Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
File: PFaMWdeoMZnDp56g6DdblG7YhOI.mft (raw, json)
Hash identifier: b5LR4VLSHu6cZZPynwduyj3KAm2EIfMumMLXPEkDq/Q=
Subject key identifier: BA:2A:B2:AC:77:FB:91:DD:B3:A1:DC:38:CD:A8:54:8C:B5:A3:43:6A
Authority key identifier: 3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
Certificate issuer: /CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Certificate serial: 019D26CD18F95C431B190B8A5912FEFE771E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 21:01:08 +0000
Manifest this update: Wed 25 Mar 2026 21:01:08 +0000
Manifest next update: Thu 26 Mar 2026 21:01:08 +0000
Files and hashes: 1: 0ZH3kxew36RRFzQg_mo4-7q2H4U.roa (hash: k3MKGbvdmLnbLs9zehodMhvSl8HPr3KY+BJ978CUfo8=)
2: AydP7XNvWxhhDMLSuOqc0Oa5dE0.roa (hash: jUVgcjRvFoEADtpRITq72Z8KeRsnl4848PEL4Me2SIw=)
3: PFaMWdeoMZnDp56g6DdblG7YhOI.crl (hash: dJ1f7Z/8iTb89X0p3pnHXwGGHl8yQ7Bgoza0+SZA5gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:18:f9:5c:43:1b:19:0b:8a:59:12:fe:fe:77:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Validity
Not Before: Mar 25 21:01:08 2026 GMT
Not After : Mar 26 21:01:08 2026 GMT
Subject: CN=ba2ab2ac77fb91ddb3a1dc38cda8548cb5a3436a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2c:36:6f:6c:e8:85:f5:7d:49:c1:81:d0:94:
18:11:da:3a:ef:da:51:26:0c:d7:6d:1e:30:c6:9e:
a8:e8:37:b5:d7:c2:dc:14:fb:9c:fe:24:28:f9:21:
e3:17:9f:23:f3:0f:9d:50:01:8d:ba:7f:5b:74:01:
c9:7c:4a:e9:01:78:3a:46:a1:4d:59:8c:52:36:a3:
4f:eb:72:06:fe:1c:d0:54:f8:84:1c:75:67:05:a2:
eb:16:94:12:91:db:d8:c8:f2:61:a8:cc:4b:a8:44:
26:d5:e4:12:48:53:b1:d1:09:7a:3b:64:ab:89:20:
90:61:44:b9:1c:f5:30:f9:d9:63:9f:04:aa:62:0b:
b8:d9:ae:e1:29:2d:a8:73:31:9c:70:61:ce:4f:d0:
09:da:d1:64:04:f0:f9:cb:d9:a9:e3:ff:b4:4b:66:
ce:db:67:6e:f8:e4:32:97:9f:2f:f4:44:c4:8c:2e:
aa:d0:12:b0:be:8b:31:64:54:53:dd:11:af:92:71:
65:e5:14:4c:92:8d:d0:8d:9a:f3:a0:2f:ab:fe:9b:
26:86:cf:d2:de:c6:22:54:10:df:35:55:e1:52:82:
70:1b:75:d8:f3:e7:eb:f8:11:f5:6d:aa:84:3a:76:
7a:66:28:7b:1d:f0:3f:ff:8c:2c:24:65:3d:10:e4:
60:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2A:B2:AC:77:FB:91:DD:B3:A1:DC:38:CD:A8:54:8C:B5:A3:43:6A
X509v3 Authority Key Identifier:
keyid:3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:2b:a8:ff:6f:3a:81:2b:02:49:f4:9a:a1:84:93:2b:02:64:
df:32:4e:a0:34:fb:33:f6:04:65:45:67:0d:9b:b4:9d:ed:37:
9c:78:c1:92:80:a5:ae:d3:97:ed:8d:54:13:69:2f:df:ab:1f:
85:a7:2a:a8:af:39:81:16:b3:36:47:d2:7a:f9:24:04:6b:3c:
7e:ca:bd:66:8f:e1:36:8c:67:58:27:b1:0e:8c:a6:e3:a6:98:
9f:7b:e3:97:54:f5:39:1d:46:7b:b0:e0:86:03:2e:3d:35:e7:
a8:dd:56:9d:6d:6e:ac:f8:b5:15:fe:59:52:05:4e:67:7f:86:
d8:35:e9:34:e4:bf:bd:f9:c5:03:2b:c5:e6:89:ff:7e:3f:40:
3b:ae:0d:18:68:98:dc:01:a0:0e:37:6c:0d:6f:02:ff:0c:0a:
49:a1:29:f5:49:65:10:6f:5e:a0:22:29:d3:07:80:5e:04:68:
86:aa:64:75:16:12:47:62:f4:38:87:98:35:88:75:98:07:f9:
2e:fc:a0:ab:ab:86:57:76:f8:1d:f3:d0:5f:48:ad:f0:f8:9b:
71:cb:9f:73:5f:ca:7c:08:d8:bc:8c:53:ad:aa:49:5c:f1:8b:
80:16:99:5c:c1:e1:53:3b:ec:b8:4b:80:f7:47:f3:be:bf:f7:
be:75:7a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:33:59 2026 by rpki-client