Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
File: PComfc4HIjjpwEUV5n65kmcuNRs.mft (raw, json)
Hash identifier: MvA5+Fz868juSBIynlNiSe5jkoZ8sb4di21DxwnClEM=
Subject key identifier: 1E:7E:86:17:51:38:A7:93:A3:27:49:70:BE:57:E6:D9:70:61:C7:46
Authority key identifier: 3C:2A:26:7D:CE:07:22:38:E9:C0:45:15:E6:7E:B9:92:67:2E:35:1B
Certificate issuer: /CN=3c2a267dce072238e9c04515e67eb992672e351b
Certificate serial: 019D9999A95F7430680BB14156869F79FABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 04:01:17 +0000
Manifest this update: Fri 17 Apr 2026 04:01:17 +0000
Manifest next update: Sat 18 Apr 2026 04:01:17 +0000
Files and hashes: 1: 0ko9UBY3qaWw4RiEppaPRG8PLpg.roa (hash: A/2dJRQ4DKhZbhuSe8F7VZVq5LLcY4OTIT5i7IA9sYI=)
2: PComfc4HIjjpwEUV5n65kmcuNRs.crl (hash: IsOLbdHFzWp8A/ec/+ddKK5WvsXtWG2hhkujTxvt/rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:a9:5f:74:30:68:0b:b1:41:56:86:9f:79:fa:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c2a267dce072238e9c04515e67eb992672e351b
Validity
Not Before: Apr 17 04:01:17 2026 GMT
Not After : Apr 18 04:01:17 2026 GMT
Subject: CN=1e7e86175138a793a3274970be57e6d97061c746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:92:c2:79:13:d2:35:04:d3:1f:f1:31:9e:0c:
82:fe:e3:4a:97:51:10:e0:bb:83:90:83:a5:ff:8a:
b8:c1:33:81:09:93:58:b3:8b:44:4b:31:e8:7c:17:
ef:e1:f7:fd:e6:b3:d2:7c:80:99:ee:6f:27:81:2e:
8f:15:a8:54:25:6c:ee:ef:12:40:7d:c4:aa:54:c4:
f3:10:76:16:28:20:4c:7b:66:f9:41:3a:8b:57:63:
a4:b2:5f:0b:fe:05:29:4f:98:7a:ff:69:1b:72:dc:
ac:44:22:97:c9:49:3c:08:88:1b:0a:88:1b:2d:f6:
e3:e8:c8:e5:0c:39:9f:9c:8a:0d:d3:27:0e:b8:d3:
7c:e0:b6:fe:46:0c:8b:61:b7:4f:b4:d6:da:2b:25:
7e:5e:a6:75:4f:95:dd:0d:ff:8d:52:26:70:90:18:
3b:77:87:99:4b:05:cf:5b:de:85:70:7b:96:ff:bb:
13:ef:f7:d9:f9:6b:c7:53:7d:69:23:71:d2:60:33:
9c:86:27:d7:22:58:9c:c4:2a:08:b4:9b:36:3a:af:
0a:ae:e0:e2:2c:7a:5f:f4:85:55:b8:9c:1a:e5:cc:
f6:ae:f7:70:2d:60:29:c3:52:5f:2c:aa:06:a2:aa:
13:09:89:f7:69:35:49:6d:51:b7:1a:fc:ae:53:4f:
0f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7E:86:17:51:38:A7:93:A3:27:49:70:BE:57:E6:D9:70:61:C7:46
X509v3 Authority Key Identifier:
keyid:3C:2A:26:7D:CE:07:22:38:E9:C0:45:15:E6:7E:B9:92:67:2E:35:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:01:a9:8b:24:f5:3c:ed:53:fd:97:07:18:81:8f:07:a3:a6:
4c:f0:11:10:5d:5a:bb:16:2d:f3:56:a6:4e:2a:85:a7:f2:e3:
e7:ba:58:b5:2b:50:20:1b:e2:78:1c:29:ae:e7:58:d4:fe:33:
95:ad:81:ca:da:37:7d:b3:96:2b:71:95:24:c5:ca:9b:02:85:
89:d9:c6:30:90:79:1c:31:38:74:64:00:af:e0:c9:40:3c:d4:
01:4c:9a:78:04:c4:f8:9d:45:8f:e0:b2:fe:e4:ac:c2:7e:e8:
13:a2:8f:9a:27:89:8d:a1:2f:f5:a5:7a:44:0a:a7:7a:5f:a5:
f7:d3:22:b7:46:b3:94:02:a4:0e:25:48:62:15:8b:05:c6:7c:
e4:57:3a:45:9f:c9:9d:77:99:d8:a6:b0:e3:ee:5e:64:05:6a:
58:fe:18:ae:c4:0b:d4:70:d6:f2:81:14:08:d1:93:a6:1f:a1:
45:75:1b:25:bf:af:9b:ad:9c:db:1c:c7:47:34:56:1c:88:34:
9a:5c:f4:88:4e:5a:12:6a:c2:e9:93:dd:ef:3f:2a:02:b7:6b:
63:69:ac:a4:96:51:b2:ad:10:7b:42:2f:36:c8:85:c3:e9:b4:
dd:fd:1a:3b:c7:9c:09:21:65:b5:25:9c:e9:3b:04:73:0d:b2:
0e:3b:33:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:10 2026 by rpki-client