Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/P3XgDVc45b4rCWaNJ5EUDu8zIKU.mft
File: P3XgDVc45b4rCWaNJ5EUDu8zIKU.mft (raw, json)
Hash identifier: t9gbN1TRsNxIjmLjGmNMXAi0J7/BGU/eQsKhNSWx/nk=
Subject key identifier: 9F:EE:DA:89:84:53:68:4B:A9:3F:26:74:5E:40:63:18:D6:49:1D:FF
Authority key identifier: 3F:75:E0:0D:57:38:E5:BE:2B:09:66:8D:27:91:14:0E:EF:33:20:A5
Certificate issuer: /CN=3f75e00d5738e5be2b09668d2791140eef3320a5
Certificate serial: 019FAA880560EE274624529E2A557BB40457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3XgDVc45b4rCWaNJ5EUDu8zIKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/P3XgDVc45b4rCWaNJ5EUDu8zIKU.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:08 +0000
Manifest this update: Tue 28 Jul 2026 21:01:08 +0000
Manifest next update: Wed 29 Jul 2026 21:01:08 +0000
Files and hashes: 1: 9IDvg1m6FIQbcRd8cJ6Kz2ePInE.roa (hash: u6Pgg+TL8fBUrMeamu9qvumoJ5B+GURrCIvuw0aOKdI=)
2: Luquwxy5MmMCtghrD0bo5fP54_k.roa (hash: Bl2RpJjzTlgY54x2PqQ2Lom0vkyRv1xgE+degACJfHc=)
3: P3XgDVc45b4rCWaNJ5EUDu8zIKU.crl (hash: gfGrVJvUD0oIkM6moPnXWATKLWOveA30TyUMmP1qCF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/P3XgDVc45b4rCWaNJ5EUDu8zIKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/P3XgDVc45b4rCWaNJ5EUDu8zIKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/P3XgDVc45b4rCWaNJ5EUDu8zIKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:05:60:ee:27:46:24:52:9e:2a:55:7b:b4:04:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f75e00d5738e5be2b09668d2791140eef3320a5
Validity
Not Before: Jul 28 21:01:08 2026 GMT
Not After : Jul 29 21:01:08 2026 GMT
Subject: CN=9feeda898453684ba93f26745e406318d6491dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:11:ac:35:bb:6b:c5:74:69:39:1d:d7:2f:c6:
c0:ba:58:0c:1f:11:b4:2c:a6:99:7c:a2:76:fc:38:
ab:4f:8a:c9:4d:8d:79:94:f0:23:db:09:38:1c:55:
23:28:27:55:57:d8:2f:b5:d1:a3:14:90:f6:04:84:
42:51:be:5d:9f:78:0f:99:c8:fd:2e:f0:1a:0f:26:
93:85:6d:8d:c4:a1:d4:e7:01:68:6c:89:6d:61:cc:
b1:40:97:9a:e7:c8:76:58:a9:38:c7:e1:d6:d7:d6:
34:be:d6:1b:1f:cb:00:20:0c:71:4b:7f:34:e1:7c:
a4:6c:28:94:97:30:1d:5b:2f:39:71:50:73:96:52:
97:6f:85:ba:99:8a:03:07:6a:6d:d5:19:7c:37:5c:
8a:68:82:e0:56:8b:68:a3:fa:0e:fc:ff:a3:6d:c1:
5f:0a:ee:c5:a1:ff:49:be:13:c2:51:69:01:12:be:
6d:0e:7f:3a:2e:56:b2:b7:51:6c:46:69:27:c6:eb:
1d:3d:b9:92:79:d1:f7:85:10:30:6c:cf:3a:b8:6c:
0a:17:e9:dc:39:e7:0f:c0:b8:d7:63:dc:70:7d:b3:
a4:5f:4d:c4:68:ef:f2:e2:62:3b:43:9c:ef:d1:3d:
99:ab:93:b8:28:44:c3:7c:7b:8f:3c:97:40:30:e5:
1b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EE:DA:89:84:53:68:4B:A9:3F:26:74:5E:40:63:18:D6:49:1D:FF
X509v3 Authority Key Identifier:
keyid:3F:75:E0:0D:57:38:E5:BE:2B:09:66:8D:27:91:14:0E:EF:33:20:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3XgDVc45b4rCWaNJ5EUDu8zIKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/P3XgDVc45b4rCWaNJ5EUDu8zIKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/P3XgDVc45b4rCWaNJ5EUDu8zIKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:cf:bd:78:71:df:17:56:1c:f5:d4:8d:44:71:4b:3f:a4:37:
49:56:28:9e:26:28:8d:de:e0:2d:f3:63:e5:5a:8d:9c:0a:0c:
02:ae:7e:46:6f:de:e9:69:09:5a:17:c3:b7:9f:42:1e:71:97:
e2:f7:ac:47:ac:54:6d:b4:5d:24:ad:86:7c:f0:5c:f5:94:f5:
46:ab:0b:d3:23:da:45:73:23:1b:15:31:54:ee:4f:e8:96:cc:
cf:19:c7:40:0b:83:71:a3:66:56:b7:ec:aa:a8:cb:8e:01:dc:
6f:63:53:fd:31:04:ca:0d:fa:39:c4:81:21:3d:26:d2:ee:a2:
1f:8e:c0:1c:99:dd:5f:c4:54:a9:ae:8d:c2:30:33:1c:d4:e5:
24:07:22:c6:63:98:b5:17:bf:fb:f9:b4:98:19:f5:df:09:80:
41:0b:d0:75:54:27:c8:68:19:ec:d5:f0:3d:41:4a:b9:82:5f:
c1:4c:ac:b1:ef:c2:af:ab:1c:0e:40:3c:5d:cd:84:4a:b3:6f:
01:1e:9f:e5:11:14:a6:a2:36:34:d6:e7:96:73:93:b4:f4:59:
f7:fa:fc:0c:c0:28:82:8a:ec:c7:15:e9:b6:67:2b:88:bd:d4:
d6:b8:8e:9d:c3:5e:c0:ec:8e:50:7f:11:aa:82:27:de:8d:9f:
73:d9:54:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:23:20 2026 by rpki-client