Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
File: Pv3irXEjs6hgCAWIBbsQFva3P7A.mft (raw, json)
Hash identifier: EQZgvNtg8AD35R0ZQdtT+wD4DsS7+fWaX5jZLzoeNhc=
Subject key identifier: 77:8E:BD:1D:D4:15:70:AB:20:EE:00:96:59:DD:D7:7D:A0:12:A8:19
Authority key identifier: 3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0
Certificate issuer: /CN=3efde2ad7123b3a86008058805bb1016f6b73fb0
Certificate serial: 019CAAC719A801215FE57AB4AECA523ECE80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
Manifest number: 13D0
Signing time: Sun 01 Mar 2026 19:01:40 +0000
Manifest this update: Sun 01 Mar 2026 19:01:40 +0000
Manifest next update: Mon 02 Mar 2026 19:01:40 +0000
Files and hashes: 1: 7v2ZUdL5cbvsxZ3SJ5Ih0L5h5Cw.roa (hash: Fh4U2aM1V+vRKIdMaRS0oiOF0z5hb7HFVxTHs/Kfn8g=)
2: Pv3irXEjs6hgCAWIBbsQFva3P7A.crl (hash: YbACKVJBQe2p7GUE1BvmRuq3MktuZ3QZ6BRUZb+Wu40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:19:a8:01:21:5f:e5:7a:b4:ae:ca:52:3e:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efde2ad7123b3a86008058805bb1016f6b73fb0
Validity
Not Before: Mar 1 19:01:40 2026 GMT
Not After : Mar 2 19:01:40 2026 GMT
Subject: CN=778ebd1dd41570ab20ee009659ddd77da012a819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d8:04:d5:e6:c0:fc:da:19:2c:30:5e:f9:5b:
b2:dd:d0:d3:d5:cc:c0:ce:7f:e6:10:03:29:75:57:
d4:c1:19:d2:ec:77:df:34:9c:4e:8f:f4:f6:79:91:
30:a0:3f:92:4d:b5:67:c2:56:0e:43:41:11:b9:5d:
f8:41:ab:1c:f2:99:69:9a:1a:fb:41:5e:1b:21:4d:
04:ee:c9:db:af:37:e4:73:89:a5:4a:6f:98:d3:a2:
9b:38:c0:a4:b7:0b:65:e5:8a:95:1b:13:99:5e:94:
06:1e:12:17:43:0f:cb:06:4a:6e:6d:5a:6a:06:8e:
e4:bb:91:70:44:8d:2c:8f:d9:e2:0f:cd:c1:d8:b7:
92:af:f0:67:3a:88:34:13:e1:50:7e:4e:cf:1d:a1:
8d:2c:52:05:0f:8f:6d:b2:f7:b0:3a:a7:e7:54:34:
bb:74:9f:2b:41:d8:8c:8b:09:91:79:03:d9:a9:e4:
4f:75:90:a5:1f:cf:4c:25:19:49:9c:34:d7:b2:24:
ed:53:aa:3e:d2:d4:e0:44:a8:f0:7e:6b:72:46:b6:
39:1a:6b:94:96:19:be:72:38:5e:22:df:43:51:fd:
f2:49:45:b5:84:43:7e:1e:0c:56:3e:8c:e9:b4:d4:
47:3d:0f:c0:b5:02:68:38:0c:45:65:ae:a5:bb:f3:
87:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:8E:BD:1D:D4:15:70:AB:20:EE:00:96:59:DD:D7:7D:A0:12:A8:19
X509v3 Authority Key Identifier:
keyid:3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e0:ad:ac:f8:bb:41:69:f6:10:ba:79:b1:42:2d:39:dd:5b:
e9:7a:73:74:3e:cd:1c:53:45:85:34:1e:47:08:05:7f:54:95:
73:1a:49:bd:18:25:db:f8:09:59:32:44:6f:af:b7:fe:a9:42:
9a:7a:dd:09:74:c0:72:57:c1:54:dd:33:95:d7:31:8f:b3:55:
f2:a9:b7:53:6d:20:06:e1:df:1f:90:cc:e6:d2:32:f8:28:d5:
d6:af:f6:7c:0f:6b:34:f0:18:cf:27:29:6f:27:91:13:96:6a:
0d:ec:e0:6f:25:89:2d:e6:63:d8:98:14:87:8a:d1:68:49:ff:
03:20:1d:43:ed:c6:ac:50:a2:60:3d:a8:39:68:95:40:a7:98:
56:aa:b6:c3:7f:b4:35:19:25:33:67:18:b2:40:3f:2b:7f:d4:
94:67:88:ff:93:d5:fa:5a:0b:3b:81:bd:19:c7:90:fa:25:86:
2a:21:6d:15:88:09:57:3e:53:51:54:8d:80:04:81:44:a0:5a:
27:b8:9e:bb:f8:99:17:72:b3:bc:68:13:a7:5b:59:d8:35:67:
99:52:38:e2:4c:73:7d:77:42:04:9e:51:ed:37:24:64:de:9d:
e5:c9:73:75:bd:aa:1f:f9:5c:97:47:a8:0f:ea:59:1e:1b:d3:
97:1a:17:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:19 2026 by rpki-client