:26:25:30:42:f0:6a:4b:41:80:
b0:6f:c5:57:5d:2d:be:c4:e4:f0:82:cf:ef:60:c5:
a5:52:21:e1:c8:5a:9a:b5:41:3c:a8:1e:46:8b:0d:
d3:6f:c0:d8:13:2c:9a:2f:4d:48:a2:8f:c5:14:9a:
e5:fe:a8:1c:d0:0d:77:8a:9c:38:cd:6c:92:0f:cf:
d6:20:1f:6d:b3:b2:ce:99:b3:fb:7c:b2:04:e4:16:
6e:f7:11:fc:ca:af:7c:7f:99:31:fe:dc:f7:ec:5c:
b5:6a:8f:4a:a3:2f:e4:5a:13:32:03:34:9d:65:a0:
12:e0:0d:8b:dd:8b:00:1b:4d:41:f1:52:8c:15:b2:
fd:f0:82:3b:8a:96:7e:08:b1:c5:d2:77:cb:32:59:
5f:80:a6:b0:9c:e5:9e:d9:f9:c4:60:e1:9b:be:47:
c2:85:1a:37:ad:d3:ce:b9:66:7d:c4:43:57:48:0a:
89:ac:77:d1:01:50:dd:a9:95:75:b8:a8:ee:92:4a:
0c:b5:a6:e5:23:10:6f:78:fa:b4:78:f9:d0:26:9b:
60:14:c4:68:89:21:38:ed:7f:f3:1a:f4:8f:fe:c5:
f2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9C:7C:93:F1:46:EE:AF:81:B1:E6:B7:86:20:49:3A:AA:FF:C2:D6
X509v3 Authority Key Identifier:
keyid:3F:F5:8D:FF:BA:4D:F6:AC:34:BD:9F:48:11:9A:E1:1C:FE:F8:A7:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:df:cc:66:be:c5:04:63:7f:b8:45:1a:73:1c:52:74:2e:e8:
e5:e7:71:8a:86:12:4e:00:d4:75:90:8f:fe:4a:0c:b9:72:b4:
d4:ab:bb:1d:7a:c8:b8:dd:5e:1c:9f:0f:29:32:34:62:f9:3e:
7b:2c:11:d6:76:1a:77:6e:85:f4:43:60:98:c8:b3:2d:32:ac:
a2:4a:d1:7d:86:2a:60:93:6d:7f:d3:0b:d7:8d:2c:24:7a:00:
d3:1c:a4:9c:74:ce:c3:f2:a6:0a:d5:43:3b:95:30:3d:a3:07:
8d:7c:0a:36:11:89:6b:d8:96:05:ea:5d:90:d8:a0:7f:2e:7f:
f2:c3:d4:f4:16:8d:01:ce:0d:3b:59:2e:e8:a0:11:34:67:c3:
a0:d6:fc:c5:9f:f5:62:10:7f:bc:5f:86:8a:de:08:15:1c:71:
29:c3:92:be:3a:3b:ac:87:7e:eb:e9:d8:2c:0d:19:10:f9:28:
b5:be:96:50:a3:78:ae:7b:34:d9:22:74:fc:9d:58:5f:e3:28:
38:2c:92:36:73:ee:fd:64:a4:72:3e:db:76:7f:5d:2b:fb:7d:
9c:ae:0d:f3:e4:dc:7f:87:72:97:b3:82:92:e5:2d:63:f6:99:
df:07:92:16:56:89:4e:f4:82:7a:65:3e:78:f3:e4:32:7f:52:
da:f5:d5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:37:00 2026 by rpki-client