Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
File: P_xBJyHAxuekxXZ66YxFId71FQE.mft (raw, json)
Hash identifier: OBD91Tm319RxbIJJE7FjvCzzw8JMKPUDqRYOEYyY2+o=
Subject key identifier: 92:85:A2:CF:EB:2C:C3:58:25:EB:E7:0F:4A:56:3A:62:57:E2:17:4A
Authority key identifier: 3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01
Certificate issuer: /CN=3ffc412721c0c6e7a4c5767ae98c4521def51501
Certificate serial: 019CAA58374A31FBD61850D9EC10BB383F40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
Manifest number: 1752
Signing time: Sun 01 Mar 2026 17:00:33 +0000
Manifest this update: Sun 01 Mar 2026 17:00:33 +0000
Manifest next update: Mon 02 Mar 2026 17:00:33 +0000
Files and hashes: 1: P_xBJyHAxuekxXZ66YxFId71FQE.crl (hash: W/PnW+XCon+HHcG2milQ5Z5tbWkDRS1eETdoebtYH6s=)
2: cJRtdE3GDxRyvg_Y9Tx3wuWjZfM.roa (hash: MkPveRr894uZyzuwskwU/N/yd8dG5AWBq5BdDGSD2o4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:37:4a:31:fb:d6:18:50:d9:ec:10:bb:38:3f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ffc412721c0c6e7a4c5767ae98c4521def51501
Validity
Not Before: Mar 1 17:00:33 2026 GMT
Not After : Mar 2 17:00:33 2026 GMT
Subject: CN=9285a2cfeb2cc35825ebe70f4a563a6257e2174a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:08:e8:79:33:28:85:cb:d0:f5:66:ea:ba:8f:
39:72:4f:ed:9f:02:44:19:fd:a6:04:3b:cd:1c:c5:
22:bf:dc:14:a8:3b:c6:4a:7e:57:c6:90:56:41:8c:
a7:68:9d:0f:88:01:bc:cb:d3:84:47:0f:14:0e:40:
d1:70:f8:12:c9:e8:d8:4c:c8:8d:c5:3a:35:83:8f:
d6:a1:de:44:a8:80:7e:67:0a:b4:40:e8:30:2c:af:
07:69:68:c1:ff:23:4f:0c:4e:a2:6e:61:e9:21:36:
40:e4:30:0c:4e:9a:22:cb:d5:c5:2f:74:cf:77:60:
00:20:d6:89:83:3f:46:93:db:77:e5:e2:38:99:68:
47:94:4a:33:db:da:3b:e4:26:73:13:00:58:e4:52:
dd:bc:11:79:6b:16:45:31:fc:bf:91:9f:23:66:ef:
33:a0:1a:ae:bc:f1:d8:cc:aa:b9:ee:50:cc:0e:7a:
01:33:08:8f:ed:05:5b:20:63:87:34:54:12:09:e4:
d1:45:97:9b:80:4b:c6:94:2c:1a:d9:39:16:3f:09:
c3:fa:1b:d4:b9:56:db:1f:fc:ce:df:1f:28:7b:bb:
a5:d5:1a:07:88:f5:c8:aa:be:81:0c:ea:00:5e:d3:
62:1e:3c:e4:18:b4:21:12:71:26:df:c7:06:90:aa:
3c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:85:A2:CF:EB:2C:C3:58:25:EB:E7:0F:4A:56:3A:62:57:E2:17:4A
X509v3 Authority Key Identifier:
keyid:3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:4f:93:4e:d2:54:0c:95:54:47:30:e6:f6:e4:f0:4e:1a:2a:
5c:00:96:f0:c9:5d:09:25:f2:55:ee:10:8d:ac:b4:d3:37:22:
69:80:e4:55:90:06:ce:96:dc:a9:d6:a6:71:ec:56:d4:c2:07:
76:07:af:00:dc:8e:ef:85:d3:9d:f7:1e:64:14:1b:1a:b7:52:
8d:8e:fb:ec:1e:aa:17:71:f1:db:60:6d:3f:a2:e3:26:a3:d9:
6d:20:59:c6:47:64:84:5b:39:57:12:e0:af:6e:6d:95:8f:ee:
e5:cf:af:6f:56:1a:06:2c:35:50:fe:76:d3:b1:0b:2a:32:9b:
ef:a0:c8:19:84:92:3d:d1:d3:1d:56:80:b8:8d:34:5b:a5:c6:
4e:d5:f9:bc:0e:04:e5:20:0a:b7:48:1d:d3:79:d0:16:41:bc:
0b:54:39:30:f5:76:22:4c:ea:d2:18:24:f0:55:04:4e:f2:e0:
99:9f:c1:5c:86:a7:11:4f:a4:f8:96:63:f3:99:d3:53:39:88:
0c:f1:c1:0b:ae:7e:e5:7e:e7:83:10:cd:26:48:e8:f8:ca:50:
52:b9:10:f0:52:56:e7:d3:56:32:1b:05:8b:68:71:82:53:ad:
50:14:02:bd:99:ab:0a:36:86:78:a3:ac:e6:e2:c2:a7:d7:69:
1e:71:43:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:41:05 2026 by rpki-client