Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
File: P4_xyWZv4ZXySqH-jDRdecSOe8A.mft (raw, json)
Hash identifier: MAVGyZXbli/9+DMRX7yK/MHcNMEdIxWkEZXmW5bvO+E=
Subject key identifier: 3F:3F:E7:98:D9:18:A8:E8:DC:BB:45:F9:9D:EF:00:87:CF:D0:55:DE
Authority key identifier: 3F:8F:F1:C9:66:6F:E1:95:F2:4A:A1:FE:8C:34:5D:79:C4:8E:7B:C0
Certificate issuer: /CN=3f8ff1c9666fe195f24aa1fe8c345d79c48e7bc0
Certificate serial: 019D284D7E38478886B07DF7F3A0CCE216A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
Manifest number: 0C72
Signing time: Thu 26 Mar 2026 04:01:00 +0000
Manifest this update: Thu 26 Mar 2026 04:01:00 +0000
Manifest next update: Fri 27 Mar 2026 04:01:00 +0000
Files and hashes: 1: P4_xyWZv4ZXySqH-jDRdecSOe8A.crl (hash: oM3xrv64vvW8scQ0uD4QX8+bD9A0slOEEtEa2RRQ6o4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:7e:38:47:88:86:b0:7d:f7:f3:a0:cc:e2:16:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ff1c9666fe195f24aa1fe8c345d79c48e7bc0
Validity
Not Before: Mar 26 04:01:00 2026 GMT
Not After : Mar 27 04:01:00 2026 GMT
Subject: CN=3f3fe798d918a8e8dcbb45f99def0087cfd055de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5e:08:69:f0:37:19:93:25:c0:ce:64:c6:06:
b6:e5:13:32:00:4b:23:ff:53:5d:00:6c:5c:fa:30:
46:66:41:7e:82:b0:91:27:eb:62:28:76:75:93:b6:
b2:1d:63:b8:38:d3:68:4f:2e:2b:03:3d:6e:5d:47:
30:3d:98:9f:c8:9a:bf:d1:72:35:dd:1e:3f:60:a9:
48:81:f6:29:2b:4a:9b:ba:a5:21:81:fd:44:e4:c2:
50:0a:11:3e:10:b0:0d:ed:b9:be:f0:af:f3:c8:da:
5c:5b:86:93:e6:ce:45:60:5e:ca:0d:76:2f:81:c9:
73:01:e5:bc:27:87:6e:c6:87:8c:35:a9:15:83:e7:
cd:b6:d4:08:4b:58:7f:5f:1e:e1:e1:cb:9d:93:8c:
d1:fa:b8:a9:24:ff:0a:4c:c6:65:4f:fa:73:6a:45:
43:3a:37:b0:21:8d:6c:69:e7:f5:9b:fe:a2:9d:97:
51:47:2f:ea:7a:55:66:a6:50:e5:46:db:9f:c0:83:
a6:84:67:fc:04:5c:27:4c:3a:19:5a:82:47:a5:33:
b5:c5:1e:0a:7d:cd:ba:bb:20:36:43:ec:4b:ff:44:
4c:58:58:39:bb:53:89:2d:bf:30:ce:b2:8d:c9:e3:
79:82:a1:c3:c6:c8:50:04:c4:a5:20:75:25:a0:3c:
38:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3F:E7:98:D9:18:A8:E8:DC:BB:45:F9:9D:EF:00:87:CF:D0:55:DE
X509v3 Authority Key Identifier:
keyid:3F:8F:F1:C9:66:6F:E1:95:F2:4A:A1:FE:8C:34:5D:79:C4:8E:7B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:54:b9:88:ef:3f:8e:b5:98:68:82:83:aa:55:6e:dc:d6:ac:
c8:0d:ff:2e:75:af:72:a2:71:ca:b2:d4:5f:31:80:50:cb:c5:
2f:6f:c9:31:73:5f:54:9d:78:4b:e7:ee:fa:e2:a6:32:0f:05:
d7:f3:e7:76:4c:db:86:f8:a4:c8:1c:84:ad:71:4b:fd:73:ef:
f5:cc:f1:79:ab:23:aa:42:19:c9:d2:cd:14:a6:17:69:d1:f1:
7c:7b:b8:a0:d9:99:4d:3d:e4:20:be:4c:f9:ab:9e:9a:e2:68:
9e:37:01:21:80:7c:48:4b:23:b6:37:16:d0:fb:46:ab:f2:aa:
af:70:ad:67:d1:91:ec:82:5b:38:cf:a0:19:30:05:25:f3:7a:
1c:59:eb:54:1f:a2:da:8f:73:c7:a4:80:18:58:e5:b9:03:1b:
e4:29:d1:3f:44:a1:c6:c2:ca:68:0c:4f:81:4c:bf:51:e1:68:
b7:bb:c4:b8:d4:af:d0:9f:3c:2a:ee:ab:a9:96:7b:eb:e2:60:
85:cc:b4:8a:b5:ae:0c:99:3d:43:85:e5:ff:1c:e7:64:88:85:
58:4e:a6:e3:ba:b3:db:89:e7:28:43:36:eb:b6:50:4f:b7:f5:
46:49:d2:e7:e3:6f:05:4a:92:37:6d:5c:3a:f8:c3:5b:1e:43:
5e:b9:49:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:19 2026 by rpki-client