Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
File: PetYF7vn5aHF-xMFUbhKtIgBb5I.mft (raw, json)
Hash identifier: dR6L3aZ9nJ1s9pJ+XlaUuNsLK/T96NCOhuB5tlkyQRI=
Subject key identifier: 83:31:09:02:70:79:07:A6:54:4E:6D:AF:3C:F7:F7:0D:C3:BE:2F:9F
Authority key identifier: 3D:EB:58:17:BB:E7:E5:A1:C5:FB:13:05:51:B8:4A:B4:88:01:6F:92
Certificate issuer: /CN=3deb5817bbe7e5a1c5fb130551b84ab488016f92
Certificate serial: 019D25F1A9986FDFAF1F262FE79DFFCFFC6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
Manifest number: 04E7
Signing time: Wed 25 Mar 2026 17:01:27 +0000
Manifest this update: Wed 25 Mar 2026 17:01:27 +0000
Manifest next update: Thu 26 Mar 2026 17:01:27 +0000
Files and hashes: 1: 09Idh6750rzqiPUR4c726kV5rOk.roa (hash: mc1V6hIQgSw8lLoVocREyrEscnS5kZmkg0rvjeUzfkM=)
2: PetYF7vn5aHF-xMFUbhKtIgBb5I.crl (hash: WCrQ4OnFP1VelvHaWDaHwYMORqfh6lD1AwOJoFFpATc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:a9:98:6f:df:af:1f:26:2f:e7:9d:ff:cf:fc:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3deb5817bbe7e5a1c5fb130551b84ab488016f92
Validity
Not Before: Mar 25 17:01:27 2026 GMT
Not After : Mar 26 17:01:27 2026 GMT
Subject: CN=83310902707907a6544e6daf3cf7f70dc3be2f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e3:4c:b7:7f:92:f7:1f:7d:67:5a:30:f1:37:
14:7c:91:37:d9:cd:62:2a:fd:07:46:a5:a7:73:fb:
05:31:d8:34:3c:7b:20:c2:50:86:8e:b6:76:aa:19:
e0:6d:8e:f7:3f:7f:76:3a:8a:53:b3:36:9c:6a:eb:
14:82:35:db:3c:dd:f5:ca:e2:cd:f6:b1:ff:08:5c:
1f:5a:a3:5d:06:16:e7:fd:35:de:71:00:02:16:d0:
7d:34:b1:78:04:aa:8a:48:99:5a:75:60:e2:3a:61:
e1:71:50:1f:b0:54:a9:6a:a5:2c:da:c1:c3:27:e9:
66:92:66:5a:aa:16:e3:9b:eb:c3:00:79:da:21:d0:
15:0c:0c:4a:b0:10:80:bd:9b:db:ef:de:97:75:c9:
61:fb:a7:e9:ef:d1:ac:30:17:14:cc:09:c0:ab:74:
ef:9c:9e:9b:aa:aa:4c:21:ca:ab:73:23:98:13:ab:
37:0f:15:40:bd:57:de:3d:d8:a1:34:43:36:77:8e:
d2:71:0c:7b:aa:d0:e9:54:9c:4e:e2:31:92:00:16:
04:1c:90:70:29:a4:ff:eb:75:d3:3d:b6:aa:23:c9:
cd:8e:3f:53:ec:e5:ac:cc:df:89:8e:a7:3c:eb:e0:
88:0b:fe:b1:01:87:02:82:4e:67:31:c8:f1:ba:b2:
40:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:31:09:02:70:79:07:A6:54:4E:6D:AF:3C:F7:F7:0D:C3:BE:2F:9F
X509v3 Authority Key Identifier:
keyid:3D:EB:58:17:BB:E7:E5:A1:C5:FB:13:05:51:B8:4A:B4:88:01:6F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:44:e0:e6:94:7a:cd:1b:48:7d:12:0e:d5:9d:53:67:0c:f5:
72:e8:61:1a:a6:c5:0d:16:f5:6c:ce:d9:11:ad:f1:ff:94:50:
d7:24:47:90:d3:27:06:6d:13:ed:f4:b9:8d:d0:53:d1:8c:7c:
4c:46:e2:ad:a7:ca:e8:1f:3a:aa:12:97:87:59:e1:7e:6b:fc:
91:cd:0c:23:13:fc:8c:37:35:8e:fa:9b:63:8f:b9:56:fb:23:
0a:a8:1c:48:6a:e7:f2:ef:4c:f7:93:80:92:34:c7:ff:fc:0f:
94:ab:8b:e1:d3:7e:59:97:cf:b0:8e:c9:b6:58:08:94:c6:fb:
6e:6a:d3:a2:5b:34:1b:dd:d8:93:d6:95:87:ce:ae:b8:3e:e0:
ad:56:b2:12:b8:65:60:4b:69:88:41:c1:c8:d1:a2:cd:71:3c:
d2:5a:8e:0d:78:c6:39:1e:80:1b:3e:81:cf:3b:9b:e1:29:e3:
3f:2a:94:6d:b6:40:2b:fe:40:4b:c9:3c:d9:d7:5e:74:70:dd:
3e:61:b6:6b:ed:74:8f:a0:bc:ca:bc:31:a8:fa:1d:27:88:29:
ea:8f:fc:05:ad:3e:d6:a7:d8:87:8e:53:c9:f0:e0:43:8c:a6:
ad:69:43:00:78:7b:4c:72:f6:40:b6:bb:06:7c:62:bd:9b:ca:
ed:dc:da:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:11 2026 by rpki-client