Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
File: P1jM0LF5IrWNXoss8uV5zmmrOGM.mft (raw, json)
Hash identifier: 5+PtD97Z3lDvLjQmm42GF7ybhdZsBLdvo83c+kJmTQw=
Subject key identifier: 05:70:25:CD:0B:39:AC:6A:6B:CC:DF:B9:E8:98:63:2F:AB:1E:7C:81
Authority key identifier: 3F:58:CC:D0:B1:79:22:B5:8D:5E:8B:2C:F2:E5:79:CE:69:AB:38:63
Certificate issuer: /CN=3f58ccd0b17922b58d5e8b2cf2e579ce69ab3863
Certificate serial: 01A0C39FB45B3A3F738B824CC2EC263C0DA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
Manifest number: 04A4
Signing time: Mon 21 Sep 2026 11:00:18 +0000
Manifest this update: Mon 21 Sep 2026 11:00:18 +0000
Manifest next update: Tue 22 Sep 2026 11:00:18 +0000
Files and hashes: 1: P1jM0LF5IrWNXoss8uV5zmmrOGM.crl (hash: mwexyo9w0skQdXw32GqY8Mg9JR39mYIMseKMvNDnfUs=)
2: jn6gJ9TowbVjY_54Vpm75wNDrsQ.asa (hash: ZmyieK/8MNfMxMHwBvTE99lNasjY/ja265//nNbVVVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:b4:5b:3a:3f:73:8b:82:4c:c2:ec:26:3c:0d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f58ccd0b17922b58d5e8b2cf2e579ce69ab3863
Validity
Not Before: Sep 21 11:00:18 2026 GMT
Not After : Sep 22 11:00:18 2026 GMT
Subject: CN=057025cd0b39ac6a6bccdfb9e898632fab1e7c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:86:26:6d:dc:9c:c3:5e:e4:6f:2f:f0:bc:f3:
d3:f0:fe:f7:fb:5a:a6:5c:c0:f7:78:89:a0:a2:fc:
f9:54:66:06:46:d2:f5:4f:dd:8a:be:e2:3f:01:c7:
14:9b:28:ff:4d:f6:fb:ed:a4:d8:f9:a5:89:a6:07:
a8:7e:10:d9:6c:c6:a1:fd:b3:7d:45:4f:7d:84:36:
e4:03:4e:c0:f6:7d:83:1b:19:b5:b6:11:7e:b1:6c:
52:15:35:02:ae:6d:72:51:b4:f7:23:9c:2a:65:70:
e7:9c:e9:0d:ee:5f:6f:ec:0e:df:58:06:61:87:bd:
d6:16:55:30:e4:d2:11:d1:6c:ac:6f:7c:79:5f:11:
29:51:28:21:04:20:6c:ae:b7:7d:8c:44:9d:25:00:
eb:92:c9:2b:13:d1:26:1b:10:d0:80:0e:88:3a:d5:
12:49:97:7e:45:d4:c4:7e:d7:28:71:6d:73:9e:9b:
77:27:7b:b5:ac:76:98:77:bc:49:77:a9:e6:a3:4f:
fc:80:85:86:93:4c:ce:80:7f:17:e6:15:8f:92:1b:
32:1a:6d:db:81:b3:e3:92:83:e2:88:68:09:e1:51:
88:4a:cd:7c:d1:ee:e7:da:26:3f:01:28:60:19:32:
c4:a9:fd:4e:59:c0:07:f3:29:23:8e:8b:c2:4e:eb:
69:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:70:25:CD:0B:39:AC:6A:6B:CC:DF:B9:E8:98:63:2F:AB:1E:7C:81
X509v3 Authority Key Identifier:
keyid:3F:58:CC:D0:B1:79:22:B5:8D:5E:8B:2C:F2:E5:79:CE:69:AB:38:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b9:36:61:54:52:cd:fe:81:0b:6b:9a:2b:90:80:c3:f0:7f:
73:f4:11:30:e2:5e:04:f6:cf:02:67:ae:d4:73:ca:e3:24:66:
02:f0:e5:22:bd:3a:2b:0f:2b:42:e9:8d:58:17:46:58:54:9b:
e7:75:3c:09:06:1b:33:83:ae:d9:85:0a:5f:46:35:ee:5d:24:
86:48:7e:cb:9d:19:c4:54:99:8b:74:df:01:21:ff:a7:b2:9a:
71:6b:02:95:c0:0f:b4:49:68:a3:54:4e:e1:7b:61:d9:2c:ef:
69:4a:ba:07:db:a3:bb:02:d3:fd:4a:be:95:15:73:5e:75:c9:
a9:35:9d:80:93:ed:65:e2:ec:9e:a6:ae:8b:1f:3d:ba:d6:25:
08:50:98:65:9f:d4:f1:2a:e3:23:77:95:51:56:b6:83:9c:39:
c5:38:7a:cd:ae:e6:37:21:96:b2:e1:4d:c8:a0:bb:ca:76:05:
f6:4e:be:2a:96:09:f2:b0:c2:07:a6:da:0e:07:7f:21:7a:b4:
c3:a1:a9:41:32:d9:09:0b:9a:c7:93:4c:68:43:b4:aa:a1:08:
b1:d2:b7:b4:36:50:a0:95:5e:83:4c:f5:ac:17:ea:7b:91:a5:
31:27:2f:b9:09:1a:ed:89:11:9a:4f:62:89:ee:ac:04:75:55:
e4:7c:8b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:52:19 2026 by rpki-client