Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
File: P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft (raw, json)
Hash identifier: +Q2AY2uJPt9wZziD1t8q6Wi/gss9d9OcRXeWWFyBhMI=
Subject key identifier: 83:55:9E:9B:7A:4C:AB:C6:1D:E0:10:FA:FA:AD:8C:F1:A6:2F:B2:5D
Authority key identifier: 3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4
Certificate issuer: /CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
Certificate serial: 019CABA203EFFF9C9B050C244F241586622B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
Manifest number: 0871
Signing time: Sun 01 Mar 2026 23:00:47 +0000
Manifest this update: Sun 01 Mar 2026 23:00:47 +0000
Manifest next update: Mon 02 Mar 2026 23:00:47 +0000
Files and hashes: 1: P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl (hash: iJSS9aZ99/MZ0CCtvddGIqRnPPcBbGsItHLJ57llieo=)
2: chpnAXFJwcK5gPySDUqDwv2KJTQ.roa (hash: d6pR8bXGH3hR06eFSNsTttirZQu9Egnz7/1ylze2N3g=)
3: w1VM5LXh7FEfVyRRuosBCx58msI.roa (hash: 80uaSD8iAl9E3bi1bc+SHSLnshKOTiNv4svzxGeVOX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:03:ef:ff:9c:9b:05:0c:24:4f:24:15:86:62:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
Validity
Not Before: Mar 1 23:00:47 2026 GMT
Not After : Mar 2 23:00:47 2026 GMT
Subject: CN=83559e9b7a4cabc61de010fafaad8cf1a62fb25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b3:a0:47:db:e2:17:26:14:9e:89:33:74:5f:
e7:ce:c6:24:03:a1:79:c9:58:bd:b4:5f:af:dc:f3:
30:1c:37:ea:12:aa:54:b0:68:38:90:4d:42:5d:1e:
70:be:8d:26:bc:41:ee:80:8c:49:cd:28:ec:52:d6:
a0:f5:af:0f:91:47:5b:e2:0f:67:4c:c3:ac:2d:6e:
a2:7d:50:48:bb:6e:d5:04:67:83:53:3d:b7:77:55:
12:6a:99:65:f6:6f:66:dc:aa:e8:59:cb:e6:72:fd:
3c:fd:55:6b:37:10:2b:72:c5:11:bd:78:54:d0:ab:
64:e3:06:01:04:57:78:15:42:45:e7:00:e4:77:b6:
56:38:f4:a3:43:18:a8:d5:d4:1e:85:5e:df:04:51:
27:18:83:e4:cd:2d:91:8e:e0:5a:35:67:cd:c4:e1:
f9:f9:99:3f:af:4a:7f:5c:1b:ae:d0:f6:72:d5:73:
57:12:27:b2:89:84:ee:f9:e3:43:0e:65:ba:7c:ce:
32:07:fd:e5:bd:f3:36:9c:6a:24:65:77:36:ee:e5:
5c:58:d5:15:9a:e2:29:a1:ec:9c:79:e6:c1:6e:a5:
d8:89:2b:17:90:cb:16:fd:a2:37:20:0b:cb:31:f5:
5a:8f:c3:36:5e:dc:9d:1a:1c:23:e3:e3:fa:93:c0:
8d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:55:9E:9B:7A:4C:AB:C6:1D:E0:10:FA:FA:AD:8C:F1:A6:2F:B2:5D
X509v3 Authority Key Identifier:
keyid:3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:6e:45:a7:1b:5a:4a:29:22:eb:f2:b0:44:f8:f4:d3:0b:72:
8f:6d:7e:90:49:b5:88:f3:fd:3d:f6:ba:73:20:94:dd:c9:84:
bf:5d:2f:89:2d:ff:67:b9:0e:b9:61:da:b5:b5:c9:3e:7d:8d:
2e:0a:ef:b2:09:6d:c7:b8:40:1c:6a:03:1c:9b:cb:c2:f1:76:
04:6b:81:de:f0:8d:a4:9d:95:a4:99:9b:c1:31:2c:cb:7c:d4:
dd:89:50:22:18:6b:13:a1:23:81:c3:10:ce:52:ff:fa:13:a3:
54:87:19:da:c6:1e:0f:b4:c2:62:cc:fb:03:10:a1:04:92:ba:
64:e0:43:5a:0b:6f:b2:65:aa:57:a9:71:f8:03:52:7c:0e:4a:
1f:ba:3d:d4:30:9f:36:f5:b4:be:fe:d2:ba:fc:df:79:b0:68:
c3:9a:97:52:30:19:7c:11:8d:53:89:6f:1c:1b:c3:b7:17:be:
56:c9:b7:b4:af:37:c0:07:c6:52:d6:9f:67:35:77:86:13:87:
49:f4:02:0c:b2:3c:4c:28:a9:ef:38:d8:57:cd:2b:0c:2a:fe:
89:40:7b:98:7c:8f:02:f3:cb:f7:3c:04:d3:50:7a:37:84:84:
ac:9f:6d:e0:62:58:0b:00:b4:cf:70:9d:d2:06:5d:60:03:88:
15:d0:1a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:45:07 2026 by rpki-client