Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
File: P9oppIwld1jI5RjuXIsDzNoCR8k.mft (raw, json)
Hash identifier: pZtbLeY15kA368htUsEl7lCrZqVmsdEz5Z/z+4CJZ3c=
Subject key identifier: 47:6D:EE:0C:94:C8:E1:86:B1:07:D7:72:77:83:0D:3E:73:7F:8A:AB
Authority key identifier: 3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
Certificate issuer: /CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Certificate serial: 019D2929178ED86D70873F8FF36F469F90AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 08:00:52 +0000
Manifest this update: Thu 26 Mar 2026 08:00:52 +0000
Manifest next update: Fri 27 Mar 2026 08:00:52 +0000
Files and hashes: 1: OsxR7yFdFRenycaE_q8hld1AbUQ.roa (hash: Fufnasj3vyQ/2zEL9UqegZtuU29Utyi2U8r5NLTadZk=)
2: P9oppIwld1jI5RjuXIsDzNoCR8k.crl (hash: gISsQI9t2F9XbMjthpSlqq6pXNt99Ab1ffkZM7yypfc=)
3: q1MdFgrztAHRD55dweODJfa4RK4.roa (hash: aZ5l1yMm02BT+qNFooS+z/TzrtnqLkZdfbJDBupopYk=)
4: v09tww-7oHxZ6sHFn1E1sm8TLy8.roa (hash: b5FXRSJZMeoKM16WUIwE96LX1QoLUNfwWW43UIqRREE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:17:8e:d8:6d:70:87:3f:8f:f3:6f:46:9f:90:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Validity
Not Before: Mar 26 08:00:52 2026 GMT
Not After : Mar 27 08:00:52 2026 GMT
Subject: CN=476dee0c94c8e186b107d77277830d3e737f8aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c2:ba:6e:aa:d5:1c:32:d2:8f:08:38:10:60:
5c:bc:b1:bc:7f:ba:57:76:59:1b:48:eb:70:d7:e1:
fe:26:43:39:5c:32:40:61:e5:0a:d3:fa:7e:3f:69:
19:67:4a:52:56:ff:4d:31:f0:2f:b8:bf:8c:b6:a8:
2d:46:56:26:c5:b3:85:a1:f4:c4:8e:00:51:e7:ab:
ee:56:f2:3c:02:cf:8a:a8:ef:0d:99:ca:49:10:b3:
21:61:03:52:27:56:26:88:03:d5:0f:9d:06:29:91:
0d:f3:97:f1:1a:ea:45:3b:91:9e:d9:81:f8:55:43:
c7:f9:23:22:3d:96:fb:28:ba:e7:43:8b:e3:09:00:
4e:a0:f4:8e:dd:f2:2f:11:8c:78:f7:54:e5:86:44:
e1:9d:7b:c2:12:a6:37:be:58:66:b5:1a:9e:84:9e:
0f:a5:46:aa:4f:54:59:76:38:16:50:8a:f5:ec:52:
e6:71:f3:56:a9:09:c2:f1:8e:19:a3:b3:59:b7:a4:
b8:a6:6a:4c:ab:b9:45:e7:b1:75:3c:e3:85:2a:d7:
9c:53:62:00:b2:68:58:e2:48:00:62:c7:9b:05:ff:
69:dd:75:e3:7a:06:53:88:00:5c:0f:ba:83:11:2d:
bb:92:13:6a:b2:5a:9b:17:72:a6:db:d2:4f:d4:c1:
f6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:6D:EE:0C:94:C8:E1:86:B1:07:D7:72:77:83:0D:3E:73:7F:8A:AB
X509v3 Authority Key Identifier:
keyid:3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:33:5f:ee:3d:69:9f:39:50:d7:99:72:20:1c:6a:f0:40:20:
51:90:fc:8e:96:b7:74:4c:aa:05:42:48:f2:96:51:c8:4a:68:
a0:cb:ed:7e:65:cb:53:5c:06:e2:84:ba:6c:72:47:d7:51:cd:
7b:ee:31:39:7a:1b:3b:c8:0c:a9:bc:4c:d9:58:08:24:ca:e4:
bb:88:20:71:d5:24:bf:92:a8:c0:30:be:5c:47:61:e5:0d:69:
00:ca:b3:2a:6e:97:fe:b6:56:f7:6e:f3:87:d0:11:a4:cf:e8:
cc:7b:1a:f4:dd:99:6d:21:ec:c8:e5:5c:07:2a:73:43:3a:0d:
eb:4b:0a:48:72:80:ac:c8:92:d5:85:9d:a8:bc:9a:3e:58:34:
ad:c9:77:59:81:cf:c8:37:fa:9c:0f:de:03:a6:4a:c6:9b:53:
cf:bd:15:46:80:81:45:4e:05:3b:82:fa:d7:6c:a5:95:97:5d:
a5:84:b4:e5:5b:be:f6:bd:86:d2:3c:49:b1:1f:51:74:ce:48:
55:7a:cc:20:fa:0a:24:91:8e:f6:81:96:44:5c:bc:54:c6:ae:
ef:ed:cf:cc:90:b0:eb:00:37:e0:cf:85:d8:05:67:c3:7f:58:
ed:75:24:17:e5:15:b7:80:21:33:cf:48:6e:37:89:fc:49:ae:
e4:f2:7b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:49:26 2026 by rpki-client