Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/P2D25rQE4DQBrD10kbq2M_5qEp8.mft
File: P2D25rQE4DQBrD10kbq2M_5qEp8.mft (raw, json)
Hash identifier: jDFljR81tmYrsTqJeinh3F9J89bQS+NeG7Qcp4DyU30=
Subject key identifier: 15:95:46:78:95:33:AA:15:9B:2E:18:07:A6:D1:F4:7E:6B:8E:38:A2
Authority key identifier: 3F:60:F6:E6:B4:04:E0:34:01:AC:3D:74:91:BA:B6:33:FE:6A:12:9F
Certificate issuer: /CN=3f60f6e6b404e03401ac3d7491bab633fe6a129f
Certificate serial: 01A1212F28BF6411085F00EDBF9931A1A85D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P2D25rQE4DQBrD10kbq2M_5qEp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/P2D25rQE4DQBrD10kbq2M_5qEp8.mft
Manifest number: 010F
Signing time: Fri 09 Oct 2026 15:01:41 +0000
Manifest this update: Fri 09 Oct 2026 15:01:41 +0000
Manifest next update: Sat 10 Oct 2026 15:01:41 +0000
Files and hashes: 1: P2D25rQE4DQBrD10kbq2M_5qEp8.crl (hash: 4ZB1XQIyMdLCrvaLRxfynhxtM+fqT0tqVZvhJeeZajQ=)
2: p3zDIjcAWzrwrNrpwE_PsccEM3A.roa (hash: jLiAzTfka0/Q0jf7zmlCDsBaadFbTH7kx2Q/ozkOt3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/P2D25rQE4DQBrD10kbq2M_5qEp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/P2D25rQE4DQBrD10kbq2M_5qEp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P2D25rQE4DQBrD10kbq2M_5qEp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:2f:28:bf:64:11:08:5f:00:ed:bf:99:31:a1:a8:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f60f6e6b404e03401ac3d7491bab633fe6a129f
Validity
Not Before: Oct 9 15:01:41 2026 GMT
Not After : Oct 10 15:01:41 2026 GMT
Subject: CN=159546789533aa159b2e1807a6d1f47e6b8e38a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ed:87:97:36:f2:93:26:0b:b4:76:7d:07:fd:
41:92:28:34:be:13:4c:6f:bb:cb:63:88:51:f4:bb:
9f:fd:92:3e:d9:da:38:bb:46:ac:79:5f:06:3d:2f:
ba:76:ba:3b:9c:8b:69:db:b8:1d:e6:78:e5:e3:b2:
9b:49:65:6d:fd:da:5e:c3:72:6c:ba:b1:c6:ea:a8:
26:91:a2:97:88:70:e4:76:d9:f3:c7:98:ec:1d:73:
ac:dc:8a:88:b3:e7:97:1e:54:6b:ca:a4:fc:ea:30:
d7:2c:43:40:2a:d1:fa:70:c1:24:26:c4:18:8f:f6:
af:c4:e1:57:d6:c5:2e:76:02:f4:ae:be:7d:44:39:
53:9f:8c:5c:7c:3a:74:a7:a9:dd:e3:b9:8c:29:22:
8a:3a:b6:f6:b2:fb:0d:3d:dc:3d:f5:55:a1:ac:e8:
65:72:87:3c:ab:a6:5d:8f:d7:b3:87:32:bc:e6:ec:
f4:79:6e:c5:09:f9:ce:43:48:ec:8b:3d:f2:93:21:
1a:14:94:bd:38:94:09:be:c4:63:13:a2:bb:90:01:
28:7d:44:8f:6f:7e:4c:d4:1e:d8:0d:28:c9:e3:10:
b2:d9:0d:51:ff:13:26:a8:a6:6f:af:09:8d:e8:fb:
c4:15:84:16:db:57:79:66:c4:44:c0:e3:76:2a:07:
53:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:95:46:78:95:33:AA:15:9B:2E:18:07:A6:D1:F4:7E:6B:8E:38:A2
X509v3 Authority Key Identifier:
keyid:3F:60:F6:E6:B4:04:E0:34:01:AC:3D:74:91:BA:B6:33:FE:6A:12:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2D25rQE4DQBrD10kbq2M_5qEp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/P2D25rQE4DQBrD10kbq2M_5qEp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/P2D25rQE4DQBrD10kbq2M_5qEp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d4:f1:36:c4:53:3b:d1:19:6a:22:0e:59:44:87:82:b3:19:
cc:04:37:16:95:20:e2:79:5d:7d:a5:6f:23:60:dd:59:8a:5c:
34:4d:57:05:89:91:66:10:6d:c2:54:1b:eb:24:b1:62:8d:23:
94:47:35:80:bb:f1:a8:57:fe:ff:1d:e5:61:15:94:c9:88:4c:
d2:3b:55:1b:33:51:c2:b7:08:df:dc:4b:1c:63:73:2f:ce:f1:
00:36:18:71:b7:25:f6:dd:ed:25:28:e8:f4:f8:94:d5:48:8c:
c0:17:b5:4e:aa:ba:23:7c:9d:c2:e5:cc:09:a4:49:77:9c:1f:
76:c2:9a:e4:ed:92:0a:fc:4b:c6:2d:16:3f:5d:8c:54:16:d8:
9d:ee:48:77:ea:1b:b7:78:4b:e5:9c:77:7d:c1:84:09:14:04:
64:67:9c:96:2c:83:70:65:25:fa:9b:f3:b3:2a:06:5b:86:5e:
f5:c5:25:02:54:43:f8:08:ff:58:67:7c:b3:10:7b:dc:74:83:
37:2b:3b:c0:08:2b:f3:c6:a7:4f:d6:53:ca:22:26:2f:a6:1e:
5c:4a:fe:c7:3b:61:1b:2c:f6:8f:35:58:35:9b:f8:87:eb:e9:
8c:5c:6d:99:0d:c8:4d:66:97:50:b3:10:0f:57:a6:41:3a:f0:
8e:91:71:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:25:37 2026 by rpki-client