Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft
File: P2U3Wk029crhof4kWKOAUmz-22o.mft (raw, json)
Hash identifier: vk2a4QexJM0kVIwtpsq3QB5/PX24ptssbMyvgZFYcVs=
Subject key identifier: 1C:04:8C:FC:68:9D:4A:5D:93:4C:D7:02:A4:02:6A:16:E8:44:0C:D4
Authority key identifier: 3F:65:37:5A:4D:36:F5:CA:E1:A1:FE:24:58:A3:80:52:6C:FE:DB:6A
Certificate issuer: /CN=3f65375a4d36f5cae1a1fe2458a380526cfedb6a
Certificate serial: 019EC1EDA11F40B16BD38E49BF9F9D8C0832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft
Manifest number: 04B9
Signing time: Sat 13 Jun 2026 17:00:36 +0000
Manifest this update: Sat 13 Jun 2026 17:00:36 +0000
Manifest next update: Sun 14 Jun 2026 17:00:36 +0000
Files and hashes: 1: 8WGCMkLHivRZtBn2lCr7Peb5fB8.roa (hash: Lec00BWr1FDj5Se46w/SW9Oe5vFyDVib4D6WgGcoj3Q=)
2: P2U3Wk029crhof4kWKOAUmz-22o.crl (hash: CVRRkjBS9WW9+NOptZKsOcRhqlt+pUkLjNZKLKPzyAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft
rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ed:a1:1f:40:b1:6b:d3:8e:49:bf:9f:9d:8c:08:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f65375a4d36f5cae1a1fe2458a380526cfedb6a
Validity
Not Before: Jun 13 17:00:36 2026 GMT
Not After : Jun 14 17:00:36 2026 GMT
Subject: CN=1c048cfc689d4a5d934cd702a4026a16e8440cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:88:7a:e9:cf:5d:a5:f9:b4:8c:2b:81:cd:91:
44:99:fa:66:8e:fb:29:13:bd:3f:e8:48:ae:9e:e9:
97:0b:20:e7:f1:30:44:c4:12:82:b9:43:4a:b1:70:
b1:9a:19:14:1c:d2:f8:11:1c:8a:fa:0d:8c:92:ad:
e6:db:8e:e9:2f:51:58:ae:d5:05:17:f0:dc:af:85:
56:a9:65:ab:44:45:53:91:3e:a0:a2:d8:fb:91:88:
36:94:74:d6:57:e1:2f:f7:b3:fc:6f:a3:14:68:09:
6e:64:99:a0:8e:f7:e6:ce:3d:ab:1b:84:8a:7d:0e:
b2:7d:b0:89:e1:48:cd:d2:a6:94:a8:41:f1:59:d8:
64:b1:ed:39:0c:db:6c:7b:15:4f:fa:bf:8c:a7:9e:
27:d9:a4:42:a2:94:84:31:3f:77:6e:1a:e8:0f:b3:
ba:cb:e3:f1:b1:e3:62:42:ae:e1:3c:3a:4f:a9:19:
28:f9:fe:c4:b6:a0:b9:29:a8:cb:d1:ce:f7:fd:17:
00:a9:d2:5b:d7:0d:9f:28:a2:2d:70:3c:b9:4e:e5:
03:b1:33:2b:ea:02:9a:7b:5d:13:18:d2:e3:ff:60:
09:71:c4:88:ef:f5:f1:87:db:96:e0:e9:e3:4d:58:
00:7c:92:d9:7e:f2:cb:fc:25:b6:5a:b7:7d:30:b6:
68:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:04:8C:FC:68:9D:4A:5D:93:4C:D7:02:A4:02:6A:16:E8:44:0C:D4
X509v3 Authority Key Identifier:
keyid:3F:65:37:5A:4D:36:F5:CA:E1:A1:FE:24:58:A3:80:52:6C:FE:DB:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:24:d5:3b:9e:8f:00:71:e0:f2:66:ed:3f:ce:95:03:b6:05:
34:a0:2d:9a:8b:21:af:b0:4a:51:37:71:2e:1f:95:29:35:a9:
47:f3:0c:70:50:b5:ff:dc:2c:a5:8f:ab:31:4f:a6:21:a5:b1:
3c:60:9e:5b:78:4b:c7:44:e2:92:9b:b7:9a:fa:1c:10:86:17:
53:1f:a6:78:c1:05:32:54:64:26:cf:c7:51:36:10:36:13:c6:
8b:c5:63:0b:40:85:a2:52:07:23:7a:c8:16:c3:76:6c:e3:43:
4f:8d:4b:11:81:3b:16:36:9f:4d:4c:58:b4:53:0c:cd:cc:8c:
e2:e2:05:a7:0d:14:26:ed:b5:0e:5a:97:6a:25:d5:eb:f1:01:
bc:ac:00:4b:47:70:8a:ba:36:de:11:9e:d3:41:84:48:00:e3:
ed:b6:68:2d:fb:a0:e7:14:77:89:b3:96:b9:0f:32:30:ac:19:
78:4a:8c:17:28:cb:3c:b1:bb:88:13:5d:e6:52:a8:7a:c1:f0:
fe:37:1c:2e:18:a9:d9:0f:2f:34:f8:64:b9:5c:89:53:c0:e9:
25:dd:58:52:37:5e:d0:42:84:67:d8:ee:c6:7e:05:c0:ba:26:
ab:dd:a8:87:71:13:e3:ea:63:26:5b:73:a3:a5:bd:32:46:30:
58:9f:ab:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:49:16 2026 by rpki-client