Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
File: P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft (raw, json)
Hash identifier: 9cRw/SEOpI2dP6K8eczAMeM9GWZ6zeo29FH0XDlYO0U=
Subject key identifier: 95:B6:D3:08:9D:D4:1E:1C:52:25:9F:87:00:A0:26:CB:DF:1E:C3:33
Authority key identifier: 3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA
Certificate issuer: /CN=3f46c351ee89c9f5558167530704885b8be46eaa
Certificate serial: 019CAB6AEE8A341536641E23EB701346FC74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 22:00:37 +0000
Manifest this update: Sun 01 Mar 2026 22:00:37 +0000
Manifest next update: Mon 02 Mar 2026 22:00:37 +0000
Files and hashes: 1: 5L0ahpPNayrPxYi122Pi5vNAm_w.roa (hash: cz2iEH8qpiosJzyQ+ZNV5ATx1OTP4StLUP1VtKdnYPs=)
2: P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl (hash: PzUaD5suTJOKY2T3SjKoCK/c0c1a/5yEKRcb7nTaa6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:ee:8a:34:15:36:64:1e:23:eb:70:13:46:fc:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f46c351ee89c9f5558167530704885b8be46eaa
Validity
Not Before: Mar 1 22:00:37 2026 GMT
Not After : Mar 2 22:00:37 2026 GMT
Subject: CN=95b6d3089dd41e1c52259f8700a026cbdf1ec333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:82:15:9a:9a:93:7b:9d:10:03:e0:cd:db:25:
a3:00:d4:fb:13:87:0f:fa:79:c7:71:dc:11:ca:7b:
14:93:0c:04:f7:34:18:b5:8a:fb:18:43:2a:2f:36:
47:da:1c:6d:12:12:11:7f:0b:eb:a3:5d:29:c7:e7:
67:4d:3e:95:82:10:94:27:13:dc:67:c1:b1:1f:72:
97:0d:6a:a6:fd:66:42:82:9a:cf:b7:2d:08:05:f1:
97:b8:b9:5e:fb:56:66:dc:90:06:aa:68:27:04:e6:
1b:cb:9e:28:36:84:4d:ac:65:64:2c:d9:14:79:43:
ba:74:07:4f:b1:39:bd:c0:db:9f:5c:b0:fc:a1:e3:
d4:be:b9:0b:e1:f7:cd:e1:89:ce:f8:ac:bb:3f:9e:
56:62:9a:da:f9:87:7e:dc:fd:50:90:bf:39:3b:7f:
1e:75:51:95:f9:72:76:82:6e:37:f4:46:1f:4a:25:
a8:24:20:3f:61:4f:da:4a:af:cc:93:a3:20:41:73:
7c:b4:26:7f:07:7d:15:bf:56:de:ae:aa:b4:b8:e6:
29:4e:c0:14:ca:ed:ee:94:92:75:6f:e0:5c:a4:aa:
61:79:52:63:e8:e3:25:d1:8f:08:1e:be:4d:bb:f9:
74:ba:c3:a4:36:d1:38:9f:bb:0c:69:56:d7:4d:77:
af:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B6:D3:08:9D:D4:1E:1C:52:25:9F:87:00:A0:26:CB:DF:1E:C3:33
X509v3 Authority Key Identifier:
keyid:3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:1f:19:d2:4f:6b:74:a6:b0:fe:fb:de:27:e5:df:af:e8:2d:
42:d3:f9:b3:ae:ed:c7:b9:31:74:bd:80:28:0f:bd:4f:07:1d:
db:da:90:bc:de:9f:93:2b:89:2c:c1:d5:82:72:99:8a:ba:1d:
b7:14:d8:c0:42:40:07:b3:06:cc:17:58:2c:88:26:a3:d8:4a:
ba:53:21:d9:24:d4:76:e8:0f:e9:b1:a1:7a:a7:42:00:ff:f7:
1e:c3:a2:8a:d7:5a:ae:3f:3a:34:ec:90:70:6f:1d:11:05:5c:
24:ec:6e:6b:54:1c:7c:52:ad:6c:87:13:f3:6d:f2:77:b1:f5:
86:a1:f7:ae:ba:0a:7c:54:68:21:b2:d0:aa:b4:5e:2d:70:a6:
6e:e7:86:2e:f5:5f:2c:02:7c:2f:9a:65:ea:20:19:af:d2:99:
d0:f8:19:4f:05:c3:5b:b1:20:74:41:2a:a1:0f:e6:cc:7a:37:
ac:14:6b:c9:02:b1:f6:a5:85:e8:ce:a6:f9:9e:29:2f:fb:2c:
5a:a1:7c:58:b9:0c:43:fc:63:e3:d7:70:96:4a:be:8f:35:80:
86:17:57:33:a3:72:5c:9a:e4:1b:30:d0:51:4f:c7:c6:c6:0b:
0d:b3:af:c8:a5:96:a0:21:36:75:8a:c3:9d:c6:c1:39:98:b2:
e2:48:33:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:24 2026 by rpki-client