Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
File: pPP3bj7O8kl-ET6ju664U_YvWP4.mft (raw, json)
Hash identifier: mwB18dBPhVPhkFdlLg5qQeFWT0mZzFwMWl4PzJQwc6w=
Subject key identifier: 75:BB:DF:10:29:68:6B:00:35:A8:D5:8B:01:F1:A5:6B:F8:5E:ED:F2
Authority key identifier: A4:F3:F7:6E:3E:CE:F2:49:7E:11:3E:A3:BB:AE:B8:53:F6:2F:58:FE
Certificate issuer: /CN=a4f3f76e3ecef2497e113ea3bbaeb853f62f58fe
Certificate serial: 019D2816773946CE5454C70B4B810CB745D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
Manifest number: 0F1C
Signing time: Thu 26 Mar 2026 03:00:53 +0000
Manifest this update: Thu 26 Mar 2026 03:00:53 +0000
Manifest next update: Fri 27 Mar 2026 03:00:53 +0000
Files and hashes: 1: O4sAh3xkbKW8_1R4ygmeymIKXCo.roa (hash: 3590EWq8UBW+NRuB0qqAJxA1WOGNS1btb/g2MoAacyw=)
2: pPP3bj7O8kl-ET6ju664U_YvWP4.crl (hash: ffCXyk5AZX3TJiwzIbFcP+HziEtqndaDMGDC6bDEr3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:77:39:46:ce:54:54:c7:0b:4b:81:0c:b7:45:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f3f76e3ecef2497e113ea3bbaeb853f62f58fe
Validity
Not Before: Mar 26 03:00:53 2026 GMT
Not After : Mar 27 03:00:53 2026 GMT
Subject: CN=75bbdf1029686b0035a8d58b01f1a56bf85eedf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2c:d5:a0:66:93:60:0b:19:fc:d4:fa:ae:49:
0a:85:3a:54:54:36:7a:6c:48:e4:36:4f:cf:ff:60:
a7:88:b3:9c:f6:75:5f:5e:7c:19:3f:07:1f:ae:4d:
55:2d:8d:b2:7b:3d:d9:8b:21:83:e5:93:73:21:29:
dc:b5:b2:6e:2f:46:b3:36:35:9e:76:09:e5:6a:19:
bc:1d:37:45:6b:be:f1:88:ac:ea:7f:38:58:37:7a:
74:3d:1c:f7:a2:e9:73:59:5f:1b:65:a9:e4:98:fa:
b4:16:78:8d:51:52:77:01:29:52:19:db:d5:c6:03:
6c:4f:6e:e3:f1:16:0f:9e:1f:84:7d:41:83:ca:11:
8f:3e:9f:c8:d0:f1:c3:33:fe:86:37:20:eb:ff:ab:
be:56:cb:73:33:ae:d7:4d:8b:65:ee:33:8c:44:21:
38:63:1e:1f:67:77:2c:11:eb:cb:ba:76:62:90:96:
7c:d7:7a:16:1e:0d:30:d1:ba:bb:9e:7c:2d:ff:14:
36:b5:6d:3c:4c:7d:53:28:7a:b1:54:25:92:8e:9c:
cb:18:c7:98:ca:1d:06:5b:3a:f0:cd:02:69:11:f2:
64:5a:e7:bb:ae:b6:69:75:e0:b6:a8:9e:de:f1:df:
e0:f1:de:45:c2:05:1f:7b:7b:74:4a:52:73:62:28:
60:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BB:DF:10:29:68:6B:00:35:A8:D5:8B:01:F1:A5:6B:F8:5E:ED:F2
X509v3 Authority Key Identifier:
keyid:A4:F3:F7:6E:3E:CE:F2:49:7E:11:3E:A3:BB:AE:B8:53:F6:2F:58:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:60:90:bf:41:50:13:46:27:13:ca:cf:54:aa:8d:fb:29:ba:
bd:51:cf:be:de:a7:ac:e4:c1:ae:7f:50:cc:e6:3a:ff:88:e4:
15:5a:5c:15:19:d2:04:ba:f8:d0:dc:1e:5d:39:b4:aa:cb:eb:
f8:f9:8a:84:0f:90:e4:88:b6:97:51:df:2b:6c:76:80:c8:d7:
70:ca:49:24:24:21:d3:aa:57:15:86:7c:29:61:91:79:8a:5b:
dc:b3:97:8a:47:6d:e5:7a:13:2b:b9:3d:9d:90:1f:e2:25:61:
e0:df:35:b5:7d:90:78:29:92:f5:8e:5f:4f:d3:dd:82:17:d9:
e2:b8:28:f6:8a:43:88:68:32:21:91:e5:c2:5f:7e:2d:9e:00:
c9:2d:80:2d:ae:1e:7e:f6:17:7a:da:0f:f6:62:6a:6d:66:84:
00:c8:e7:c9:49:38:11:4a:a4:f3:86:9b:b0:30:f1:e6:af:bc:
ab:9b:6c:68:5f:79:d6:68:1e:0d:a4:65:dd:f5:8e:60:ec:fa:
59:67:40:5d:12:2d:97:b3:07:25:c9:e8:0a:f8:ed:6f:b5:7c:
0f:98:96:f5:1d:21:dd:36:90:23:6e:f6:95:ab:96:89:a1:66:
45:40:18:8a:94:c3:dc:f7:e4:37:54:98:99:ad:f4:2e:73:da:
64:68:ac:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:33:49 2026 by rpki-client