Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft
File: P1amMzFVLvkdigAFozjsmC3zfIs.mft (raw, json)
Hash identifier: yVI3ocdMB0EC5TzU6/3DeRUbFw6pOmoy7kEDdJeSpn4=
Subject key identifier: 11:E1:E0:B6:C8:8F:C7:35:53:8B:DE:13:8C:3A:2E:47:8D:F1:BA:A9
Authority key identifier: 3F:56:A6:33:31:55:2E:F9:1D:8A:00:05:A3:38:EC:98:2D:F3:7C:8B
Certificate issuer: /CN=3f56a63331552ef91d8a0005a338ec982df37c8b
Certificate serial: 019D984FDAB06E72523705B2EA137B233CF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft
Manifest number: 12CB
Signing time: Thu 16 Apr 2026 22:01:03 +0000
Manifest this update: Thu 16 Apr 2026 22:01:03 +0000
Manifest next update: Fri 17 Apr 2026 22:01:03 +0000
Files and hashes: 1: P1amMzFVLvkdigAFozjsmC3zfIs.crl (hash: lMw2ZEgpn6brlCKh7R1zZR3YD/EUDthLw0SBzHL7R7Y=)
2: hqL2_Cp_966-Nf1xdK0ELQH3lNQ.roa (hash: lMjEmScvr6aJ0unz4g+pWkszHQy3LFWSbgQbOr7UsIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:da:b0:6e:72:52:37:05:b2:ea:13:7b:23:3c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f56a63331552ef91d8a0005a338ec982df37c8b
Validity
Not Before: Apr 16 22:01:03 2026 GMT
Not After : Apr 17 22:01:03 2026 GMT
Subject: CN=11e1e0b6c88fc735538bde138c3a2e478df1baa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9b:45:92:61:9b:c8:75:7c:75:47:5f:16:8a:
45:5d:4c:19:cf:e1:33:71:cb:df:00:cc:c7:17:6a:
71:57:45:9a:e6:46:32:cd:09:b9:42:0e:8f:fe:63:
51:e4:c9:9e:87:cc:f3:d9:41:0a:fc:6c:58:7b:d3:
1e:21:ff:ff:bf:a4:d0:2d:3b:bd:31:24:ce:4b:c9:
9e:74:12:5e:19:39:5d:94:8d:52:b5:99:cc:c8:78:
13:1c:d1:88:07:cc:b7:d8:f7:af:15:2b:d1:52:54:
73:f2:c6:cb:48:44:38:41:02:ab:fe:67:ab:32:3a:
03:60:3e:89:24:8f:97:25:39:3a:eb:d6:fb:44:7a:
a0:41:d4:8b:dc:68:cc:8c:df:a7:8a:82:05:59:cc:
e3:59:da:51:fa:e6:35:5a:fe:77:09:f5:da:54:2a:
fe:7f:83:f1:c7:00:9f:a8:93:a3:53:bd:28:1f:1a:
b5:92:e0:14:e3:6b:29:c0:c8:22:52:13:e9:88:d2:
51:cd:45:27:be:a4:d4:af:09:ae:09:95:ab:69:d1:
2f:00:10:00:b6:02:46:62:aa:a4:ac:23:bf:9f:1a:
9e:9f:f4:ab:43:76:17:16:95:cc:20:e4:f4:db:25:
31:7c:63:6a:02:5c:3a:86:5b:1d:f6:8c:15:16:4a:
9c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E1:E0:B6:C8:8F:C7:35:53:8B:DE:13:8C:3A:2E:47:8D:F1:BA:A9
X509v3 Authority Key Identifier:
keyid:3F:56:A6:33:31:55:2E:F9:1D:8A:00:05:A3:38:EC:98:2D:F3:7C:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a6:ba:f4:3d:96:02:c1:da:58:cc:b4:81:5a:ab:35:f1:5c:
e0:5a:22:f1:a4:fa:52:04:66:13:52:57:2c:16:27:b7:c3:dd:
e1:df:80:4c:aa:cb:ab:a5:78:62:6a:74:fc:25:41:b2:26:40:
e7:ab:35:c6:f1:51:48:5e:b1:63:7f:e9:c9:78:47:2b:36:d3:
df:b7:21:c3:52:99:d2:1d:e8:1b:f0:42:4b:00:02:e2:ef:9d:
0b:ae:ba:35:10:6f:82:f6:b1:09:fb:72:80:64:94:78:5b:8e:
29:4d:08:5f:57:bb:1e:7d:b1:73:45:54:6b:5a:0c:c1:b2:38:
f2:c3:b3:55:24:7e:a8:87:6e:ae:68:9e:0a:35:66:c4:f4:33:
92:46:6d:11:2e:97:c4:6f:a2:a7:be:8b:7d:af:ae:4d:c3:06:
ef:31:7f:d4:c7:a1:b3:c5:58:5e:c2:f5:d7:87:3b:35:9a:bf:
40:6b:af:49:8c:6b:3d:87:30:dd:ca:95:6a:68:57:88:f9:45:
f8:43:e0:4a:c7:d5:15:bf:30:4f:c7:ee:e5:6c:e4:c5:18:99:
ab:9d:97:92:8e:6b:8c:ae:51:18:95:2a:94:53:af:d8:00:ec:
83:fe:d7:d9:ed:24:d7:8b:a2:07:60:51:14:dd:ae:63:2d:79:
73:0b:87:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:46:20 2026 by rpki-client