Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/P2D25rQE4DQBrD10kbq2M_5qEp8.mft
File: P2D25rQE4DQBrD10kbq2M_5qEp8.mft (raw, json)
Hash identifier: pNidTeX9fjXZHNBZbJ9wwU9GJkvvqCZKi6VM2akQbhk=
Subject key identifier: FC:F6:02:02:4D:E2:C9:5A:F3:60:38:E6:C6:64:36:8D:BF:56:62:FF
Authority key identifier: 3F:60:F6:E6:B4:04:E0:34:01:AC:3D:74:91:BA:B6:33:FE:6A:12:9F
Certificate issuer: /CN=3f60f6e6b404e03401ac3d7491bab633fe6a129f
Certificate serial: 019FAC75F580814F749D650E319FBCB9B7BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P2D25rQE4DQBrD10kbq2M_5qEp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/P2D25rQE4DQBrD10kbq2M_5qEp8.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:39 +0000
Manifest this update: Wed 29 Jul 2026 06:00:39 +0000
Manifest next update: Thu 30 Jul 2026 06:00:39 +0000
Files and hashes: 1: P2D25rQE4DQBrD10kbq2M_5qEp8.crl (hash: 1D4R6AX3+hQOAPcCDTC5rkIRB2SBPuuo4JpqRLqbkpE=)
2: p3zDIjcAWzrwrNrpwE_PsccEM3A.roa (hash: jLiAzTfka0/Q0jf7zmlCDsBaadFbTH7kx2Q/ozkOt3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/P2D25rQE4DQBrD10kbq2M_5qEp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/P2D25rQE4DQBrD10kbq2M_5qEp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P2D25rQE4DQBrD10kbq2M_5qEp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:f5:80:81:4f:74:9d:65:0e:31:9f:bc:b9:b7:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f60f6e6b404e03401ac3d7491bab633fe6a129f
Validity
Not Before: Jul 29 06:00:39 2026 GMT
Not After : Jul 30 06:00:39 2026 GMT
Subject: CN=fcf602024de2c95af36038e6c664368dbf5662ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6c:dd:47:a0:49:cf:91:01:7f:95:7c:79:d9:
94:bb:66:4d:d0:31:e0:c9:b2:8b:f5:fd:61:46:7d:
d0:b9:66:d3:0f:fa:91:b7:56:39:b3:49:14:91:8e:
13:f8:14:4c:ba:2e:0b:f5:f6:99:16:27:1e:67:ee:
8d:01:3e:d5:e9:0a:2e:55:49:a1:b4:f5:9e:41:1d:
15:38:58:8a:94:f8:89:15:07:81:a5:d5:89:ad:03:
e5:69:39:aa:1d:f5:c3:b0:58:c5:f6:de:1f:04:4c:
e2:ba:bb:2c:0e:a8:75:7a:5f:67:9a:5d:e0:3d:ad:
7e:7a:75:c8:9e:69:4e:57:46:27:3b:b8:65:98:00:
c1:da:11:65:e0:a6:24:8e:e6:1a:9a:61:2a:7f:74:
85:bd:81:2a:4e:30:4c:d2:52:af:e8:8d:48:9d:9b:
21:63:b8:e7:7f:d9:11:cc:a0:71:c3:d7:a5:46:51:
92:3d:93:a4:25:94:8f:79:2b:c1:c5:82:4f:14:82:
c3:da:19:c5:a2:c9:18:0b:7f:8f:71:03:28:9b:53:
45:da:75:e6:0c:0d:c8:4d:2d:ba:a3:56:de:89:79:
65:01:87:a7:0f:0a:36:80:db:9c:b1:3f:f6:b9:dc:
28:fa:71:6c:84:f8:37:e3:71:42:cc:09:7c:a0:97:
2d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F6:02:02:4D:E2:C9:5A:F3:60:38:E6:C6:64:36:8D:BF:56:62:FF
X509v3 Authority Key Identifier:
keyid:3F:60:F6:E6:B4:04:E0:34:01:AC:3D:74:91:BA:B6:33:FE:6A:12:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2D25rQE4DQBrD10kbq2M_5qEp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/P2D25rQE4DQBrD10kbq2M_5qEp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/P2D25rQE4DQBrD10kbq2M_5qEp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ee:de:8e:5f:9f:3a:65:8a:62:d0:60:dc:e7:2d:04:64:ac:
dd:95:9d:ef:dd:9c:e1:4a:4d:88:e8:50:39:27:48:f8:2d:1d:
b9:ac:f5:42:82:8f:c0:04:c6:89:4b:9e:5a:c4:35:d0:33:c6:
71:b7:a8:9c:b1:54:67:19:f3:fe:db:44:cb:f6:56:a9:65:23:
e0:44:bf:52:4e:18:a2:eb:dc:a9:9f:38:44:12:f9:12:31:ae:
1f:ca:e6:a6:51:d8:02:6d:cd:dc:1e:4b:66:45:6b:40:71:ac:
83:d1:f2:dd:69:bd:10:3a:22:ec:5a:bf:45:8f:cd:5b:36:b1:
a8:c6:18:e4:f3:f4:89:3f:f9:e9:8d:d7:17:6e:74:66:04:75:
5a:2d:21:76:68:80:55:b2:4e:ff:08:05:72:69:26:cf:18:e7:
84:39:f3:4f:0d:8d:16:24:05:8d:da:08:cf:de:4b:89:22:5d:
64:b5:5e:5d:83:d4:cf:d9:11:5e:91:7d:88:ae:00:6e:be:47:
2c:09:a9:3f:76:14:6a:6b:60:e8:34:49:20:c6:6e:38:ee:06:
3c:63:fa:5c:b6:f0:66:90:99:4c:d2:9c:a7:5a:a6:68:e6:00:
37:02:32:b3:76:84:3f:60:78:4f:72:73:bd:fb:e8:43:f1:9a:
d8:f7:29:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:32:10 2026 by rpki-client