Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
File: P1vEQBQoW28-KHKuz11PM-Jozos.mft (raw, json)
Hash identifier: VKtYtTgdb4SsReXow0CCU8qjSmSVIsH5U+S+ZcfZvx4=
Subject key identifier: 8E:25:48:6B:9F:41:46:41:C5:E7:96:D6:61:57:A7:E6:6E:34:92:99
Authority key identifier: 3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
Certificate issuer: /CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Certificate serial: 019D9B87D844E20FA94DA0EF348253359BC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
Manifest number: 09C1
Signing time: Fri 17 Apr 2026 13:01:04 +0000
Manifest this update: Fri 17 Apr 2026 13:01:04 +0000
Manifest next update: Sat 18 Apr 2026 13:01:04 +0000
Files and hashes: 1: Mr6edMVNczrnTD4fPbHhkJ_t0BI.roa (hash: B3H6ipVEXV+RUc2+4VXrDuLYCDQcw876zTiowv2ss50=)
2: P1vEQBQoW28-KHKuz11PM-Jozos.crl (hash: jvPAkbxjEcVLR+5BqBt8L8qvWDeqOK0jWlK2MOkdwOs=)
3: UZU-y9KjwHBRwAFBMLEzFqF8gQE.roa (hash: 8IesYOSWF04JS1YDSdciYf6tHgm62U6HhGDalYAE7s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:d8:44:e2:0f:a9:4d:a0:ef:34:82:53:35:9b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Validity
Not Before: Apr 17 13:01:04 2026 GMT
Not After : Apr 18 13:01:04 2026 GMT
Subject: CN=8e25486b9f414641c5e796d66157a7e66e349299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5a:2f:44:e2:41:da:62:3b:8f:86:c5:70:4f:
7c:eb:5a:c0:f5:03:78:8e:8c:db:78:56:3a:ee:f2:
ca:a0:78:54:52:90:6b:2a:9d:4b:ff:41:76:25:38:
32:11:81:ad:48:6b:b4:b0:c8:ef:ab:ae:00:fb:39:
a9:ca:03:87:38:75:19:a5:38:f1:d1:86:9c:31:d2:
89:59:4a:73:4c:11:45:2f:78:a3:a0:b1:26:0d:01:
91:77:ce:f5:a1:f2:6b:cd:71:5c:13:cb:91:65:79:
1a:a3:fd:ca:30:36:28:57:c8:f7:95:79:dc:3e:10:
4c:4b:17:29:02:95:cd:fe:b5:80:10:d8:01:ac:11:
5e:8c:a1:79:61:2f:a5:fd:97:d0:73:0a:35:e9:d5:
c0:24:8a:62:d6:77:3f:d4:0b:37:6b:fb:95:92:22:
8d:c5:dd:df:ca:82:02:fd:00:a4:84:72:1d:2e:b2:
c6:a5:35:71:24:90:77:06:da:7f:10:26:7d:a6:64:
d5:3d:77:97:9c:b3:35:02:87:0f:36:44:87:1d:0a:
10:67:3a:a5:b4:a3:73:4a:46:d3:01:d0:7c:86:64:
9b:b7:63:a8:dd:84:e7:ef:06:ac:19:60:08:43:f8:
51:e4:d0:0e:41:ef:ce:8c:28:d5:6c:96:9a:19:aa:
0e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:25:48:6B:9F:41:46:41:C5:E7:96:D6:61:57:A7:E6:6E:34:92:99
X509v3 Authority Key Identifier:
keyid:3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:0b:e8:42:22:dc:e6:1f:c0:0f:f1:de:9b:b4:73:93:4d:dc:
49:c0:b8:4f:cd:26:5a:fd:19:08:07:9f:ff:88:ab:57:dc:a6:
3c:f7:24:41:b5:fa:34:76:41:fa:4d:35:b7:4f:60:45:2e:55:
8d:eb:7b:af:fe:42:80:89:27:9e:6c:f2:c6:0e:93:a9:75:78:
e4:2e:37:f6:61:e7:c1:04:e0:07:c0:9d:2f:52:74:85:8c:ca:
09:02:bb:09:df:96:2e:5c:cf:52:7e:a3:f1:4b:e6:37:6f:65:
b7:37:3d:74:5f:c8:31:0f:ae:09:b9:c7:f1:80:65:24:10:ed:
69:1e:3f:9c:94:eb:af:e2:08:22:76:73:e7:7b:84:e8:ad:f7:
21:57:7d:eb:2c:04:e0:aa:3e:58:b1:fc:7c:8f:e0:47:ce:76:
c3:44:03:97:21:d2:a1:35:04:61:14:55:86:0e:21:31:55:ea:
8a:aa:8b:ed:ad:92:aa:1b:ca:b4:ef:a3:1c:20:4f:be:de:9b:
17:2d:94:3f:91:57:dd:45:a8:cd:c4:ea:2e:50:06:29:d4:0c:
36:21:8e:9d:80:3a:03:2d:91:8d:58:3f:71:a7:0d:af:92:d2:
d9:bc:3b:b3:ad:7e:84:08:19:06:47:f1:ec:c8:72:79:c6:be:
dc:8b:79:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:29:22 2026 by rpki-client