Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
File: P1jM0LF5IrWNXoss8uV5zmmrOGM.mft (raw, json)
Hash identifier: Q9m6iOjiWdZ4piquOKJAKDTPmFQcI5HYM4xgrwsph2c=
Subject key identifier: C1:93:57:B7:43:C5:BE:86:7D:41:42:09:85:B8:68:EE:F1:75:5D:06
Authority key identifier: 3F:58:CC:D0:B1:79:22:B5:8D:5E:8B:2C:F2:E5:79:CE:69:AB:38:63
Certificate issuer: /CN=3f58ccd0b17922b58d5e8b2cf2e579ce69ab3863
Certificate serial: 019FA7BD9F813AB3725557D5E0350A47CF32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
Manifest number: 0411
Signing time: Tue 28 Jul 2026 08:00:49 +0000
Manifest this update: Tue 28 Jul 2026 08:00:49 +0000
Manifest next update: Wed 29 Jul 2026 08:00:49 +0000
Files and hashes: 1: P1jM0LF5IrWNXoss8uV5zmmrOGM.crl (hash: C147kWMYTT4IxtY5lCtnYjAvfKep4AHcaXIh+8SeINI=)
2: jn6gJ9TowbVjY_54Vpm75wNDrsQ.asa (hash: ZmyieK/8MNfMxMHwBvTE99lNasjY/ja265//nNbVVVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:9f:81:3a:b3:72:55:57:d5:e0:35:0a:47:cf:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f58ccd0b17922b58d5e8b2cf2e579ce69ab3863
Validity
Not Before: Jul 28 08:00:49 2026 GMT
Not After : Jul 29 08:00:49 2026 GMT
Subject: CN=c19357b743c5be867d41420985b868eef1755d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1c:4c:9e:24:02:de:7d:e0:41:00:02:44:b3:
e9:0f:0b:28:51:80:77:91:24:de:d1:3a:dd:cb:81:
2f:3a:61:f9:a9:28:35:7b:aa:0a:ba:f2:c1:6f:e3:
95:b3:b7:2e:43:68:78:9a:d5:6a:9e:00:d5:df:01:
c5:4b:c5:8d:22:a7:0d:c9:42:39:9e:78:7b:b7:4e:
2d:3e:db:72:a4:15:31:cf:6c:21:48:14:57:94:8f:
9b:43:97:ef:d4:99:ec:85:d1:86:db:54:3c:d3:d0:
6e:49:22:93:87:82:4b:d4:3e:b4:cf:ec:f4:24:36:
b9:25:6b:a2:f5:d6:d3:0a:df:90:98:5c:31:50:b1:
76:49:3e:54:61:08:f2:0e:ae:56:52:dd:c5:95:52:
63:8d:9e:be:c0:62:fd:29:88:e6:cc:e3:92:fb:bb:
09:64:e6:d5:25:b3:73:31:f3:f7:f5:fa:8d:56:cd:
35:7d:32:95:c4:2f:c5:c0:2c:5f:83:65:fb:b4:92:
88:b6:b6:51:10:3f:d0:86:5d:06:19:ab:6b:31:6a:
0a:4e:d5:58:b5:06:1f:18:82:67:ec:4f:30:64:df:
3a:ed:32:c6:5d:d3:2a:d5:95:53:7e:b3:de:49:9c:
0f:1a:f1:dc:aa:d2:b8:92:53:3f:b2:50:99:0e:ac:
f9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:93:57:B7:43:C5:BE:86:7D:41:42:09:85:B8:68:EE:F1:75:5D:06
X509v3 Authority Key Identifier:
keyid:3F:58:CC:D0:B1:79:22:B5:8D:5E:8B:2C:F2:E5:79:CE:69:AB:38:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:45:95:af:49:56:dd:1f:d5:52:2b:f6:a9:b0:db:82:3b:07:
a4:25:82:0a:c2:75:3f:2b:c7:17:7d:46:b5:10:0c:55:2c:e8:
f1:f0:1e:b0:2c:67:7c:c5:e1:13:f9:c2:9b:b8:5f:d7:58:17:
2c:46:35:62:50:54:50:57:48:88:95:41:3e:ea:3a:ea:b0:3b:
d3:47:9c:ca:94:f0:8b:a1:b9:75:b1:d1:55:0c:17:c5:73:f8:
fa:a1:ba:9e:c8:c9:74:88:05:23:f1:e9:11:2e:10:51:05:ac:
c2:6b:25:6d:9e:b7:d5:f9:c3:43:39:b1:e7:cc:e7:e0:cc:17:
c3:72:d0:5e:6e:69:23:0a:bb:2b:45:e5:30:59:4d:60:92:70:
c9:0d:38:46:b8:d1:84:2e:65:1a:d5:82:ab:7c:17:a4:0a:a3:
ac:e8:22:43:bc:01:5b:0f:32:ff:1c:09:fb:b1:1e:19:c3:a0:
36:69:b8:74:e0:74:ff:94:d0:47:c8:f0:21:08:90:4a:47:40:
e7:8a:fa:b8:af:30:aa:c0:ae:7f:d0:43:15:b2:0d:d1:9c:47:
0f:50:ad:95:9d:bb:80:d0:85:e2:02:39:97:bb:23:5d:6e:b2:
63:44:a2:46:bc:55:a7:bd:c0:69:2b:e5:ea:6c:57:ea:c4:e6:
32:ea:55:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:52:46 2026 by rpki-client