Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
File: PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft (raw, json)
Hash identifier: EtEnHxFPqqM6BirCBX7xnAYXutZ11pJPcvc47baiiYw=
Subject key identifier: 88:62:A6:27:9D:2C:DC:A4:54:F2:45:6A:7E:5D:5B:FD:C3:CA:2D:D8
Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
Certificate issuer: /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Certificate serial: 019CAB345B3FBF31CFC92065781A31CE0C31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
Manifest number: 1285
Signing time: Sun 01 Mar 2026 21:01:00 +0000
Manifest this update: Sun 01 Mar 2026 21:01:00 +0000
Manifest next update: Mon 02 Mar 2026 21:01:00 +0000
Files and hashes: 1: PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl (hash: /ZWgIBCbrEsmWcsowMx0ecm00T1YjuhGO7NULlH9Bo4=)
2: ggxxocqcTwq22NipEXSDZh95C_4.roa (hash: 1HSVk52TYwL3CTNvQK16vezfpvhjf/FZgW8yY/AHmMs=)
3: v2V88seM-Nwzh5wj9f_9IQhYFX0.roa (hash: XYFFs6E41zM0dNU5XXPXTg3Z5qY8tv1UZybspVMB9NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:5b:3f:bf:31:cf:c9:20:65:78:1a:31:ce:0c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Validity
Not Before: Mar 1 21:01:00 2026 GMT
Not After : Mar 2 21:01:00 2026 GMT
Subject: CN=8862a6279d2cdca454f2456a7e5d5bfdc3ca2dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:da:85:a4:55:d8:ab:1e:1a:d4:25:73:6b:f5:
fa:f5:45:92:f1:5a:7e:52:50:c9:d2:54:b8:24:4c:
ed:2b:58:92:ab:98:b0:68:c5:d9:f1:99:42:0c:4d:
7e:b9:a0:5a:10:c7:21:29:5b:83:9e:e2:ef:c6:bf:
e7:8d:44:12:67:8b:0b:fe:95:34:1d:40:07:32:86:
69:24:47:db:fc:ef:f9:e1:53:1b:41:75:bc:fa:9c:
af:18:f2:ee:61:c8:f2:37:e3:1c:f3:b2:89:a3:de:
22:42:7d:57:18:80:07:58:d2:de:91:a3:4b:d4:46:
86:1d:00:2f:b9:83:79:64:80:a2:24:a1:29:98:ef:
6b:33:af:7a:45:86:0c:95:2f:21:a7:4b:5b:09:25:
3a:57:bb:23:02:28:4b:e7:70:c7:67:13:fe:ec:d1:
27:30:bb:e1:ef:d6:04:35:d2:80:e8:2d:39:b8:57:
e2:16:46:ff:66:0d:34:73:08:39:1d:7a:ea:46:80:
ed:47:62:3d:4a:b7:1a:93:88:c0:b2:e8:b4:b0:1d:
51:83:49:90:64:69:3f:a2:06:81:45:a2:1c:67:87:
80:93:4e:61:81:7b:0c:a1:a8:99:35:e8:6b:15:6d:
df:2f:37:20:dd:a4:12:2d:81:26:6e:22:6b:12:a6:
52:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:62:A6:27:9D:2C:DC:A4:54:F2:45:6A:7E:5D:5B:FD:C3:CA:2D:D8
X509v3 Authority Key Identifier:
keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:10:96:93:65:63:d3:f5:30:4b:75:92:bb:b8:57:a1:38:92:
e2:5b:22:96:a6:7c:64:45:ac:9e:b8:42:e5:f7:ac:9c:57:e9:
c5:08:53:a2:0b:75:9e:ae:07:77:82:aa:c2:ad:6d:10:72:06:
e5:81:f0:cd:fe:3e:ec:0e:59:fb:5a:47:d6:c0:93:24:4c:c4:
8e:c8:ce:eb:51:4d:bb:54:5a:e4:f2:29:a4:68:77:fe:3f:d0:
e2:9b:97:98:86:6e:4e:b4:15:5c:98:14:5f:c1:66:e5:83:40:
60:81:fd:f0:ae:6c:e6:1c:67:a0:39:0e:9a:47:36:ab:fc:26:
c8:26:1d:a4:03:32:75:6a:5c:a4:24:92:56:65:39:d8:5f:90:
87:f2:7e:9c:d7:ab:0b:dd:5d:61:a1:1f:69:1c:90:9c:3e:8a:
0d:1f:0a:78:b2:2d:12:45:0a:f7:04:78:fb:6a:53:ac:94:67:
16:a1:8c:ec:99:db:ad:3b:28:cb:34:62:90:1b:32:6c:bd:ec:
3c:7d:0c:94:7d:5b:3a:4b:ab:9e:94:21:d2:07:5d:ba:e5:61:
20:19:b6:41:c0:2b:b0:64:5c:2f:6a:8b:a2:fc:1f:7e:37:90:
c4:38:ec:5f:a9:8b:34:5f:83:84:22:32:97:bf:82:b2:2a:52:
27:61:5c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:28:24 2026 by rpki-client