Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
File: P6xo-RIFxE5zAzbmALYzT4yB6MI.mft (raw, json)
Hash identifier: 1kToaIReqPIuW1P4oFlRMfBhacfiNtuBAMPtegIAYW4=
Subject key identifier: D0:DC:D6:B7:64:6C:9E:7D:5B:96:20:AA:4D:20:A6:AC:30:3A:4D:4D
Authority key identifier: 3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
Certificate issuer: /CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Certificate serial: 019D988655A88042608106EE15CBEDD65AF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
Manifest number: 04B2
Signing time: Thu 16 Apr 2026 23:00:33 +0000
Manifest this update: Thu 16 Apr 2026 23:00:33 +0000
Manifest next update: Fri 17 Apr 2026 23:00:33 +0000
Files and hashes: 1: B70dl_4-b5eVhvQvZuPSWgvFpmU.roa (hash: PEnqRbyIXEVxwwcn6v1NmFYPEb0k725A2k724/MK0vI=)
2: Ka34B6rBgIn3gd6cXePqD35HsVc.roa (hash: /Qd0BtNspWGLKcZicxcHQ+co2KBYSO2WlY4JEiRzWAo=)
3: P6xo-RIFxE5zAzbmALYzT4yB6MI.crl (hash: GWmdwjdeRMeP8Q7otK6pB1O2ZYI18xjlSWEJ5hYu+S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:55:a8:80:42:60:81:06:ee:15:cb:ed:d6:5a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Validity
Not Before: Apr 16 23:00:33 2026 GMT
Not After : Apr 17 23:00:33 2026 GMT
Subject: CN=d0dcd6b7646c9e7d5b9620aa4d20a6ac303a4d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2a:eb:4d:d9:6c:ab:a8:27:89:da:3f:cc:e0:
1e:52:a8:a8:90:3b:ff:6d:63:e0:f9:f6:fc:2b:59:
af:7a:f5:9c:71:6f:fd:dc:68:91:90:2a:eb:d5:3b:
16:36:35:13:a4:05:b3:9b:41:8c:a7:24:39:63:1f:
35:b0:46:fb:a0:14:f7:11:67:c9:f2:75:08:e1:0c:
a2:31:d8:d9:d2:54:fa:f9:be:3e:8e:22:41:b5:5d:
aa:d9:59:e1:be:42:58:04:17:16:b6:7c:5d:37:dc:
6e:61:38:ba:c8:1d:98:f1:81:c5:8a:92:7c:5c:06:
55:e2:4f:21:f6:df:b9:e8:c1:f8:51:07:1a:30:18:
ff:8a:9e:e6:f5:47:8f:77:32:06:0c:75:32:8e:f1:
1a:3e:c6:6f:64:b5:4a:f0:50:15:92:04:73:a4:86:
1f:49:92:96:c8:ef:2b:e1:5f:44:9b:23:07:0b:f7:
73:86:00:9b:e0:31:b6:4e:3e:88:f2:01:e5:ca:99:
21:b9:81:30:93:e0:35:ae:b9:88:14:a3:a2:bf:36:
de:57:db:5c:60:21:b9:29:95:5f:3b:8f:fa:e5:b4:
d3:88:5d:35:1f:db:28:c8:db:e8:88:20:20:09:de:
42:69:4a:27:a7:12:06:52:26:ee:00:1e:59:27:28:
e0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DC:D6:B7:64:6C:9E:7D:5B:96:20:AA:4D:20:A6:AC:30:3A:4D:4D
X509v3 Authority Key Identifier:
keyid:3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:13:ed:6c:59:fb:5d:9a:02:5e:81:8c:94:7c:1b:79:1d:c1:
b6:80:34:e7:f8:1c:8e:e0:e5:e1:db:9f:00:ec:37:43:b9:9f:
0d:b4:25:7c:37:8c:ce:94:48:2a:04:fb:39:62:d6:a4:a5:20:
a9:22:dc:a0:9f:99:db:13:60:d5:42:2b:4a:41:c7:ac:25:26:
c7:47:b3:7a:c2:b7:4a:0e:66:0f:2f:0f:ad:e9:3b:e9:a0:ef:
c7:33:87:43:c4:ab:d3:bb:fa:84:5b:7d:b7:10:20:a4:ba:ab:
03:a6:12:a2:1e:2e:b1:ca:03:45:4f:e7:d4:74:00:6d:32:a2:
c5:36:d8:c5:e9:12:f6:a2:9b:44:2c:76:9f:2f:bb:d2:9a:1a:
75:b9:17:c6:79:3d:fd:9c:b3:bc:ba:65:5b:ab:87:01:73:d7:
9d:8e:b7:30:d9:3d:f4:65:25:6b:cd:d9:21:4c:4c:6f:d0:34:
7a:6d:2e:46:88:bc:45:8c:f7:a9:87:e8:e2:d8:06:11:0f:67:
e0:c7:a8:b9:13:d2:9b:f5:e8:21:ed:14:9f:89:e6:86:dc:31:
31:a6:00:62:98:c1:e6:e6:fa:12:5f:66:9f:91:5c:9b:ae:1b:
01:18:54:72:c1:ec:ad:07:54:c2:4b:35:97:7b:c2:1e:5e:ef:
be:27:f7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:22:01 2026 by rpki-client