Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft
File: P1amMzFVLvkdigAFozjsmC3zfIs.mft (raw, json)
Hash identifier: a3NyXbNyf4O88fntlPHmXeNpHVaPGm2g/ACoA+wqdT8=
Subject key identifier: 85:60:4A:C4:6C:2B:95:5B:90:A6:7C:56:5C:8C:38:1B:62:2C:26:DB
Authority key identifier: 3F:56:A6:33:31:55:2E:F9:1D:8A:00:05:A3:38:EC:98:2D:F3:7C:8B
Certificate issuer: /CN=3f56a63331552ef91d8a0005a338ec982df37c8b
Certificate serial: 019D265FCFCCBB2B861A53C7E2BDD9E32E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft
Manifest number: 1290
Signing time: Wed 25 Mar 2026 19:01:46 +0000
Manifest this update: Wed 25 Mar 2026 19:01:46 +0000
Manifest next update: Thu 26 Mar 2026 19:01:46 +0000
Files and hashes: 1: P1amMzFVLvkdigAFozjsmC3zfIs.crl (hash: sfIVtrIkTkL9O0a5LMIj93KepyK+CeozsCxjk2Vx6Vg=)
2: hqL2_Cp_966-Nf1xdK0ELQH3lNQ.roa (hash: lMjEmScvr6aJ0unz4g+pWkszHQy3LFWSbgQbOr7UsIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:cf:cc:bb:2b:86:1a:53:c7:e2:bd:d9:e3:2e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f56a63331552ef91d8a0005a338ec982df37c8b
Validity
Not Before: Mar 25 19:01:46 2026 GMT
Not After : Mar 26 19:01:46 2026 GMT
Subject: CN=85604ac46c2b955b90a67c565c8c381b622c26db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8d:b7:66:26:cb:4d:1a:99:1d:2a:06:2d:64:
98:b8:64:49:fa:45:5a:ba:ef:5a:cc:9f:66:63:b5:
46:9b:d6:6b:a3:55:5a:95:fe:61:cb:77:92:df:8d:
4e:9e:0f:02:f5:80:14:7f:27:6a:d2:99:a0:1e:a7:
25:ff:1b:7d:d8:4c:eb:9b:3a:7c:eb:93:26:a0:81:
0a:0e:8e:23:43:c1:81:7a:43:ba:ad:51:8f:32:09:
41:26:fc:c4:33:85:f0:d9:92:cb:c0:f4:5e:33:22:
7e:4b:4a:02:b4:0b:d1:0b:c4:98:0b:25:12:90:a1:
eb:f6:b3:0d:4b:7a:33:f5:eb:dc:3e:1d:29:83:e2:
31:cd:d8:78:b7:68:4c:7a:f9:f3:9e:5d:88:8f:4f:
b0:16:3a:94:c7:d1:e5:59:e7:80:19:53:69:65:c9:
a6:84:0e:f9:b5:a5:b9:13:a9:61:cf:dc:60:a9:7b:
2f:d6:b4:f8:29:59:a9:0c:e4:1b:4c:88:4b:ee:30:
97:00:8c:b8:0b:6b:15:1a:54:8d:b7:c6:d3:ef:58:
a4:e0:63:0e:e4:57:2a:24:37:34:d9:66:fc:1a:02:
f1:59:3a:5c:af:72:fc:f0:77:ec:90:22:ec:ff:68:
d1:19:a0:c0:9e:8b:18:09:57:1f:c8:62:e2:02:b8:
df:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:60:4A:C4:6C:2B:95:5B:90:A6:7C:56:5C:8C:38:1B:62:2C:26:DB
X509v3 Authority Key Identifier:
keyid:3F:56:A6:33:31:55:2E:F9:1D:8A:00:05:A3:38:EC:98:2D:F3:7C:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:8b:b2:52:bf:c6:d6:ca:9c:29:95:d5:6b:fb:75:60:f5:0b:
e0:d1:20:94:89:ea:27:2a:5e:5c:42:40:12:46:30:02:c8:b3:
c9:79:13:66:2d:c0:5b:9a:ec:05:90:cc:84:a2:4c:65:0b:da:
49:06:93:5e:46:d0:9d:9e:6a:37:ba:5e:2f:88:1c:73:46:85:
44:4c:73:39:d3:91:a0:0e:05:cf:f3:65:6a:03:da:4d:7f:9a:
db:24:7a:75:c4:50:f6:79:23:60:b5:0a:09:3c:35:05:1d:10:
53:83:6c:0c:84:e5:dd:71:c8:b4:29:9a:f5:f2:55:5f:e4:61:
ec:6e:82:c1:bd:51:10:98:cf:69:e7:21:a8:05:4c:12:de:41:
cc:66:f6:46:06:b1:5e:b8:99:3b:50:28:d6:5c:18:64:3b:e8:
ea:73:09:a4:04:23:7c:8c:f7:c5:d1:56:3d:5f:7c:7f:96:cd:
d6:ed:2f:d3:9b:b2:96:01:49:47:9f:c5:e8:c1:62:eb:f6:1d:
33:1f:e0:2d:f8:44:0c:7e:3f:5f:eb:ef:ac:90:90:44:4c:55:
cb:29:8e:c8:d4:d8:a3:00:b5:fa:f2:2a:c7:98:27:b9:95:54:
a3:a8:ba:ec:b5:08:11:49:d6:95:08:0f:8f:16:4f:5f:6e:b7:
6a:87:d6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:51:03 2026 by rpki-client