Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
File: P1jM0LF5IrWNXoss8uV5zmmrOGM.mft (raw, json)
Hash identifier: Tf2hPmMUVBn3zRwhYuwUQm5DKEy8mFRST+VyhT0UL8c=
Subject key identifier: 8F:31:40:03:2B:D8:BC:80:7B:B6:3B:52:EF:83:A5:13:84:97:D3:C5
Authority key identifier: 3F:58:CC:D0:B1:79:22:B5:8D:5E:8B:2C:F2:E5:79:CE:69:AB:38:63
Certificate issuer: /CN=3f58ccd0b17922b58d5e8b2cf2e579ce69ab3863
Certificate serial: 019D9B8755BC32F3898611FC32333E816332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
Manifest number: 0301
Signing time: Fri 17 Apr 2026 13:00:30 +0000
Manifest this update: Fri 17 Apr 2026 13:00:30 +0000
Manifest next update: Sat 18 Apr 2026 13:00:30 +0000
Files and hashes: 1: P1jM0LF5IrWNXoss8uV5zmmrOGM.crl (hash: DZ2PAD8LRB4uODEeuB0veuNlbK6zoDcsCLJNbXXoOIY=)
2: pwkOfI0N-Tqs6EWE-ZLxQ2pD3ZM.asa (hash: 76UHeLcM+om1iT2qZCwO5q94A8qOQbIQ5FrClESA93w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:55:bc:32:f3:89:86:11:fc:32:33:3e:81:63:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f58ccd0b17922b58d5e8b2cf2e579ce69ab3863
Validity
Not Before: Apr 17 13:00:30 2026 GMT
Not After : Apr 18 13:00:30 2026 GMT
Subject: CN=8f3140032bd8bc807bb63b52ef83a5138497d3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:29:48:b0:68:57:73:1a:8e:67:3f:79:ff:aa:
96:b0:44:dc:4e:84:51:e3:be:f2:d7:ec:1d:74:ea:
2e:79:4d:35:b6:37:2d:7a:6d:e4:aa:a1:3c:b5:b3:
c7:fb:e9:90:bd:b1:ef:7f:12:80:7c:5e:17:17:78:
8c:83:f0:df:8e:45:26:c3:ca:e8:10:b6:80:d8:6e:
91:bd:cb:eb:75:34:c2:7f:0f:42:ce:8f:b4:cd:d3:
d6:48:8e:af:ef:51:24:9f:bc:c3:2f:7e:52:0c:81:
6c:41:c2:f9:55:a6:db:d2:71:d8:b5:49:39:20:db:
4d:4d:bd:67:41:31:15:04:30:e2:6c:45:d6:54:4b:
c8:fc:42:74:dd:6b:64:23:5d:8d:96:71:d4:dd:d3:
e9:af:2f:6d:df:8c:1c:83:79:c5:e2:9e:67:19:2c:
8f:e8:1e:cf:e6:02:4b:2c:93:ec:bf:d6:44:c8:ac:
15:77:5a:c8:c8:e7:05:d1:35:92:4b:7d:a7:f2:59:
59:a5:a1:ad:97:b1:ae:3a:f0:fc:f7:20:93:14:5b:
25:ba:1f:aa:7e:d5:2d:f5:5b:38:f2:60:4e:5d:12:
77:5e:64:cb:87:49:c2:ec:cf:fd:42:2e:94:1f:2d:
e8:79:60:bd:d8:d0:af:e2:77:89:34:01:60:e9:74:
cf:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:31:40:03:2B:D8:BC:80:7B:B6:3B:52:EF:83:A5:13:84:97:D3:C5
X509v3 Authority Key Identifier:
keyid:3F:58:CC:D0:B1:79:22:B5:8D:5E:8B:2C:F2:E5:79:CE:69:AB:38:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:16:3c:23:49:b4:b7:57:76:52:3a:0a:3f:8e:a4:df:bf:29:
33:26:36:f2:eb:3b:91:36:2a:eb:f3:91:7c:79:80:ce:84:37:
43:fc:79:39:ea:61:0b:00:85:4f:49:af:c0:f7:5a:93:1e:a4:
18:f7:99:ec:cb:dd:8a:47:d8:e1:ce:6d:6f:01:cb:80:06:bb:
69:17:29:33:61:23:60:91:7c:20:50:7c:53:4d:ac:28:8a:40:
26:55:94:4b:d4:88:5b:59:5f:a3:ea:08:b6:7a:5b:29:fe:1a:
6b:d1:49:2f:c1:f9:b6:fe:06:81:fe:fb:1d:c4:51:0e:63:e2:
4a:39:ad:d6:30:7f:18:23:49:d9:bb:bc:49:2d:45:e5:58:ae:
19:b3:d0:eb:e8:e9:f1:00:20:3d:b6:c8:66:a2:2d:1a:0f:b1:
28:51:81:f9:49:21:ef:e7:27:be:65:92:0a:18:e7:7e:30:e8:
5f:05:4d:d5:80:ec:41:a6:f1:bc:51:83:5a:00:0b:19:60:b0:
5f:78:28:1f:09:aa:a0:c6:39:3e:60:6f:80:da:33:44:f9:25:
fa:70:ad:09:df:26:dc:87:ae:c2:f6:69:ea:f0:e7:a9:0f:4d:
db:9f:ca:8d:64:51:0c:3d:ac:7a:7a:b2:28:59:40:37:60:6c:
f7:c4:9e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:00:37 2026 by rpki-client