Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
File: PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft (raw, json)
Hash identifier: dNdfsmayLNSu+nQnvC0P2qji8rODScCjzWm9iRA3jmY=
Subject key identifier: 38:EB:FC:DF:2C:81:0B:DA:CD:29:BF:D9:43:AF:61:F7:88:E2:24:ED
Authority key identifier: 3E:D2:39:45:FF:75:61:EE:99:D2:E2:78:E7:38:8D:04:5F:AD:D3:14
Certificate issuer: /CN=3ed23945ff7561ee99d2e278e7388d045fadd314
Certificate serial: 019D265F5F1B9021D74B78FC0284E36CCB9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
Manifest number: 0D8B
Signing time: Wed 25 Mar 2026 19:01:17 +0000
Manifest this update: Wed 25 Mar 2026 19:01:17 +0000
Manifest next update: Thu 26 Mar 2026 19:01:17 +0000
Files and hashes: 1: 49PmNqo2ozi6foyeWngY9-dP7_8.roa (hash: FTUCcOfecgfUHEaYOHAMv32E85Y9HshWNlhJWT3H1nQ=)
2: PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl (hash: utLrWNX9pgUiYLxLiNoKl4fZAuOPcrRC+hGIwU9GckU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:5f:1b:90:21:d7:4b:78:fc:02:84:e3:6c:cb:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ed23945ff7561ee99d2e278e7388d045fadd314
Validity
Not Before: Mar 25 19:01:17 2026 GMT
Not After : Mar 26 19:01:17 2026 GMT
Subject: CN=38ebfcdf2c810bdacd29bfd943af61f788e224ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:07:90:73:c8:48:1a:31:7d:0b:7e:b3:cd:db:
5d:43:91:4a:d8:a0:cb:39:ab:71:4f:bd:70:4f:36:
cc:75:45:c6:1a:82:97:39:5f:55:81:be:3a:fc:ac:
53:82:e1:9c:75:f2:04:73:ab:49:01:1f:31:34:69:
af:1d:76:b6:53:6b:dc:67:a8:b1:12:cd:a0:d3:44:
4b:3a:2f:1a:f2:1c:dd:9b:da:05:aa:de:34:50:8f:
e3:60:e0:32:a5:3c:cd:da:ae:ca:90:c9:e1:42:65:
10:fc:5b:e3:d9:f3:a5:72:1f:39:89:bf:af:3b:ae:
45:fe:4c:71:7a:20:1a:39:1c:0e:79:a0:77:88:b1:
fd:29:4c:0d:50:07:bd:c6:0d:2c:88:95:ff:09:5f:
39:6c:55:7c:08:23:92:14:ae:d5:c7:55:86:0b:84:
4d:44:49:4d:a0:4b:1c:7c:1d:7f:81:7f:11:f9:8c:
e1:d0:f4:bd:a6:ee:83:46:af:a2:2e:7f:49:1b:a4:
8f:47:c1:7b:3c:f5:22:43:dd:d0:83:0a:88:db:db:
5d:34:e0:66:2d:63:3e:ce:c2:24:e2:c3:1e:72:46:
57:9d:63:ca:e4:52:d5:7a:56:0f:1e:77:33:3f:20:
8b:5e:cb:54:31:04:05:40:c0:46:e2:12:6a:d7:4e:
2b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EB:FC:DF:2C:81:0B:DA:CD:29:BF:D9:43:AF:61:F7:88:E2:24:ED
X509v3 Authority Key Identifier:
keyid:3E:D2:39:45:FF:75:61:EE:99:D2:E2:78:E7:38:8D:04:5F:AD:D3:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:43:62:3e:ec:16:65:78:60:e7:6e:78:c3:0d:ae:b9:5e:43:
70:a4:d0:50:3b:1d:5b:7c:6e:4b:91:4f:30:15:14:00:29:cd:
d4:d5:d4:a1:45:aa:f5:18:bd:21:e7:1b:ad:85:11:62:2d:a5:
7e:38:1c:c0:b1:02:d4:d3:44:e1:5a:80:f2:fc:82:d4:12:50:
83:3a:85:16:75:38:de:c4:7a:a8:c1:9a:ac:23:7b:a4:52:8f:
df:19:d0:3a:e6:84:5e:d3:6d:a2:4c:af:a2:79:9c:a3:91:87:
5f:c7:8a:25:a6:0d:52:3e:2b:9c:85:e3:d9:39:3e:4b:98:56:
e1:a8:89:32:61:38:e2:74:3c:21:88:99:ab:76:18:a5:ca:c0:
b3:86:b9:73:90:f7:76:53:ec:61:e2:ec:9f:a2:24:3a:3e:80:
97:f9:7a:67:43:12:91:88:2a:20:1f:e4:fa:cc:dc:39:7b:3a:
c6:d4:4f:d9:52:ab:4e:5c:dc:2f:65:e0:5e:b4:dd:cc:6b:bb:
29:95:be:33:e6:b9:2e:ea:fe:c1:5e:e0:4d:4f:d7:0e:0b:f2:
26:98:75:a3:f0:c4:00:8f:9c:b6:65:ae:9f:d9:fe:f0:1f:68:
d7:31:db:23:a6:38:a4:ad:75:d0:dd:7f:30:25:bc:f6:74:40:
52:20:c5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:10 2026 by rpki-client