Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
File: P-XZqjR4a6oW1Fa9857K-12XMPg.mft (raw, json)
Hash identifier: 4orhKPCA1e8JOEUP/Kv60I63gc47BWRgxKr9CUsSUHQ=
Subject key identifier: D9:39:82:35:A1:6B:91:DE:58:CE:79:8F:72:03:FB:F9:5B:FF:B3:EF
Authority key identifier: 3F:E5:D9:AA:34:78:6B:AA:16:D4:56:BD:F3:9E:CA:FB:5D:97:30:F8
Certificate issuer: /CN=3fe5d9aa34786baa16d456bdf39ecafb5d9730f8
Certificate serial: 019CAB341C214D3DA63C5DAECA74DF3C9BCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 21:00:44 +0000
Manifest this update: Sun 01 Mar 2026 21:00:44 +0000
Manifest next update: Mon 02 Mar 2026 21:00:44 +0000
Files and hashes: 1: P-XZqjR4a6oW1Fa9857K-12XMPg.crl (hash: JBKVqWFSvywfMJgt1GMpQMxoSu9PA6+CYq827g+PFwc=)
2: g5nPMDhR1xXE3aUl3Zj948mnSZo.roa (hash: hy3Afkla54p1JUhAk/RCQlLZSfZ1AsKTh6gnAbaPJ04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:1c:21:4d:3d:a6:3c:5d:ae:ca:74:df:3c:9b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe5d9aa34786baa16d456bdf39ecafb5d9730f8
Validity
Not Before: Mar 1 21:00:44 2026 GMT
Not After : Mar 2 21:00:44 2026 GMT
Subject: CN=d9398235a16b91de58ce798f7203fbf95bffb3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8f:dc:37:f3:71:01:b0:fb:c0:8c:78:3e:b5:
36:14:44:25:a8:e2:a5:65:21:28:c2:8a:ac:7f:be:
d3:5b:6c:95:25:40:37:b3:22:a3:46:68:45:28:7b:
14:20:7e:17:b4:b1:7a:0b:c3:94:a1:4c:c9:62:36:
72:74:d2:cf:c9:92:ca:32:66:b7:0a:52:f9:43:47:
38:6b:9a:7e:7d:11:fd:dc:bd:57:ec:15:29:bb:8d:
d0:cc:bb:3d:32:35:d9:33:01:99:6f:42:b4:8a:e6:
bc:c9:af:30:c9:6e:72:86:a5:9c:57:ca:5b:af:17:
e6:b3:96:fc:70:76:09:e5:d1:e5:f9:28:b1:68:78:
c7:ae:2f:f6:e3:02:3a:bf:e4:ce:ca:ba:65:f3:ea:
6b:e5:b9:ed:51:74:20:c2:92:b1:96:06:f6:40:9a:
78:c1:53:a9:24:13:e3:bc:a6:14:ff:0a:d9:90:93:
33:8f:92:8b:70:a3:25:4d:66:41:0e:99:85:e8:4e:
55:6b:bc:52:48:ec:15:73:d8:87:95:84:81:71:f6:
91:3b:53:c4:ea:4f:06:ef:6b:92:9e:54:b6:05:81:
9a:7e:12:0d:bc:36:f3:ba:d8:70:4a:55:94:fd:ad:
3f:61:20:b4:02:65:ae:ae:5f:e8:c8:8e:47:20:9d:
de:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:39:82:35:A1:6B:91:DE:58:CE:79:8F:72:03:FB:F9:5B:FF:B3:EF
X509v3 Authority Key Identifier:
keyid:3F:E5:D9:AA:34:78:6B:AA:16:D4:56:BD:F3:9E:CA:FB:5D:97:30:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:7b:56:2b:80:73:fe:38:68:58:d6:12:d5:12:af:f8:93:34:
57:74:a0:59:79:46:73:31:61:40:3b:5c:0a:67:1c:eb:f2:8b:
c2:08:0f:69:46:96:75:d2:41:d9:03:57:07:e9:3f:56:3d:0f:
78:f6:d4:9d:15:b0:39:c7:d7:38:62:b0:99:48:70:8b:2a:7c:
35:b2:a7:d9:6f:25:30:63:f2:26:6d:bb:0a:66:34:38:91:0b:
42:05:57:24:9b:5c:28:08:8c:84:5e:9c:01:c0:11:d3:c2:3f:
18:c0:99:31:48:35:6c:2b:9d:62:3f:ee:0a:f3:88:8d:ce:f6:
63:78:dc:da:4b:9c:25:d0:37:69:56:32:66:72:dc:e3:f0:e8:
e8:e8:32:5c:c4:97:76:00:f2:f5:8a:3c:ad:e0:54:d8:7d:39:
1e:22:bd:7a:3b:ba:59:fc:be:fb:05:2e:ba:fb:1d:75:9f:b3:
5b:e4:a6:ef:2e:2c:c8:dc:e8:5c:be:6f:b0:b7:09:03:24:d8:
0c:12:b8:be:56:06:2f:1a:82:a2:fd:92:41:c0:5a:1a:66:0d:
8f:f2:dd:e2:34:23:7e:19:86:05:5d:9f:d1:51:b1:8c:a4:67:
68:e4:28:a9:1c:4b:c1:80:28:74:f8:cb:95:86:80:e5:83:2a:
01:ca:f7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:59 2026 by rpki-client