Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
File: PytPzqS3IvKm9scFxVie4avGIK4.mft (raw, json)
Hash identifier: VzqzPfzf9BHcn2gMTSzNs+Cm8eUXQxGZubXmG75LNNs=
Subject key identifier: A3:FE:68:D6:1B:12:43:EF:FD:2A:9A:98:4D:9A:1E:AD:0D:3B:25:B8
Authority key identifier: 3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE
Certificate issuer: /CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
Certificate serial: 019D284D54955CE1301078D165D7A5961866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 04:00:49 +0000
Manifest this update: Thu 26 Mar 2026 04:00:49 +0000
Manifest next update: Fri 27 Mar 2026 04:00:49 +0000
Files and hashes: 1: PytPzqS3IvKm9scFxVie4avGIK4.crl (hash: c3trg30LlTG+cSVsseHs20fuN7Lze6yUT6ApzmyIDGQ=)
2: Rbj8kULps77k1vuvOD23vcXMVrk.roa (hash: e6y1bFDYJyurguxeJmMNNNjCgXXxGouget3ofm5Tn7M=)
3: RoI3MM-0KYlxwCOUfkaDOeYsU5U.roa (hash: dLJKzgwKEgf2VwAfUCSXlmN7iFsDt2XbjlyglNJp8Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:54:95:5c:e1:30:10:78:d1:65:d7:a5:96:18:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
Validity
Not Before: Mar 26 04:00:49 2026 GMT
Not After : Mar 27 04:00:49 2026 GMT
Subject: CN=a3fe68d61b1243effd2a9a984d9a1ead0d3b25b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e4:08:a6:45:c9:0f:97:72:1b:78:b6:4f:a4:
01:cf:59:27:56:0b:d6:1f:4d:e8:7d:76:0f:72:83:
6d:3f:7f:24:9f:2a:fa:83:88:a9:18:69:28:b8:cf:
89:4c:35:c8:4c:12:aa:28:5c:7f:e4:a4:f0:8f:64:
0c:d6:d9:32:c8:5d:f9:ba:55:db:6f:58:82:68:b5:
7f:d1:99:b0:11:bb:b3:e6:37:6b:61:73:51:56:8d:
be:ec:ef:9e:59:5d:21:38:46:ec:61:35:a6:57:6d:
4d:04:3e:d6:70:4a:82:14:11:bf:90:fd:80:6f:63:
00:94:06:c0:a2:66:f0:4c:38:6c:b5:fd:fd:72:8c:
b6:1f:22:5b:da:0f:11:f8:51:ef:65:73:ac:59:c8:
4d:6e:97:78:2a:cb:8f:dd:79:1f:67:4d:6b:97:33:
44:1c:cb:ec:bb:21:e6:e2:40:34:ac:f5:b2:c1:bb:
76:e5:56:36:41:e8:7b:f6:b0:9d:80:02:0f:2b:a1:
bc:ae:e5:69:08:30:f3:c0:25:52:95:e5:f9:3f:4d:
12:32:53:f5:94:1e:10:60:c0:4a:1b:3b:39:0c:ff:
7a:95:52:46:02:65:33:27:ff:fd:4d:51:99:73:b3:
88:7b:51:37:3b:74:76:dd:c4:8d:a9:34:ed:81:ca:
52:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FE:68:D6:1B:12:43:EF:FD:2A:9A:98:4D:9A:1E:AD:0D:3B:25:B8
X509v3 Authority Key Identifier:
keyid:3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:9c:c9:d9:28:48:be:f6:14:fb:10:62:4c:dc:85:9b:d5:0e:
9e:d9:c2:33:85:25:67:7b:e3:86:df:e0:cd:ca:d5:3e:bd:4b:
9e:ad:d4:26:aa:c0:63:51:0b:f4:7c:d8:a7:e8:8e:77:77:d0:
d2:9b:df:fa:e4:88:90:cf:3a:9f:ab:31:4a:0a:bf:78:89:3e:
21:ab:a1:67:47:8f:7b:4b:38:3e:c4:9d:ea:62:45:21:bf:77:
6c:6f:b4:99:57:f3:dc:bf:ef:34:3b:7d:d2:5d:7d:43:cc:e5:
36:0a:80:f7:a2:29:67:3c:22:06:3c:fa:11:5c:78:56:e2:04:
6e:c2:c8:f0:2b:ae:16:a0:4c:29:05:4a:dc:92:9a:34:77:fd:
3d:3b:20:9e:a1:79:25:af:8f:95:d5:39:1d:12:ca:de:35:68:
fc:66:0d:84:ee:d8:0b:4c:f3:12:2d:35:4e:ce:14:f2:71:03:
e8:06:ee:22:56:76:00:15:20:ab:4f:97:49:c1:a4:48:5a:66:
bb:98:d4:d7:ce:86:9c:e9:59:7d:b4:01:6a:36:5c:13:83:a8:
8d:1d:5c:80:a6:be:71:7a:bd:dd:8d:d9:e5:d9:ec:48:19:c7:
2e:e9:b3:b2:40:69:c0:ce:5e:7a:f0:1e:23:99:4e:8a:3a:a7:
41:12:76:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:52 2026 by rpki-client