Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.mft
File: P6E212Q_3A0_sdU0Z9irspm3kXE.mft (raw, json)
Hash identifier: fin4iSSVkceMpLAjCbfAwi8epB5lofzn3gP4I2HdgHg=
Subject key identifier: C8:63:AF:B2:B9:87:63:C1:2D:CD:8B:4D:05:7F:E4:D2:F4:24:AC:3C
Authority key identifier: 3F:A1:36:D7:64:3F:DC:0D:3F:B1:D5:34:67:D8:AB:B2:99:B7:91:71
Certificate issuer: /CN=3fa136d7643fdc0d3fb1d53467d8abb299b79171
Certificate serial: 019D2772A6796B0D186AF18938EC0BA4AE42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6E212Q_3A0_sdU0Z9irspm3kXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.mft
Manifest number: 0871
Signing time: Thu 26 Mar 2026 00:01:58 +0000
Manifest this update: Thu 26 Mar 2026 00:01:58 +0000
Manifest next update: Fri 27 Mar 2026 00:01:58 +0000
Files and hashes: 1: 4OqLqSYwHbzUrUcmvl7uDHR7q2A.roa (hash: A6IgUlxaM8wJjh5znyMu1u3I9p23ylYlfoL0agIyKZg=)
2: P6E212Q_3A0_sdU0Z9irspm3kXE.crl (hash: KcOpZBaaoESOYBKf/RNEHckUgZt3WoB42T1a/4ytebo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6E212Q_3A0_sdU0Z9irspm3kXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:a6:79:6b:0d:18:6a:f1:89:38:ec:0b:a4:ae:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fa136d7643fdc0d3fb1d53467d8abb299b79171
Validity
Not Before: Mar 26 00:01:58 2026 GMT
Not After : Mar 27 00:01:58 2026 GMT
Subject: CN=c863afb2b98763c12dcd8b4d057fe4d2f424ac3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1e:dc:a9:51:35:3c:c3:2a:b0:bf:b1:8f:95:
b8:9d:65:51:c4:1c:5f:82:55:d6:d2:4c:57:f9:8a:
45:95:57:69:be:b1:cb:40:5d:80:d1:84:db:5e:2c:
b0:53:a7:09:4e:63:76:2e:cb:47:d7:92:fd:87:cf:
70:99:07:11:bc:46:cb:7a:a0:35:88:10:35:f8:91:
a7:c0:81:1c:9a:1d:d1:76:a6:9e:3e:30:d0:eb:84:
9e:41:f5:3d:4c:8f:bf:53:2e:b0:4b:6c:4b:1a:a2:
6a:e1:7f:41:fb:cc:ba:0b:d7:1f:a7:a3:e2:c8:a1:
01:68:96:05:b2:0a:f3:1c:23:b0:96:30:2e:7f:c8:
cb:71:ee:d9:ea:48:80:42:0c:97:90:40:da:73:de:
44:87:87:69:77:94:e5:d4:24:09:a4:d4:ab:a6:6f:
e9:40:11:7f:5b:39:56:ea:4c:3a:21:cb:94:51:33:
e6:95:03:6f:8f:82:e4:fe:d8:96:3a:4e:73:0b:c1:
14:d8:79:85:cc:82:74:97:06:6d:bb:5f:fe:50:d3:
75:f4:43:51:d1:51:d0:9d:4f:62:1a:75:0a:4a:e6:
8b:02:96:c0:f6:97:73:92:c6:77:95:b5:67:30:63:
51:22:b3:59:3d:60:66:ad:9f:68:f1:7b:0c:7d:77:
0a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:63:AF:B2:B9:87:63:C1:2D:CD:8B:4D:05:7F:E4:D2:F4:24:AC:3C
X509v3 Authority Key Identifier:
keyid:3F:A1:36:D7:64:3F:DC:0D:3F:B1:D5:34:67:D8:AB:B2:99:B7:91:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6E212Q_3A0_sdU0Z9irspm3kXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:79:ec:da:06:78:e0:0f:99:de:20:cc:36:d3:c9:64:d8:5d:
97:a7:4d:64:d0:da:27:60:fe:98:dc:2e:c1:9a:0b:4c:ec:36:
b1:e4:be:f8:8f:53:0e:af:41:19:bd:86:c1:90:3f:2b:46:ab:
1a:68:0b:bb:f0:4a:23:c8:5c:81:55:26:73:58:3a:ad:48:79:
d8:53:d6:4c:9e:cc:18:95:75:d8:a8:d9:bf:ef:f2:d9:9e:0c:
16:60:73:5a:fa:28:8d:9e:f0:60:a9:be:c7:9e:6a:c2:dd:f1:
e7:78:6f:a2:9b:60:15:5f:18:6b:79:ac:39:59:ea:13:32:e8:
2c:b3:2f:57:73:e7:7b:f1:bb:9b:06:ea:7a:db:b0:38:1f:04:
d0:89:ed:9d:65:d9:a5:be:e7:09:19:ca:45:b9:08:39:f7:e0:
d0:7a:79:b9:dc:53:13:b8:88:d6:00:7d:ca:d8:2e:fb:b8:2f:
f7:57:f9:24:00:1f:4c:ea:6c:9f:0c:be:cb:17:48:e3:89:84:
a0:16:77:3c:50:8f:25:69:07:8d:c2:ec:b1:a8:66:0f:ad:bf:
10:11:6c:e6:cc:9c:e0:12:16:3d:0e:1a:d5:d3:b4:23:76:13:
fd:3f:bb:36:6f:2c:e4:71:7b:19:44:76:63:54:e1:ba:30:a0:
ba:ce:88:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:14:55 2026 by rpki-client