Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft
File: P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft (raw, json)
Hash identifier: q3y6qlTvq8FHEB1C3F77E3+/HAjF6ltc+c8Rz2sXu7I=
Subject key identifier: E2:41:99:06:40:ED:41:B1:BF:CA:78:48:79:68:39:0D:D5:6E:E6:34
Authority key identifier: 3F:4B:FE:92:DE:10:E6:60:DD:F4:5C:C2:D1:F5:FF:B6:36:EF:35:90
Certificate issuer: /CN=3f4bfe92de10e660ddf45cc2d1f5ffb636ef3590
Certificate serial: 019D26CD555781472CA9CAECEFA456384219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft
Manifest number: 0148
Signing time: Wed 25 Mar 2026 21:01:24 +0000
Manifest this update: Wed 25 Mar 2026 21:01:24 +0000
Manifest next update: Thu 26 Mar 2026 21:01:24 +0000
Files and hashes: 1: P0v-kt4Q5mDd9FzC0fX_tjbvNZA.crl (hash: +RTKBNAuPgyNVllm0SnwnQYLO2C5wErk/Fs5gdnwcBs=)
2: wiCmzHMmJI0asghERNxqN-MynS0.roa (hash: bcmBxTUeR+yh0Zn1PK7SL7wVYZreCWWh7r4c30KwASE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:55:57:81:47:2c:a9:ca:ec:ef:a4:56:38:42:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f4bfe92de10e660ddf45cc2d1f5ffb636ef3590
Validity
Not Before: Mar 25 21:01:24 2026 GMT
Not After : Mar 26 21:01:24 2026 GMT
Subject: CN=e241990640ed41b1bfca78487968390dd56ee634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:83:82:88:5f:cf:df:90:40:d3:6e:cc:8b:bc:
c1:b0:c0:90:a6:34:16:72:14:44:ff:be:e1:be:4c:
69:9f:c4:e1:e8:29:cf:1b:e0:43:bc:d5:1d:20:b4:
dd:7d:c4:c8:dd:de:ac:ee:8f:35:5d:7c:b0:79:20:
99:51:8c:4c:eb:1a:ba:89:a2:b4:00:13:e2:64:97:
16:b6:f8:28:b7:7d:9d:27:2c:30:2f:d6:a9:bc:1a:
fa:28:16:7c:93:89:59:f8:b7:87:82:71:b1:62:38:
eb:55:81:c9:00:4c:89:2c:dc:56:5f:80:a3:d2:4c:
52:d6:fd:a1:0c:93:44:ea:b4:fb:37:1a:a4:ff:cb:
d4:98:7e:70:ac:b8:00:50:f2:a1:97:85:a1:c8:ca:
a7:d9:1c:64:75:81:69:c3:8c:17:58:7e:27:27:0f:
60:2b:61:7a:1b:28:63:4a:a1:a8:bc:77:5f:e5:7b:
5e:15:44:d4:a8:7a:24:d3:7e:5b:7a:6c:59:9a:3c:
31:9d:64:a7:cc:83:35:b0:20:59:82:cd:22:b3:46:
9b:d8:b0:f3:cf:44:47:51:b5:9c:8b:ae:16:d3:c9:
85:11:be:c1:ca:40:69:5b:c8:3c:08:de:9a:99:74:
00:7c:30:51:85:26:15:17:ad:ef:f0:b3:44:35:d9:
69:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:41:99:06:40:ED:41:B1:BF:CA:78:48:79:68:39:0D:D5:6E:E6:34
X509v3 Authority Key Identifier:
keyid:3F:4B:FE:92:DE:10:E6:60:DD:F4:5C:C2:D1:F5:FF:B6:36:EF:35:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e1:b8:a7:96:ec:d1:f3:06:e5:f5:e0:e8:4b:4e:2a:12:1f:
a3:a5:f9:d4:27:6c:2b:bb:74:c4:36:69:fe:cb:87:5f:6f:f8:
6d:2e:34:48:f8:a8:a5:1d:64:0a:b3:45:7c:58:2c:7b:34:88:
6a:76:ed:85:dd:74:45:89:c8:66:88:ce:a0:4a:84:22:79:34:
47:22:0e:da:70:41:34:15:2e:97:35:6c:ba:dd:0f:94:19:b0:
3f:16:81:e8:1d:34:6f:55:5c:3a:80:6b:a4:e5:5e:fa:36:62:
00:ad:6e:62:08:2d:35:7e:1c:e4:55:84:23:40:41:ee:cf:a3:
54:80:1f:80:4b:a8:58:29:83:ce:d7:ac:a3:cf:63:d9:9f:a4:
d9:5e:50:15:16:4a:f5:6d:ad:2b:00:e1:95:6c:25:d3:00:71:
4c:fa:81:29:6b:b8:97:a7:5e:47:9f:1c:8f:9e:0b:35:37:78:
ff:95:da:94:a5:47:1e:51:6f:82:74:b4:9f:31:94:ad:e1:1a:
34:e8:4e:1b:7b:8f:64:fe:38:af:9e:f0:98:54:d0:92:79:c9:
fa:eb:87:c6:f1:f6:38:28:48:b1:4a:86:ac:c5:14:81:65:74:
9a:ff:4b:32:6a:6d:a8:4d:cb:ce:9c:55:4e:fd:ea:7c:6f:b3:
bf:c3:33:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:26 2026 by rpki-client