Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
File: PetYF7vn5aHF-xMFUbhKtIgBb5I.mft (raw, json)
Hash identifier: RDa87jh0iATArDGSjhG1ANwMK1YD8SPN7btGq4RsOCU=
Subject key identifier: 76:A0:87:31:E2:83:63:ED:1F:50:A6:5A:6E:21:46:92:F4:AC:8F:45
Authority key identifier: 3D:EB:58:17:BB:E7:E5:A1:C5:FB:13:05:51:B8:4A:B4:88:01:6F:92
Certificate issuer: /CN=3deb5817bbe7e5a1c5fb130551b84ab488016f92
Certificate serial: 019D9BBF2E4288D6F9AA400E6A237D86BFCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
Manifest number: 0524
Signing time: Fri 17 Apr 2026 14:01:30 +0000
Manifest this update: Fri 17 Apr 2026 14:01:30 +0000
Manifest next update: Sat 18 Apr 2026 14:01:30 +0000
Files and hashes: 1: 09Idh6750rzqiPUR4c726kV5rOk.roa (hash: mc1V6hIQgSw8lLoVocREyrEscnS5kZmkg0rvjeUzfkM=)
2: PetYF7vn5aHF-xMFUbhKtIgBb5I.crl (hash: A6xcvgYoucxl4W9Ym48wI314D88/Hmn4oj7b/AThcU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:2e:42:88:d6:f9:aa:40:0e:6a:23:7d:86:bf:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3deb5817bbe7e5a1c5fb130551b84ab488016f92
Validity
Not Before: Apr 17 14:01:30 2026 GMT
Not After : Apr 18 14:01:30 2026 GMT
Subject: CN=76a08731e28363ed1f50a65a6e214692f4ac8f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1e:5e:f5:e8:0a:9d:22:c7:cf:da:3f:83:e5:
c1:0f:c5:97:f6:9a:f2:f1:99:5d:bf:ad:81:d5:6a:
ce:6a:b9:09:26:6c:f2:51:96:32:f6:40:c8:ab:2e:
79:0c:a2:61:66:b6:be:4a:17:42:36:1e:98:82:44:
87:65:c4:9e:7f:15:90:f0:32:8f:da:a0:63:c8:2e:
68:b2:d8:e8:e6:c0:5e:dc:b6:02:e5:66:2f:8d:c4:
a8:3d:96:c3:24:74:57:e8:64:33:ba:14:77:64:22:
30:46:13:50:63:ba:78:67:20:18:e2:60:c8:c9:f3:
bc:4e:68:13:b1:98:07:7c:78:76:89:ea:f6:37:5f:
53:36:77:47:3b:67:fb:0a:13:4a:0f:dc:68:7b:9d:
b1:3a:a3:30:77:aa:51:61:b6:94:a2:71:b6:71:58:
ac:ba:35:53:d3:1e:ca:b3:1d:a7:65:cc:5f:e5:97:
53:5b:c0:3e:ac:d3:77:5b:4b:b9:d6:c9:36:87:af:
e7:f3:63:46:15:4c:7a:3b:75:a9:9e:d5:31:87:a0:
d8:90:a3:5f:bd:2f:be:86:f2:69:d3:75:69:7a:8d:
2e:ac:78:06:27:57:f7:50:bb:f4:a8:2d:f3:a4:e8:
23:24:47:f0:15:56:97:95:90:61:7d:d9:e9:7f:12:
4b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A0:87:31:E2:83:63:ED:1F:50:A6:5A:6E:21:46:92:F4:AC:8F:45
X509v3 Authority Key Identifier:
keyid:3D:EB:58:17:BB:E7:E5:A1:C5:FB:13:05:51:B8:4A:B4:88:01:6F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:af:f8:02:c6:17:79:ab:4e:db:2f:77:63:06:41:7f:a2:63:
ec:ba:72:ec:af:11:59:76:0c:c4:c7:8d:1e:6e:38:cb:12:e8:
e9:ed:a2:5d:78:06:b3:27:9e:78:a6:ae:b2:be:5b:ab:7d:f6:
08:df:15:24:b9:ff:a3:1c:44:94:b1:65:fd:d7:2e:65:b9:5b:
b8:a4:f2:34:f3:87:1d:79:41:73:62:2a:de:61:69:d1:ae:0a:
84:e1:24:e5:97:54:76:18:2a:0e:85:35:51:df:6e:a9:2d:ad:
2d:e7:20:ba:14:6b:48:68:72:0d:f0:3d:8f:30:2c:85:68:f4:
ee:5c:48:da:e5:90:2d:56:f4:be:b6:39:8c:d4:65:0d:33:bd:
38:b0:7e:ee:5b:b4:12:2d:47:1e:c6:ae:9e:bf:36:ee:cb:01:
08:1b:b4:21:fc:b8:b3:06:d6:5c:44:3f:fd:8f:f4:91:b7:a7:
e0:b6:c0:3a:dd:dd:30:76:26:7e:70:2b:75:41:b3:f8:56:c7:
21:0e:c4:4c:ae:7e:5b:9a:27:a1:26:08:d8:db:c3:38:d3:23:
11:95:31:c3:2c:54:c5:6f:91:83:47:c0:43:60:49:0c:c3:35:
27:7d:d8:26:34:83:d1:41:25:c2:7a:07:85:a4:15:c4:7a:a5:
16:0a:ba:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:07:32 2026 by rpki-client