Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
File: PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft (raw, json)
Hash identifier: DxQyyPVsnWTvOFRsUAgvFtWfQONkKTjWpm+Ifh6e690=
Subject key identifier: 51:C1:DD:9E:7C:0E:0C:B5:E1:EE:D4:EC:A4:57:2F:09:82:F3:85:D4
Authority key identifier: 3D:E4:59:8E:21:73:65:01:A7:39:44:C1:07:11:4C:85:0C:7D:8B:09
Certificate issuer: /CN=3de4598e21736501a73944c107114c850c7d8b09
Certificate serial: 019D28F315FB4D30EA08DD48CFF15453F531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
Manifest number: 15AF
Signing time: Thu 26 Mar 2026 07:01:52 +0000
Manifest this update: Thu 26 Mar 2026 07:01:52 +0000
Manifest next update: Fri 27 Mar 2026 07:01:52 +0000
Files and hashes: 1: PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl (hash: W7W7pAaPGP+ShCbC3hAmPQv4QHcWiBhWBkLf4wbkAZk=)
2: rolQSHMJbUtW_hNeTCuJrWbYpG4.roa (hash: DOYDiq7YGxpusRq0h+LSdRAPCbEBk+UMLmN2kuSz54c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:15:fb:4d:30:ea:08:dd:48:cf:f1:54:53:f5:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de4598e21736501a73944c107114c850c7d8b09
Validity
Not Before: Mar 26 07:01:52 2026 GMT
Not After : Mar 27 07:01:52 2026 GMT
Subject: CN=51c1dd9e7c0e0cb5e1eed4eca4572f0982f385d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:31:b4:22:98:81:3c:44:9d:c3:de:bd:8a:3a:
84:39:02:77:1c:49:3f:54:75:8d:a3:4e:5a:50:1e:
96:33:71:a4:c4:66:9d:a9:98:be:1d:5a:ac:d8:cc:
bc:33:7a:56:81:fa:b6:a2:b5:ff:70:f7:20:7c:db:
56:10:94:b7:df:64:40:50:c8:aa:ef:c4:2f:32:59:
4e:75:5c:53:f6:ef:91:b8:1e:9f:38:d7:73:ed:38:
65:d7:39:a3:5f:1c:09:6e:e4:cc:b4:82:ce:aa:3b:
26:c7:61:e6:2b:11:07:af:5c:2f:ee:78:26:17:71:
ab:c7:c8:2d:34:3d:23:a0:68:54:65:67:53:1c:a4:
ea:bc:ec:3b:2b:e3:27:dc:6c:42:66:37:ce:44:a8:
60:23:0c:b2:77:d3:4e:a7:9e:fe:c3:09:1e:81:ba:
a7:f1:f7:2d:05:35:3d:d5:8d:29:5b:46:01:e9:ab:
d9:71:9b:20:42:bc:bd:f6:e6:37:5d:47:d7:10:b0:
55:bc:37:94:24:07:16:f9:3e:41:35:39:d5:3c:6f:
d4:82:45:be:f8:9d:cf:aa:40:bd:e7:a7:20:e7:af:
8b:46:bf:34:19:a8:2d:1f:b3:a7:27:85:2a:63:bd:
2a:cd:48:08:78:3a:a4:62:71:2f:2f:b7:58:f7:f5:
10:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C1:DD:9E:7C:0E:0C:B5:E1:EE:D4:EC:A4:57:2F:09:82:F3:85:D4
X509v3 Authority Key Identifier:
keyid:3D:E4:59:8E:21:73:65:01:A7:39:44:C1:07:11:4C:85:0C:7D:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:04:22:63:36:b2:e3:26:02:5e:02:1a:74:99:c2:cb:14:ad:
19:33:45:f4:4b:fb:33:eb:dc:7c:ad:e0:63:5c:da:1a:c7:bd:
6a:6a:ae:d5:5a:c0:59:64:d3:4d:39:8d:41:56:93:99:f1:6c:
cb:ee:77:1b:10:a6:54:d4:38:81:e8:b8:00:c9:f3:36:99:46:
a6:10:72:2d:63:fe:e8:b3:ea:af:20:09:15:8a:51:ac:16:f1:
d9:c1:5e:eb:13:76:e4:cc:ff:3d:26:5d:45:6c:c4:f6:7e:8c:
2c:90:6b:be:14:f9:15:a8:94:ad:f5:12:ef:ce:96:54:14:d2:
5e:19:77:bc:59:29:ba:6d:01:38:e6:e2:fc:8c:ff:77:6e:33:
f0:f2:62:56:7b:e3:e1:df:ca:42:c7:c3:2e:5b:4a:d1:bb:5b:
75:35:8d:8b:9b:44:b4:fc:a8:c0:7c:f7:41:9c:0d:02:e8:42:
cb:36:39:4a:2a:62:86:0c:54:c2:c2:9b:27:ef:88:08:5d:82:
0c:c2:45:9a:a7:dc:f5:cc:9a:83:42:90:37:35:5f:e3:3f:87:
d1:55:29:59:30:ba:39:f1:3d:f7:31:09:6d:22:72:1e:2a:ec:
8a:3a:bb:27:e2:66:b2:f8:5d:bf:45:b7:f1:a9:2f:9f:e9:8e:
db:53:5f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:23:34 2026 by rpki-client