Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
File: _PmtqbKLaZf9ocRoqNhpY4QHoLs.mft (raw, json)
Hash identifier: /cBVHvIX/5kaOTgqucNT7NIZjpUFkamlypC0FerkDfs=
Subject key identifier: 03:F7:59:F9:E4:B8:02:2F:F8:68:FA:B4:1B:A2:A2:D2:DA:E0:F0:02
Authority key identifier: FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB
Certificate issuer: /CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb
Certificate serial: 019CAE6BF06290F8560FEA7DF2909F37A59F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 12:00:35 +0000
Manifest this update: Mon 02 Mar 2026 12:00:35 +0000
Manifest next update: Tue 03 Mar 2026 12:00:35 +0000
Files and hashes: 1: 5vpEBDoytppmUG_e9rj_C25Xyl8.roa (hash: WBDmOCdQ0a30XWFeqB9R0DXCUU5WmVW9tSy74+sYoEQ=)
2: _PmtqbKLaZf9ocRoqNhpY4QHoLs.crl (hash: kl+KjzFvllIQv3U+ZoTc0tlZ6OVm3iEtMJlJp7iliSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6b:f0:62:90:f8:56:0f:ea:7d:f2:90:9f:37:a5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb
Validity
Not Before: Mar 2 12:00:35 2026 GMT
Not After : Mar 3 12:00:35 2026 GMT
Subject: CN=03f759f9e4b8022ff868fab41ba2a2d2dae0f002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7c:5e:13:e1:33:88:85:55:af:0c:b6:21:24:
c5:0e:cc:e8:e5:6f:ca:c1:66:67:26:30:bd:02:49:
2f:75:1e:72:41:27:90:98:e7:72:91:ba:87:35:61:
ba:9c:fc:ee:8c:34:29:b3:29:d0:68:5b:52:52:69:
35:dc:c8:4c:47:63:ab:42:f8:2d:e5:2c:33:51:b3:
31:da:11:12:b3:da:70:9c:20:2b:7f:2c:84:8c:27:
89:b8:56:e0:4c:0c:49:70:77:d3:cb:7e:c0:6d:71:
de:03:bb:81:be:3b:98:a7:e1:be:44:1b:4b:37:61:
6a:88:33:19:09:83:5e:17:40:cf:ca:67:fc:ce:b6:
71:e9:e4:b6:98:f1:15:fa:00:a5:33:e4:31:51:de:
09:90:bb:ab:f9:36:76:99:c2:8d:96:65:b1:8d:45:
11:77:1a:53:dc:49:c1:4f:0a:f3:5e:a6:7f:08:9f:
18:4c:d1:16:71:a5:79:d6:0b:c4:47:fc:0b:d2:69:
75:18:c0:b9:1f:05:8d:c6:f7:ac:53:e2:76:7a:70:
4b:dc:94:a2:a6:3b:0e:7b:e6:60:fa:bf:1d:6c:95:
39:1b:a6:bb:cd:3e:e9:a1:c1:a1:c4:dc:85:65:10:
5b:61:0f:bd:ff:59:82:c2:8c:da:65:09:53:18:bf:
e9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F7:59:F9:E4:B8:02:2F:F8:68:FA:B4:1B:A2:A2:D2:DA:E0:F0:02
X509v3 Authority Key Identifier:
keyid:FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ce:84:7b:6e:bb:a6:ca:61:3c:39:6a:35:ef:92:3c:b6:8a:
a8:fd:38:86:dc:1a:4d:45:30:47:29:44:da:a5:e7:2f:e6:22:
52:96:30:f4:06:d3:a2:51:f7:25:27:1f:1c:63:24:f6:1d:09:
91:c7:50:13:07:15:e6:92:d2:fb:da:29:6b:96:ad:b6:bb:82:
87:52:ef:2b:aa:7e:6a:0b:24:e4:d2:fa:85:0b:c8:ed:87:a9:
19:9b:ce:95:41:52:07:8f:e9:08:b6:39:35:c1:8f:87:eb:d2:
9f:54:52:db:e3:6f:de:e3:40:a7:6d:0a:a1:92:77:5b:94:fa:
4d:f5:71:ba:24:38:c5:50:36:b1:b4:40:b2:ff:bc:74:db:42:
b8:e4:12:2f:b9:0a:1e:9a:81:7a:c4:2b:8a:c2:58:fa:07:85:
f1:22:ab:ae:db:8a:89:41:c6:86:58:8a:c5:01:56:8e:5c:8b:
90:ee:be:e2:f9:e0:39:4d:75:f0:12:9c:8a:fe:3f:53:d7:13:
4b:36:d2:a9:15:ad:ed:9a:03:ed:73:e2:c8:8b:fc:20:64:54:
a3:5e:3a:9b:e4:b3:55:50:1f:c3:e6:b6:dd:2c:13:f2:4f:cd:
d4:4c:01:e3:6a:ea:fe:c4:9a:ed:e9:06:81:f1:6f:75:80:f1:
48:7a:7c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:59:30 2026 by rpki-client