Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
File: P3cnpBMI2bn25j3xsg6LnNgjgSA.mft (raw, json)
Hash identifier: WbJcs/kEpgTCknp2tixwEHazks3hvDYlGLWIwZOroR8=
Subject key identifier: 9D:02:4D:96:08:42:42:3C:4C:13:1C:48:B5:D2:5A:56:66:6B:A2:12
Authority key identifier: 3F:77:27:A4:13:08:D9:B9:F6:E6:3D:F1:B2:0E:8B:9C:D8:23:81:20
Certificate issuer: /CN=3f7727a41308d9b9f6e63df1b20e8b9cd8238120
Certificate serial: 019D277290B540D7F75DDB4CC5CBB6A87CCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
Manifest number: 097D
Signing time: Thu 26 Mar 2026 00:01:52 +0000
Manifest this update: Thu 26 Mar 2026 00:01:52 +0000
Manifest next update: Fri 27 Mar 2026 00:01:52 +0000
Files and hashes: 1: P3cnpBMI2bn25j3xsg6LnNgjgSA.crl (hash: qaNb072APN9rWZ2n3zUAtpaeLNvoMjJqV+J4NPVAMGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:90:b5:40:d7:f7:5d:db:4c:c5:cb:b6:a8:7c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f7727a41308d9b9f6e63df1b20e8b9cd8238120
Validity
Not Before: Mar 26 00:01:52 2026 GMT
Not After : Mar 27 00:01:52 2026 GMT
Subject: CN=9d024d960842423c4c131c48b5d25a56666ba212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:45:68:72:4d:dc:28:dc:fd:54:26:a6:a0:da:
87:29:b2:f8:8b:46:81:8f:1a:2a:6e:e1:3b:3a:2f:
3b:93:fe:57:ac:bd:5d:93:b9:7f:d6:89:2f:57:fb:
66:a6:00:61:04:01:db:fe:59:f2:55:65:a5:be:c1:
0d:47:8d:6a:b3:ce:5c:ab:a7:a3:3a:db:7b:7e:4a:
e5:b9:81:ba:01:fe:f0:30:fa:e1:06:9c:d9:32:b9:
b7:0e:9c:57:1f:05:d2:f3:c5:60:4c:e4:45:20:41:
4e:a0:fe:95:49:f6:91:a6:f4:f6:ad:c3:00:db:f7:
ce:20:7d:19:24:65:c6:f5:34:2f:8a:d7:32:3a:6c:
48:21:0e:b0:b0:80:df:8a:87:2d:18:83:50:78:f9:
12:ef:78:47:31:df:b7:10:f5:d2:1f:dd:ba:6a:d2:
07:9f:ce:ad:ab:d2:19:0e:d7:dd:d7:b2:11:c6:96:
1f:a3:fe:b2:fb:cf:14:ef:9e:60:36:a3:6f:98:f1:
74:02:53:bf:6b:1d:f6:1f:5a:55:de:a4:38:c4:99:
3b:c3:77:f9:3e:b2:8c:4b:58:42:da:b3:58:9e:1f:
e3:2b:33:01:65:2f:b6:7a:00:56:6f:b7:05:23:9c:
02:f2:cd:d0:ae:1a:a8:c6:00:c9:be:7d:ba:4a:86:
4b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:02:4D:96:08:42:42:3C:4C:13:1C:48:B5:D2:5A:56:66:6B:A2:12
X509v3 Authority Key Identifier:
keyid:3F:77:27:A4:13:08:D9:B9:F6:E6:3D:F1:B2:0E:8B:9C:D8:23:81:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e6:36:f0:a1:8e:01:1e:bb:fd:c8:c9:82:73:c6:cd:ac:a2:
a2:df:b6:d2:37:1e:35:00:37:dc:e2:e7:61:7b:58:bc:8e:80:
11:a8:1e:06:15:99:5a:cc:09:97:df:0a:e0:34:d7:0f:99:1b:
83:62:11:ab:94:f0:76:79:53:e1:44:16:95:3e:1a:97:4f:d0:
32:f7:48:fd:29:54:0c:71:8a:fe:06:ab:37:a3:95:f0:07:0d:
ef:88:35:e3:88:9a:59:19:0f:41:92:8d:45:5a:10:16:30:b7:
d3:47:45:6b:bc:a0:07:2e:2d:b0:5d:dc:1b:c4:83:a6:d4:08:
cb:9e:14:94:71:86:6b:77:66:90:ad:a3:93:da:c0:f1:a2:96:
a3:fc:da:04:43:97:de:f6:1c:d2:6a:35:93:e9:4f:ce:31:73:
44:de:c9:7b:6a:63:0e:67:5a:47:59:33:13:0a:2c:df:84:a6:
fe:c4:53:12:4c:1d:74:d1:b8:ee:c8:8d:47:92:f2:20:aa:d3:
26:b0:84:d6:79:fb:7c:ba:fa:83:95:9a:7c:cf:ca:c3:b2:18:
01:56:a3:50:31:c0:95:7c:65:21:79:9a:3c:39:ae:4b:17:50:
b8:72:49:c3:89:3d:25:77:96:29:f1:93:bf:ae:bc:4e:3d:70:
26:f1:d7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:57:35 2026 by rpki-client