Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
File: P1umH85V_19gjjr27FYLN67CNf8.mft (raw, json)
Hash identifier: +GQ5V+HxcLu+f4vw+bszQdC9h1gU9NhfKvKUfnm/c5Q=
Subject key identifier: 4A:4B:B0:41:47:8F:52:26:79:D8:91:6C:9A:CB:34:DD:37:36:0F:72
Authority key identifier: 3F:5B:A6:1F:CE:55:FF:5F:60:8E:3A:F6:EC:56:0B:37:AE:C2:35:FF
Certificate issuer: /CN=3f5ba61fce55ff5f608e3af6ec560b37aec235ff
Certificate serial: 019CAC4782C7CE6D0964848E008D41B0E39F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
Manifest number: 069C
Signing time: Mon 02 Mar 2026 02:01:33 +0000
Manifest this update: Mon 02 Mar 2026 02:01:33 +0000
Manifest next update: Tue 03 Mar 2026 02:01:33 +0000
Files and hashes: 1: P1umH85V_19gjjr27FYLN67CNf8.crl (hash: mUPDd4Iyr59k9NIt8jtK7faiq8gB7hs7SnCkIgJmuuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:82:c7:ce:6d:09:64:84:8e:00:8d:41:b0:e3:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5ba61fce55ff5f608e3af6ec560b37aec235ff
Validity
Not Before: Mar 2 02:01:33 2026 GMT
Not After : Mar 3 02:01:33 2026 GMT
Subject: CN=4a4bb041478f522679d8916c9acb34dd37360f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d1:d1:e0:f5:4b:8b:6a:d3:1d:41:8a:73:6f:
3e:17:42:77:68:1b:b7:6a:80:6d:e7:04:7f:47:cc:
4e:20:e7:81:9a:3a:60:1d:2c:0e:ba:ae:51:21:c1:
3c:4d:b4:d5:da:65:ac:7e:67:f4:a4:46:11:e4:81:
25:63:a1:36:3f:23:60:a5:61:2b:fb:3a:71:67:62:
06:1d:54:05:e6:df:93:68:61:f4:0e:2d:5b:e5:27:
2a:5c:83:e9:2c:79:b1:47:9d:4e:a7:db:56:f1:64:
24:32:f1:42:9a:c1:65:0e:a0:43:e9:0a:b1:5c:71:
8b:6f:08:a5:31:ef:0d:df:43:34:08:78:50:1c:0a:
de:f3:ad:41:fc:2f:24:3f:fe:d3:51:d5:61:3e:85:
24:7e:fd:5a:5e:8e:aa:82:14:1e:ee:ee:38:e4:f9:
05:c6:dd:6a:50:38:90:d6:ac:7e:ce:c7:53:34:13:
b0:79:e8:98:cf:a2:b9:99:02:f0:31:6e:39:cf:26:
d2:69:14:01:23:2c:59:12:1b:a4:79:28:67:ae:e9:
74:e5:4c:7e:db:e3:77:73:33:61:ff:b5:b3:dd:29:
4a:c9:fe:e9:4e:4d:ea:28:78:cd:a4:36:2d:50:c8:
e7:6e:9c:be:aa:31:09:97:e4:79:0c:ee:87:f2:78:
eb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4B:B0:41:47:8F:52:26:79:D8:91:6C:9A:CB:34:DD:37:36:0F:72
X509v3 Authority Key Identifier:
keyid:3F:5B:A6:1F:CE:55:FF:5F:60:8E:3A:F6:EC:56:0B:37:AE:C2:35:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b5:ad:26:19:47:ee:c0:66:62:5b:04:b5:6e:bc:ac:5d:f9:
60:19:4e:cf:e2:ff:77:d8:55:a7:ff:6e:67:ea:6f:a1:77:40:
47:83:d9:51:06:c7:33:79:70:9c:91:63:b4:35:24:4a:bf:6e:
35:c9:94:57:21:40:89:9d:1b:97:a3:ca:74:10:ac:ce:da:b2:
2a:a4:d5:1e:57:80:2e:96:ac:e4:55:cf:5b:83:62:0d:41:7d:
f5:57:7b:ea:eb:43:7a:d0:bd:ab:b6:2d:08:2e:a1:7c:35:90:
a6:16:25:3e:2e:37:70:32:b2:32:d9:00:6c:0a:dc:01:5f:cd:
d3:d8:ec:aa:3c:92:0d:95:a6:ed:f4:39:73:6c:bb:99:2e:2b:
e0:9b:85:f3:95:31:6d:fc:9b:77:a3:15:20:b2:da:9c:c8:d8:
e9:a2:a8:21:31:63:23:75:7e:dd:f2:6b:d3:29:0c:9e:72:96:
3b:ff:86:4d:04:37:48:f2:dc:ea:25:b0:41:e3:02:0d:b1:de:
39:0b:62:b8:be:b5:a0:d3:a9:ee:16:a6:fc:c9:b6:71:6a:bf:
45:77:83:bf:c4:42:1b:53:eb:15:47:96:71:d6:45:c5:b2:45:
cf:bf:a8:04:0d:36:c1:59:84:8f:d1:5c:b6:f5:72:2c:39:df:
36:22:92:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:43:44 2026 by rpki-client