Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
File: P98IRZEZlp1LnBf1qF6ScyxVF9E.mft (raw, json)
Hash identifier: YQhg1jis+TQ35WHICd1paohKyXja7vVbkZUr9t7aXE8=
Subject key identifier: 06:C3:DA:F2:E6:92:E7:25:6D:AA:DE:77:9E:5F:08:86:F5:3B:72:7C
Authority key identifier: 3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1
Certificate issuer: /CN=3fdf08459119969d4b9c17f5a85e92732c5517d1
Certificate serial: 01A0E3D0BC6A78E431E2DF419513874CD122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
Manifest number: 1A5D
Signing time: Sun 27 Sep 2026 17:01:42 +0000
Manifest this update: Sun 27 Sep 2026 17:01:42 +0000
Manifest next update: Mon 28 Sep 2026 17:01:42 +0000
Files and hashes: 1: P98IRZEZlp1LnBf1qF6ScyxVF9E.crl (hash: 6ix0d0rMHVmikgYpFoT+O86d1Vt2qbag2Cj+s5p92ZM=)
2: fH_gcKdAIP3uBlIddsjG_0qsj3E.roa (hash: L4lQAURP1ERgbM6Iiwl8JhlSrJdP31F20qdbJNDofes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:d0:bc:6a:78:e4:31:e2:df:41:95:13:87:4c:d1:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fdf08459119969d4b9c17f5a85e92732c5517d1
Validity
Not Before: Sep 27 17:01:42 2026 GMT
Not After : Sep 28 17:01:42 2026 GMT
Subject: CN=06c3daf2e692e7256daade779e5f0886f53b727c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:62:58:91:cd:25:f1:d7:bf:35:53:bf:27:a7:
c2:7d:f2:01:47:50:5d:ce:ed:cf:dd:e0:ca:3c:97:
03:ed:04:50:ce:b8:24:2c:2f:61:89:50:3e:e8:16:
3f:3f:a0:d3:de:09:78:6d:6d:af:27:3e:da:e7:c9:
3a:22:4d:ab:b5:3d:b1:97:91:52:70:ed:45:50:bb:
82:82:98:0a:69:d8:87:56:12:2e:59:17:9a:ca:1c:
8d:c0:15:b1:c9:00:5b:35:7f:60:1f:bb:63:d2:35:
06:de:2c:23:b2:a5:c9:20:8c:5c:bd:55:ee:c6:06:
96:46:8c:bd:c2:d5:1f:e0:46:bb:bb:0c:8b:9e:ae:
46:e7:e6:a7:18:ee:51:cd:ad:f6:08:33:23:41:47:
7a:fb:b7:d6:64:ec:67:80:6b:d2:c9:4e:1e:91:d7:
be:c4:47:ff:0f:c6:ab:ef:20:d3:a4:be:62:3b:21:
7c:53:41:84:92:1e:19:b2:67:1f:7b:71:8b:22:47:
26:fa:98:fc:d1:08:2a:cb:60:bf:81:01:8d:fe:cc:
62:76:35:3d:a3:91:25:07:40:f1:fc:bf:45:b7:93:
49:31:86:c6:93:f8:4c:f9:cf:b1:a8:85:4f:51:fb:
08:f2:49:67:69:cd:d7:67:f3:fb:51:77:c7:77:98:
0d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C3:DA:F2:E6:92:E7:25:6D:AA:DE:77:9E:5F:08:86:F5:3B:72:7C
X509v3 Authority Key Identifier:
keyid:3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:9d:3f:bd:8d:c1:08:5d:db:14:ba:d9:a9:8e:64:c4:35:11:
56:42:51:64:32:67:cb:4c:77:57:37:38:a3:91:f8:b9:75:d0:
a0:45:44:88:02:27:68:ba:5a:27:d3:34:7d:f7:76:49:2b:87:
38:87:2f:b9:1d:3b:36:f7:30:ed:c7:7b:6f:5f:d8:0a:be:d7:
39:dc:75:f1:15:dd:27:4e:da:a9:84:99:06:b8:dc:d3:61:8c:
d8:4c:1d:02:45:90:0b:fb:54:9c:fc:89:95:c5:a9:8e:7b:ba:
d5:cb:ff:cc:fe:05:83:a5:8a:eb:3d:b9:36:14:45:28:ec:22:
d7:e2:5d:a3:ea:53:61:32:45:b8:23:7b:51:0d:3c:31:ec:b0:
e4:94:55:18:4f:76:5d:a0:7b:58:cd:2d:5f:36:c6:8e:f7:95:
b4:49:49:27:16:96:d6:ae:78:f3:93:40:01:62:11:bd:d6:3c:
de:d6:bd:ce:d2:83:a3:7c:c3:f8:0d:66:d9:d4:18:7c:21:da:
47:b8:dc:e9:6d:34:5e:c3:45:18:f9:73:4d:31:58:32:f2:2a:
b0:48:17:b9:d5:fd:55:8e:8a:04:ed:cf:ba:d3:c8:a3:fa:33:
bd:b5:7c:e0:46:16:93:16:68:bf:e1:5e:86:e4:46:7f:44:38:
d4:e7:10:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:55:41 2026 by rpki-client