Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
File: P3lU2IwK4_Y5hpe_38GVanU-g9g.mft (raw, json)
Hash identifier: ZAAzU7pgSQEdkNJa1mf2kMsV1ggojHuXR/dUsPePQqo=
Subject key identifier: D4:09:C8:C0:B3:30:7B:7E:76:60:FD:D2:C0:A0:DE:7E:E1:31:9E:13
Authority key identifier: 3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
Certificate issuer: /CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Certificate serial: 019CAB6B564C63B4A46587C9F88F08A70027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
Manifest number: 181F
Signing time: Sun 01 Mar 2026 22:01:04 +0000
Manifest this update: Sun 01 Mar 2026 22:01:04 +0000
Manifest next update: Mon 02 Mar 2026 22:01:04 +0000
Files and hashes: 1: P3lU2IwK4_Y5hpe_38GVanU-g9g.crl (hash: /7YcVnarRS3rOdeHezdaNPLLtZANKZp70S5fs/4Ud20=)
2: pPQ_ikZwm714GOEIqdQyxnhiVJE.roa (hash: 4UUAoZKaA2j3VJE7xShuXB30Uh86/B72WrTV35CTOuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:56:4c:63:b4:a4:65:87:c9:f8:8f:08:a7:00:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Validity
Not Before: Mar 1 22:01:04 2026 GMT
Not After : Mar 2 22:01:04 2026 GMT
Subject: CN=d409c8c0b3307b7e7660fdd2c0a0de7ee1319e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:84:b4:3e:78:1f:8b:51:0f:08:16:f2:e9:13:
e2:de:70:3f:4f:b9:3c:5c:f8:83:cd:50:81:80:30:
28:16:be:58:03:72:d0:3f:ca:32:7b:3c:ee:8c:f6:
2f:97:d7:67:ac:51:20:d3:ce:3c:31:17:c6:c6:f2:
43:f7:a0:f8:20:0b:1c:53:38:5b:f2:fb:40:6d:43:
86:9f:5a:09:38:c6:01:cb:93:89:3e:de:49:bf:d8:
ed:d3:e1:f6:11:d1:37:09:06:81:2b:ce:b7:a4:00:
18:c3:66:07:c9:a8:75:50:f1:14:44:65:0b:93:25:
65:48:1e:78:60:da:5a:b0:71:cc:2f:98:74:32:3d:
48:14:29:57:3d:c9:97:ad:db:ed:a5:46:22:e4:07:
a0:4e:c2:5b:71:ec:44:87:f2:b8:4e:89:22:a3:88:
73:63:fd:b8:13:77:b0:1a:96:71:75:85:a9:ad:98:
bd:50:ee:42:f8:e5:a7:1d:4f:40:51:5a:99:21:c8:
26:ce:be:d7:95:fb:36:cf:d6:b9:a7:0f:a4:96:13:
15:01:68:3f:cb:c4:f8:25:f5:84:11:38:52:1d:b0:
13:ff:91:f7:f6:d5:f3:b1:08:1c:8f:41:93:0d:d2:
14:0f:10:e6:46:18:11:61:76:e4:7d:7f:8a:d8:2b:
a1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:09:C8:C0:B3:30:7B:7E:76:60:FD:D2:C0:A0:DE:7E:E1:31:9E:13
X509v3 Authority Key Identifier:
keyid:3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:38:e6:c9:b0:d8:5f:9a:79:66:35:69:53:19:91:7e:76:9e:
2a:87:fc:0d:e4:14:51:42:cc:e7:6b:18:c1:1b:c3:47:79:0c:
a9:a5:0b:6f:4e:db:8e:79:03:c6:78:36:38:42:82:bb:fa:e6:
58:e3:64:9c:e8:4e:09:c6:b2:79:c6:90:0a:02:4b:6f:7b:f5:
c5:40:9d:61:09:d6:13:27:dc:53:a0:46:54:f8:7d:f2:1b:20:
51:35:3f:cd:26:69:6a:5b:fc:2a:d4:90:ba:e3:e3:a4:8d:7d:
8a:5c:d9:0c:1d:16:d3:fd:c1:b5:a7:f2:06:30:61:21:35:05:
51:34:db:58:5f:91:ac:90:60:1d:22:c6:b0:14:42:9b:15:07:
ef:84:92:ac:a6:15:ee:e2:64:c8:6e:1e:7b:87:35:c3:74:70:
2a:c7:11:b3:29:8f:bf:56:df:20:3b:36:61:30:5a:9d:37:7c:
5f:79:08:fd:d5:50:7a:1a:e6:f7:f5:a8:ed:45:35:0f:55:ff:
c7:d6:71:cc:67:9a:29:95:9d:c2:56:67:69:d2:35:db:5e:96:
45:45:34:c3:ec:10:97:f8:44:f9:1b:a9:e1:77:85:8d:b8:fd:
27:32:94:4b:a4:15:19:df:50:bf:c9:31:67:8b:24:7d:80:19:
cd:3b:05:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:41 2026 by rpki-client