Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft
File: P1amMzFVLvkdigAFozjsmC3zfIs.mft (raw, json)
Hash identifier: rbhz5VDIopTaWxYmyTHcplxqJnINILzl+lR6JyxHl6w=
Subject key identifier: 05:1A:5A:81:F1:96:1E:18:E8:24:8C:E8:33:78:2E:A6:2A:B4:E5:97
Authority key identifier: 3F:56:A6:33:31:55:2E:F9:1D:8A:00:05:A3:38:EC:98:2D:F3:7C:8B
Certificate issuer: /CN=3f56a63331552ef91d8a0005a338ec982df37c8b
Certificate serial: 019CAEA35A1FE15C38BE8039D1CD0A7D2F99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft
Manifest number: 1252
Signing time: Mon 02 Mar 2026 13:01:06 +0000
Manifest this update: Mon 02 Mar 2026 13:01:06 +0000
Manifest next update: Tue 03 Mar 2026 13:01:06 +0000
Files and hashes: 1: P1amMzFVLvkdigAFozjsmC3zfIs.crl (hash: qh6b9MJ0d7VSUuG+Y6XBzuiyTk6a4ry28wDUHEmAKyQ=)
2: hqL2_Cp_966-Nf1xdK0ELQH3lNQ.roa (hash: lMjEmScvr6aJ0unz4g+pWkszHQy3LFWSbgQbOr7UsIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:5a:1f:e1:5c:38:be:80:39:d1:cd:0a:7d:2f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f56a63331552ef91d8a0005a338ec982df37c8b
Validity
Not Before: Mar 2 13:01:06 2026 GMT
Not After : Mar 3 13:01:06 2026 GMT
Subject: CN=051a5a81f1961e18e8248ce833782ea62ab4e597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:23:e9:09:73:e4:87:e1:ee:77:09:24:1b:45:
a4:94:95:b3:fe:03:97:5c:c0:d1:fe:b8:98:18:d4:
4b:38:9c:15:79:35:45:bb:33:47:69:77:05:00:2e:
81:c8:29:a3:8e:36:3c:0c:06:c9:ff:e8:e4:a6:ce:
8e:e1:d8:9d:1b:3d:0b:78:20:03:08:e0:f3:f0:33:
19:22:3b:e2:65:c4:a1:f8:eb:81:f8:77:00:43:40:
0a:e1:64:51:7a:16:8f:21:23:4a:7c:63:99:a0:b5:
f7:1e:f9:f4:f1:6b:88:31:29:97:12:c7:6a:a8:dc:
f6:18:7f:f3:2e:ec:25:1c:39:67:22:ea:f9:18:36:
c6:3a:39:7e:85:6e:15:f0:b1:6f:54:cd:c0:e0:4c:
2c:4a:92:0e:9e:0c:42:e2:41:f0:48:e7:d0:34:0e:
46:a6:0e:15:17:a0:d9:97:ac:a7:0f:77:61:93:6d:
7f:3c:09:20:e7:fa:ce:0f:f5:94:ca:a8:fc:b5:62:
7c:7d:d3:51:c7:f8:06:62:d4:f2:58:f5:12:29:10:
48:93:ec:c5:f4:2e:4a:0c:ca:2a:da:98:67:eb:79:
a2:b7:09:60:b3:1f:7c:82:f0:30:80:3c:bc:a5:0d:
fa:21:73:2a:d7:4c:65:b2:5b:85:9a:71:86:92:b0:
b4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1A:5A:81:F1:96:1E:18:E8:24:8C:E8:33:78:2E:A6:2A:B4:E5:97
X509v3 Authority Key Identifier:
keyid:3F:56:A6:33:31:55:2E:F9:1D:8A:00:05:A3:38:EC:98:2D:F3:7C:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:72:ce:55:d0:c3:19:e4:76:f9:90:50:54:9e:a7:f5:a2:2c:
a6:53:a5:bf:fe:57:bd:f7:e9:4d:3a:64:a0:7d:a3:c0:bf:0e:
0d:87:72:db:58:9c:0b:44:7e:61:cb:be:b3:70:18:85:36:2f:
67:25:13:d2:6f:74:4d:5f:57:63:a9:46:bf:5d:46:d4:1c:2c:
17:b2:ff:3a:56:3f:02:fd:e8:ff:84:db:69:01:2e:ae:6a:83:
1b:14:f6:c9:ed:e4:29:e0:30:ac:01:69:ad:b4:a2:64:8e:50:
aa:ea:1d:a4:8c:5a:cf:ae:88:bf:f5:41:b5:6c:e0:10:7f:d2:
14:5c:47:69:2a:05:33:f7:a7:7d:a2:3a:bb:f4:6b:45:44:40:
6b:4f:d5:6c:b0:0c:3e:2f:f4:34:2d:79:6a:e0:b6:4c:73:55:
62:1c:8d:e9:09:dc:64:e9:4a:db:5c:c7:d6:ce:76:42:17:08:
f1:db:63:42:c6:97:32:1f:9a:f3:85:62:e7:96:73:7b:86:97:
f7:1c:dd:85:76:87:1b:82:88:60:58:93:b0:19:72:54:06:e0:
b2:35:36:1a:37:68:6e:f0:06:3f:dd:82:7b:43:e6:0c:2d:9a:
37:2b:44:48:fc:f8:e6:1f:e7:39:21:ba:2e:3d:28:fa:4c:50:
70:28:e1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:26:43 2026 by rpki-client