Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
File: to-PMlFKGD6Xejx982Rz1WJgxKQ.mft (raw, json)
Hash identifier: q9jzhzmYVwNjJLjiOAVJblhzaxumNwTH7VY5RFb8Qhg=
Subject key identifier: ED:ED:C1:F1:63:29:74:A7:45:25:05:66:BA:7B:38:19:B1:CB:2E:B1
Authority key identifier: B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
Certificate issuer: /CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Certificate serial: 019D29CDB57CCF8BD9890E0ECAA7D1BF0150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
Manifest number: 0CE9
Signing time: Thu 26 Mar 2026 11:00:40 +0000
Manifest this update: Thu 26 Mar 2026 11:00:40 +0000
Manifest next update: Fri 27 Mar 2026 11:00:40 +0000
Files and hashes: 1: UycNDBh6XIKJ82eOMM9nsWm3RUU.roa (hash: j5CuV0Ecvfd3t9K7/xrfKK4OIBdyHHKPYNpzUJ5l9jc=)
2: to-PMlFKGD6Xejx982Rz1WJgxKQ.crl (hash: 66rCwJHzYHn3aRu3L2zIDm5Yj3VK1IisyJhG0HJDIC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:b5:7c:cf:8b:d9:89:0e:0e:ca:a7:d1:bf:01:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Validity
Not Before: Mar 26 11:00:40 2026 GMT
Not After : Mar 27 11:00:40 2026 GMT
Subject: CN=ededc1f1632974a745250566ba7b3819b1cb2eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:42:78:21:9c:c2:bb:6b:dc:9e:8b:e4:79:0c:
b6:7b:4b:d6:df:cf:77:2e:00:a1:7c:bb:00:19:f6:
76:16:f5:cb:1e:28:1d:aa:42:b7:31:27:4a:7e:8e:
00:ba:92:86:26:ad:bb:fe:43:df:fc:36:eb:e0:aa:
4a:5f:ae:7a:23:46:a9:0d:d7:7b:18:fe:77:39:94:
65:c2:cb:3e:d1:33:28:2c:16:1a:c0:cc:77:40:9d:
5e:bc:ac:54:98:64:ea:d8:38:fa:1f:36:13:a9:b9:
0b:12:83:bf:8e:76:cb:7a:fb:99:d1:8f:6f:8a:1f:
ff:49:64:96:35:b0:84:fd:14:6c:84:f5:68:64:18:
17:05:19:fa:c0:53:d6:5e:18:fd:d6:32:9b:e9:80:
ad:4a:2f:02:3e:2d:41:e9:6b:fa:ae:9c:6b:30:09:
4e:c9:be:ef:66:27:20:58:b3:f0:f3:61:d0:1a:fe:
79:96:e1:08:0c:84:bd:16:a5:aa:a4:31:5a:a6:c6:
ed:37:08:ed:ff:29:2c:f6:7c:39:f2:f6:db:d4:11:
c4:06:aa:ca:28:84:1c:c1:d8:20:72:a8:c0:6b:66:
37:14:41:a5:4d:8f:9e:33:3d:f2:62:4e:ef:44:ea:
5d:1b:16:05:66:20:fa:b9:17:e5:bd:41:24:bc:2d:
2e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:ED:C1:F1:63:29:74:A7:45:25:05:66:BA:7B:38:19:B1:CB:2E:B1
X509v3 Authority Key Identifier:
keyid:B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:0b:a0:b7:d1:51:79:27:b3:88:08:28:50:67:b2:fd:e3:a8:
6d:99:c8:67:bb:07:6f:32:e5:8f:60:51:3e:db:41:c7:18:24:
cd:2f:4d:e3:ca:f2:4a:9b:c4:7c:e2:13:7a:f5:ff:3d:6e:ae:
4a:4e:13:e5:af:94:13:3f:1d:3d:5e:26:0d:2d:7c:57:2b:38:
8f:11:29:fd:c6:e9:cc:23:43:81:52:0f:3b:19:f4:d3:04:97:
d5:7c:ec:03:78:bd:55:7b:63:25:81:8f:3f:a4:60:64:72:b6:
9a:4e:9a:fa:69:b9:27:c1:5d:b0:3b:29:75:05:f5:54:b7:c1:
5e:17:95:62:d3:10:fc:64:8d:e3:de:fb:85:72:85:56:f2:cf:
6d:65:ea:e3:ca:df:e0:96:47:92:1f:9c:4a:21:6c:66:d6:ce:
6d:25:d6:fa:68:7e:d5:30:ea:b4:21:0a:af:e0:df:34:96:f0:
70:e7:b9:cd:fe:e7:e1:f6:86:ae:f8:53:99:8b:93:97:5d:84:
4f:f6:b4:06:b7:72:62:21:6d:8e:cc:2b:96:7b:1a:69:7f:21:
74:36:07:7f:a2:ab:9a:ce:fd:c8:73:54:06:13:ce:18:20:7a:
7e:fd:93:90:2f:0f:dd:05:4c:06:08:e0:8f:91:c5:f9:10:95:
45:23:4c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:27:34 2026 by rpki-client