Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
File: PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft (raw, json)
Hash identifier: JUEsTufXDWXUy4c2YYZS8L4Mw7MENmp/JgrKNVMkWuo=
Subject key identifier: 25:79:6E:67:C9:52:65:5F:E8:9B:83:41:FD:DB:A1:F1:92:6A:B6:FF
Authority key identifier: 3E:D2:39:45:FF:75:61:EE:99:D2:E2:78:E7:38:8D:04:5F:AD:D3:14
Certificate issuer: /CN=3ed23945ff7561ee99d2e278e7388d045fadd314
Certificate serial: 019CAAC70146D1092C84CC49E39D662E206A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
Manifest number: 0D4B
Signing time: Sun 01 Mar 2026 19:01:34 +0000
Manifest this update: Sun 01 Mar 2026 19:01:34 +0000
Manifest next update: Mon 02 Mar 2026 19:01:34 +0000
Files and hashes: 1: 49PmNqo2ozi6foyeWngY9-dP7_8.roa (hash: FTUCcOfecgfUHEaYOHAMv32E85Y9HshWNlhJWT3H1nQ=)
2: PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl (hash: CP+Z1DqPrrxiuYtUiCo7ACuzSM1eMb+Sm8a8T1vRHlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:01:46:d1:09:2c:84:cc:49:e3:9d:66:2e:20:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ed23945ff7561ee99d2e278e7388d045fadd314
Validity
Not Before: Mar 1 19:01:34 2026 GMT
Not After : Mar 2 19:01:34 2026 GMT
Subject: CN=25796e67c952655fe89b8341fddba1f1926ab6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:90:e3:23:74:39:04:aa:3b:59:14:ba:0b:73:
40:3b:ed:3a:b1:af:b9:e2:0d:dc:cf:3e:a9:36:3c:
75:00:51:59:06:5d:d2:a6:71:84:c8:2c:8f:f2:c7:
a3:67:10:a2:13:8b:f3:42:4b:86:70:19:54:a0:ac:
e5:ec:cd:c8:40:86:0c:fa:55:42:40:96:93:62:27:
38:5b:6a:a7:86:da:8d:02:2a:5f:c3:f8:fe:2f:03:
67:3a:f2:be:b9:dd:d4:1a:8c:2e:06:df:28:75:3e:
41:38:20:20:38:eb:68:cc:0f:74:0e:6a:4b:df:70:
69:75:76:cc:55:e6:b3:cb:50:49:5a:7d:3d:3c:57:
85:3f:63:83:7c:fa:06:04:14:ce:62:34:b1:b4:bf:
42:0e:06:ca:82:7d:13:15:4d:d7:bf:c3:f7:94:c2:
4d:33:f5:4e:5a:17:e7:47:3a:67:9c:f3:98:06:c5:
14:08:59:35:84:bc:06:ec:16:47:9f:bd:15:9b:6f:
1e:b6:b6:aa:d7:33:34:ea:89:46:12:17:db:3c:6f:
71:04:10:dc:d5:27:84:34:af:58:78:9d:34:70:4d:
65:e0:d3:ef:d9:e6:93:77:7c:07:0f:03:d1:c9:9b:
7f:8a:35:37:d2:cf:8c:63:98:ea:dd:b3:86:e8:b3:
f9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:79:6E:67:C9:52:65:5F:E8:9B:83:41:FD:DB:A1:F1:92:6A:B6:FF
X509v3 Authority Key Identifier:
keyid:3E:D2:39:45:FF:75:61:EE:99:D2:E2:78:E7:38:8D:04:5F:AD:D3:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:a0:7f:4e:e0:4a:e0:63:2b:d2:e0:71:8e:aa:30:67:d0:66:
7c:21:e9:62:d5:57:d8:6f:b3:6d:62:a2:a5:f2:43:d8:72:9a:
0c:51:3a:b9:41:12:3a:20:2e:b8:f1:cf:3b:5a:b7:e4:e6:cd:
f5:11:8d:33:a6:8b:e5:f3:4a:a8:6f:50:8e:dd:87:8e:a2:16:
48:45:3e:4d:8d:a7:85:ec:4d:cf:89:c0:71:31:59:f2:88:fb:
21:aa:76:e1:e4:bc:d2:02:1f:1f:52:98:0a:87:de:e3:5c:48:
8f:6c:94:14:c9:18:56:93:5f:40:e6:39:1b:cc:be:bf:75:d2:
1b:00:0e:f6:24:f4:f3:53:85:da:c3:15:1b:60:4e:d2:ea:c3:
9f:08:55:0a:c9:85:30:0a:e3:20:bf:85:f8:15:7d:c4:8d:d4:
db:92:1e:db:29:6d:9d:00:13:53:e2:cb:96:bf:4f:04:82:15:
4e:87:fa:23:19:60:d6:b6:36:28:da:4e:bf:b6:33:4b:27:d8:
9e:98:dc:af:b5:f3:15:80:90:c8:7c:05:db:8b:1b:6d:de:db:
13:07:58:61:d8:a2:f2:67:4c:e3:7c:ef:b7:ce:4d:ff:1e:1e:
67:68:09:02:07:b5:9d:9f:5d:cf:ff:91:8d:f3:49:69:7c:80:
26:4d:89:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:27:57 2026 by rpki-client