Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
File: P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft (raw, json)
Hash identifier: OiBFVi2TXFYRJgIMpHxct+0EekORMpc9676N41OW/78=
Subject key identifier: 07:8A:79:32:05:B2:42:DF:D4:B9:EA:6D:90:C7:76:91:CA:97:CB:C6
Authority key identifier: 3F:DA:63:02:13:CD:42:38:80:F9:FE:F1:6D:78:FB:43:6E:08:F2:47
Certificate issuer: /CN=3fda630213cd423880f9fef16d78fb436e08f247
Certificate serial: 019D9BF5273734E5303F2D0E47FA7E3E0560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
Manifest number: 0FA3
Signing time: Fri 17 Apr 2026 15:00:27 +0000
Manifest this update: Fri 17 Apr 2026 15:00:27 +0000
Manifest next update: Sat 18 Apr 2026 15:00:27 +0000
Files and hashes: 1: P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl (hash: kPuGVKA5Hipnu8m3cijqELwi6qCGEaDBgu82rEs+8dY=)
2: qVEqTtkKfrVc5YzchSUNgfDRorc.roa (hash: K5fpw+GM90GMUvrPrbhqWZwOZsGaqvdsEI7pyNmXxYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:27:37:34:e5:30:3f:2d:0e:47:fa:7e:3e:05:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fda630213cd423880f9fef16d78fb436e08f247
Validity
Not Before: Apr 17 15:00:27 2026 GMT
Not After : Apr 18 15:00:27 2026 GMT
Subject: CN=078a793205b242dfd4b9ea6d90c77691ca97cbc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:28:82:72:ef:ad:e1:4f:53:4f:29:87:99:b7:
ae:c3:ce:db:ca:82:e6:12:02:75:ff:b0:bd:1b:a4:
fb:5b:55:9e:a8:9e:c7:35:db:54:92:df:4a:6b:94:
d2:b4:96:37:d0:77:87:71:bd:a7:27:e1:6b:2b:61:
67:0f:6c:bb:65:ec:fc:2a:c9:b6:88:ab:e7:90:55:
97:34:75:cb:8c:16:14:59:8e:76:0c:01:a8:4c:5c:
3d:db:80:17:9c:52:b6:4b:07:29:5b:3c:bb:44:6e:
0d:64:ce:17:d4:d3:fe:af:7d:a5:41:8d:51:18:9e:
41:a7:46:04:ce:c1:8d:7b:98:fd:a7:77:80:00:fe:
c3:9f:74:07:f3:ea:d1:90:1e:c6:6d:2c:28:00:34:
90:31:4f:79:62:f6:94:cb:e5:bc:49:80:ba:7d:03:
58:a6:a6:c1:52:c4:a1:c2:77:ac:7f:29:3c:35:3e:
a7:24:b5:46:6c:c2:bc:97:72:a5:62:38:25:62:3e:
93:94:49:ef:aa:bf:03:15:6f:ef:db:d5:25:2a:12:
58:87:bf:ec:77:e5:09:87:ea:41:8b:b5:9a:5c:c6:
f8:99:68:49:26:15:19:9e:87:c5:56:be:13:9f:4c:
a3:7e:af:6f:c2:c5:93:d5:12:a3:6a:42:ad:4a:3b:
de:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8A:79:32:05:B2:42:DF:D4:B9:EA:6D:90:C7:76:91:CA:97:CB:C6
X509v3 Authority Key Identifier:
keyid:3F:DA:63:02:13:CD:42:38:80:F9:FE:F1:6D:78:FB:43:6E:08:F2:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:e8:29:37:3f:67:c3:87:0f:3e:10:55:da:5c:5d:5b:0e:70:
11:7e:26:86:55:ef:2d:f7:e5:15:72:37:e8:37:89:f1:63:6f:
36:2b:7e:bd:37:14:3c:e4:bd:32:2a:05:10:52:d1:39:aa:1c:
d3:c9:d9:09:24:24:48:41:8d:98:af:3e:cd:02:08:d4:30:91:
41:a2:53:3f:b5:34:fa:bb:6c:b5:26:10:af:20:9a:72:06:66:
35:85:52:98:5f:28:09:01:55:d8:16:58:ce:2b:0d:20:a1:40:
bc:e8:a8:22:64:59:80:9e:e3:46:7d:9e:45:12:ce:71:86:30:
ba:2a:4d:ac:39:09:a8:f8:87:60:0c:f4:f4:ce:da:93:de:7a:
6a:1e:c2:bd:05:04:06:3a:6e:96:34:7e:09:50:cf:4a:e8:34:
f3:0f:8f:46:bc:d7:a4:06:d7:3c:06:e1:d0:57:24:d2:36:06:
07:43:d4:71:3e:ad:fe:83:c8:5e:ca:bc:59:4c:56:da:18:c7:
b8:d1:9c:65:3d:70:95:bb:84:5a:33:cd:10:1c:82:62:cc:e9:
ab:aa:b2:6b:0c:f0:20:92:a6:d3:41:d9:9a:d6:c5:6f:6a:b6:
3d:fd:e4:4e:e3:d2:cc:c5:36:bd:eb:c5:47:a3:9f:7f:0b:0f:
08:29:67:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:08:27 2026 by rpki-client