Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.mft
File: Pt97LWi6dqC9G6fp0p-sWFIxa5w.mft (raw, json)
Hash identifier: D11csu/KKUlaDOfVrnzKoSstaSNMHrV5gODuH688d1o=
Subject key identifier: 33:F0:64:1A:59:92:8C:3D:EA:1A:DC:F9:A9:D2:37:18:50:57:3B:E7
Authority key identifier: 3E:DF:7B:2D:68:BA:76:A0:BD:1B:A7:E9:D2:9F:AC:58:52:31:6B:9C
Certificate issuer: /CN=3edf7b2d68ba76a0bd1ba7e9d29fac5852316b9c
Certificate serial: 019CAD903CDBA72CD27158ABAB5742F96B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pt97LWi6dqC9G6fp0p-sWFIxa5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.mft
Manifest number: 12EB
Signing time: Mon 02 Mar 2026 08:00:36 +0000
Manifest this update: Mon 02 Mar 2026 08:00:36 +0000
Manifest next update: Tue 03 Mar 2026 08:00:36 +0000
Files and hashes: 1: EsVKmOu6uyxuiNYOoPvvDwlXKWQ.roa (hash: ZJQ/gzwRRi9pvpHLyfjBfpX4ec0DDSgkEdKketimbco=)
2: HlDrFhE-0fmgWal__tHIEXBrV6Y.roa (hash: 0n+iwbGZ5id6XfahOr8AcTWOIpNGaPq/75qxuHkAIik=)
3: Pt97LWi6dqC9G6fp0p-sWFIxa5w.crl (hash: sNf+j1y5KxxOSa1dimHRaxPzb6C5nXn0loCVmpASNQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pt97LWi6dqC9G6fp0p-sWFIxa5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:3c:db:a7:2c:d2:71:58:ab:ab:57:42:f9:6b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3edf7b2d68ba76a0bd1ba7e9d29fac5852316b9c
Validity
Not Before: Mar 2 08:00:36 2026 GMT
Not After : Mar 3 08:00:36 2026 GMT
Subject: CN=33f0641a59928c3dea1adcf9a9d2371850573be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5b:f1:33:58:d5:97:02:4e:70:65:aa:0d:7f:
05:ee:65:50:12:b9:4e:e3:ff:88:a0:39:a6:14:e9:
62:d7:a2:f4:98:bd:2d:0c:75:10:75:b5:c3:9d:2f:
17:14:fc:af:eb:d8:22:a3:e5:43:d3:99:98:fc:eb:
00:de:bd:c7:a4:6d:41:cb:01:f1:5f:f4:fb:4b:b6:
76:d8:33:b4:b2:5b:aa:e1:13:da:02:be:3f:53:ca:
c9:f8:be:ee:da:92:7b:9f:ff:dc:8c:8a:92:87:53:
eb:f1:1f:63:c1:01:66:33:66:2e:62:3b:57:1d:37:
ad:4c:19:75:70:56:01:10:fb:0c:d4:4d:96:14:0e:
4c:2b:cc:d3:35:4f:b0:5d:ae:5f:74:c6:ee:c6:41:
16:d0:07:62:dc:d1:7b:34:26:6c:47:bf:9f:a6:db:
c0:31:58:6a:02:f5:0c:d7:1e:72:5f:62:52:70:88:
9a:d1:1b:4f:d3:9f:4e:ba:e9:61:72:16:fc:55:61:
ae:20:89:b1:ba:9e:b7:f1:f9:51:7f:f9:32:25:8c:
79:a1:65:4b:09:b4:87:92:fb:42:c4:2b:7f:d2:f0:
1e:84:3f:9f:5e:5b:3f:f5:8f:11:cf:1e:b8:34:98:
0c:ad:f0:67:d0:1a:82:6f:6b:ab:fd:74:b2:70:1f:
d1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F0:64:1A:59:92:8C:3D:EA:1A:DC:F9:A9:D2:37:18:50:57:3B:E7
X509v3 Authority Key Identifier:
keyid:3E:DF:7B:2D:68:BA:76:A0:BD:1B:A7:E9:D2:9F:AC:58:52:31:6B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt97LWi6dqC9G6fp0p-sWFIxa5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:bf:c5:50:fb:9d:49:75:28:2e:05:bf:f7:ec:a3:9a:bc:e2:
da:5c:29:b6:37:3d:99:d7:75:5d:fc:a7:d2:1d:ca:08:b7:fa:
2d:b2:b6:35:63:b6:b3:89:63:0e:e3:7f:de:a6:f7:60:1d:d1:
aa:27:f6:19:26:57:f2:24:9a:b7:99:55:f8:9c:6a:b6:1f:b9:
a9:ee:75:2a:87:9c:dd:fd:e3:65:3c:0d:e7:2e:14:bb:ba:f8:
17:75:b7:eb:d4:58:a0:5c:89:96:f0:bb:20:db:44:f9:ba:15:
cc:94:5f:54:99:b3:f9:d5:05:1d:91:c7:7e:a6:c1:76:25:2c:
4d:fd:ea:b9:74:ea:ed:64:91:09:d6:e4:0b:cb:f2:7d:ac:2c:
e8:b9:a4:e4:67:fe:b1:d3:2d:3e:9b:e6:7a:03:b4:1b:99:c2:
a2:a4:65:21:73:dc:af:88:39:58:ce:1e:59:8e:d9:0a:c7:82:
10:ce:b3:d6:a2:d3:12:a7:f9:07:8f:0e:55:ea:d9:8a:c7:c3:
55:d6:b4:7c:57:8d:67:3d:f8:b1:10:ca:96:30:45:00:5c:f2:
a5:f2:88:74:36:98:34:87:19:7f:db:18:61:e3:86:a8:b6:dd:
75:e3:2e:8a:ff:bc:32:0d:04:8b:69:f6:2e:07:d2:f3:07:f6:
2a:a3:45:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:24:46 2026 by rpki-client