Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
File: PFaMWdeoMZnDp56g6DdblG7YhOI.mft (raw, json)
Hash identifier: QOQEU5W/neesd2w8EuQeenCmTEO7IaXvSMcLMwPH3ds=
Subject key identifier: E3:E3:48:3E:21:EA:79:49:F6:FD:DD:95:AE:1D:C4:22:B0:1C:7F:78
Authority key identifier: 3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
Certificate issuer: /CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Certificate serial: 019CAB34784AAAE9209B48E0CAF4E59F75BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 21:01:08 +0000
Manifest this update: Sun 01 Mar 2026 21:01:08 +0000
Manifest next update: Mon 02 Mar 2026 21:01:08 +0000
Files and hashes: 1: 0ZH3kxew36RRFzQg_mo4-7q2H4U.roa (hash: k3MKGbvdmLnbLs9zehodMhvSl8HPr3KY+BJ978CUfo8=)
2: AydP7XNvWxhhDMLSuOqc0Oa5dE0.roa (hash: jUVgcjRvFoEADtpRITq72Z8KeRsnl4848PEL4Me2SIw=)
3: PFaMWdeoMZnDp56g6DdblG7YhOI.crl (hash: DDb8MhELVYNLx736ZXzdDS1Ixr6hefSsuSEIZe3JOOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:78:4a:aa:e9:20:9b:48:e0:ca:f4:e5:9f:75:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Validity
Not Before: Mar 1 21:01:08 2026 GMT
Not After : Mar 2 21:01:08 2026 GMT
Subject: CN=e3e3483e21ea7949f6fddd95ae1dc422b01c7f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5c:ec:8d:27:e6:ed:3c:d0:63:63:d2:f0:ac:
1f:a2:cc:c9:96:4c:e5:46:cc:64:f2:bd:43:53:fa:
e0:31:dc:fb:07:84:a0:43:ba:2f:06:e7:36:75:39:
c4:8a:1c:e9:78:12:47:82:72:6b:4b:6f:27:16:75:
d8:84:ca:af:4b:15:5d:a1:82:7c:bf:ed:65:41:21:
b6:88:35:56:37:85:ca:a5:85:83:85:03:9b:a6:82:
3e:3c:79:ef:cb:cc:86:01:b2:1f:10:5a:80:54:a3:
23:c4:9e:f0:a1:78:ea:eb:25:9b:cf:d6:68:63:5d:
3a:27:2d:b4:e9:df:59:42:59:66:d1:27:ee:f1:3e:
0c:d4:52:d3:19:ff:68:26:1f:5e:6c:ee:b0:7d:ed:
79:88:cf:be:8c:ba:02:e6:95:da:ce:6a:09:0a:c4:
ee:d8:f9:dc:80:af:af:d5:e3:39:05:e1:c3:49:2d:
47:91:22:6d:f0:0f:64:e4:4d:b5:f3:36:a7:08:dd:
9f:2b:7a:91:b3:2e:c0:67:0d:b5:08:70:66:e0:03:
5e:66:b6:83:20:64:bb:ef:a5:19:e6:60:6f:bb:2b:
63:cf:46:05:c6:52:f5:c1:1d:86:97:9e:a2:ee:69:
0e:89:4c:fe:4e:1a:5b:74:a1:93:23:43:c5:0b:4b:
97:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E3:48:3E:21:EA:79:49:F6:FD:DD:95:AE:1D:C4:22:B0:1C:7F:78
X509v3 Authority Key Identifier:
keyid:3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b5:92:37:b7:ce:18:4e:99:80:f9:79:98:28:ac:e4:f9:f5:
31:00:bd:0a:20:86:77:8a:1f:5a:19:2a:fc:dd:ac:d7:1d:39:
16:fe:ab:85:3e:87:ca:62:42:84:74:8c:7c:94:de:bc:ab:2d:
27:23:df:5b:9f:a9:a3:84:bd:2f:49:53:01:a1:93:66:26:ac:
6c:18:82:b1:99:45:6d:be:58:30:49:81:4b:76:19:7e:8b:4b:
da:63:35:47:ae:0a:bb:51:f1:1b:45:5d:62:b7:99:20:85:52:
de:e1:7c:28:d9:fb:d0:ea:97:e7:5b:f9:c3:29:75:4a:55:3b:
a0:c0:3e:e2:d4:f6:26:f1:64:25:3c:ee:09:a2:28:4b:75:35:
26:20:d5:c0:47:b4:74:a2:e1:fd:c8:35:14:99:a6:cf:f7:0b:
b2:b3:d4:26:99:8b:9c:92:2a:8a:eb:8f:cc:14:19:e8:6a:3e:
3c:a4:ed:89:4b:00:08:08:f7:e5:34:7e:88:b8:83:41:d8:7e:
75:de:1d:93:5d:90:85:96:45:84:6a:e8:f1:82:de:63:4e:d7:
12:af:80:81:1a:04:62:79:ad:69:97:9d:28:17:25:f5:90:76:
69:52:36:35:87:98:9b:87:f7:89:a3:b9:e6:26:4d:e2:66:d1:
94:9a:7f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:50:39 2026 by rpki-client