Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
File: PFaMWdeoMZnDp56g6DdblG7YhOI.mft (raw, json)
Hash identifier: 8RpKbKGYAjaQRTWeW3dk/esHnbEmPeujF1RFhvLItTA=
Subject key identifier: 4B:CF:FA:CE:46:C9:10:BF:61:DD:D7:5E:BB:5E:BA:5A:50:5C:B5:99
Authority key identifier: 3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
Certificate issuer: /CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Certificate serial: 019D98BDA6EA5A369CE8A222375BF1FCE9B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 00:00:58 +0000
Manifest this update: Fri 17 Apr 2026 00:00:58 +0000
Manifest next update: Sat 18 Apr 2026 00:00:58 +0000
Files and hashes: 1: 0ZH3kxew36RRFzQg_mo4-7q2H4U.roa (hash: k3MKGbvdmLnbLs9zehodMhvSl8HPr3KY+BJ978CUfo8=)
2: AydP7XNvWxhhDMLSuOqc0Oa5dE0.roa (hash: jUVgcjRvFoEADtpRITq72Z8KeRsnl4848PEL4Me2SIw=)
3: PFaMWdeoMZnDp56g6DdblG7YhOI.crl (hash: ni0/vAZMWqsveSZiJE0DsXyd6HyEZpp/uknT8frVegY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:a6:ea:5a:36:9c:e8:a2:22:37:5b:f1:fc:e9:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Validity
Not Before: Apr 17 00:00:58 2026 GMT
Not After : Apr 18 00:00:58 2026 GMT
Subject: CN=4bcfface46c910bf61ddd75ebb5eba5a505cb599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:58:81:94:47:02:7e:09:f9:12:ee:03:8d:fb:
be:bb:2d:f6:35:2d:a3:48:9b:6a:16:24:bc:fb:59:
60:c1:ec:2c:a8:97:79:d4:7a:5c:25:b2:de:ac:ee:
10:ec:09:ec:51:c6:b4:f8:dd:61:11:43:f4:95:99:
13:5f:c8:74:6e:dd:39:68:89:7f:4f:5d:49:17:97:
ee:3b:d1:69:b3:00:9d:d1:71:e2:cd:9e:13:ed:30:
cf:d6:48:a6:20:c4:fd:91:bf:70:7a:f3:f4:11:e1:
9a:fd:c7:a4:c6:ff:34:28:a1:db:2f:c1:92:7b:6a:
95:f2:cb:03:32:62:56:1e:50:92:18:9e:0f:82:72:
6f:98:31:77:0a:8f:ff:0a:cf:4b:bf:64:4b:37:e9:
d2:92:82:8e:2f:ec:5e:f5:d0:95:db:92:9d:aa:9d:
08:74:05:6a:98:f5:1b:f3:10:b4:e4:f7:a9:4b:22:
f4:43:9a:b5:24:50:20:ac:5f:c3:12:5c:dc:59:53:
96:26:68:1b:75:4e:aa:7c:78:89:dd:73:60:d1:93:
82:ad:07:79:2b:88:80:2a:13:d6:37:6a:f5:64:19:
3c:db:19:94:c0:3c:6d:2e:b5:f3:0f:db:8c:cc:b3:
25:6d:b5:03:0e:a8:52:55:a7:45:c8:62:7b:cb:a5:
3f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CF:FA:CE:46:C9:10:BF:61:DD:D7:5E:BB:5E:BA:5A:50:5C:B5:99
X509v3 Authority Key Identifier:
keyid:3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:34:f1:74:2a:41:48:2e:bd:18:72:7e:4b:79:ed:ef:86:ef:
aa:de:64:e4:65:34:5b:05:fb:b9:16:63:d2:5e:4e:90:0b:90:
84:d3:4e:30:32:7a:83:0d:5d:6d:a3:77:19:d3:39:5f:2c:e9:
94:bc:e6:38:34:2a:74:f4:2d:d2:94:43:45:32:50:09:95:67:
cf:7e:91:9c:81:bb:50:3b:2b:06:5d:79:8f:6d:6f:df:b3:6b:
ea:c3:9c:9e:24:ad:59:77:39:8f:61:69:a9:b9:53:00:f5:7f:
b3:2e:f6:61:ab:b2:90:17:e1:ab:38:06:8c:73:28:88:8d:f0:
d9:56:be:e4:a9:ea:b5:22:57:d8:a5:db:a7:41:c1:1f:8e:0d:
c8:44:27:c1:ed:98:35:21:95:29:b2:07:d7:54:9a:9b:43:cc:
03:44:ff:7b:4a:bf:b3:f9:c1:68:b9:cb:03:0f:3c:e6:e3:3f:
d7:6f:a4:18:6f:25:45:be:71:45:5e:09:bb:0c:22:d9:30:ec:
0c:5f:ff:69:42:e9:84:c1:df:98:e4:f1:ea:97:26:b6:4f:ed:
cb:42:3c:28:77:fc:f1:b9:d7:fb:1c:04:a8:85:5c:ee:0a:10:
21:0a:c0:a8:18:84:7c:b6:ff:c0:14:1b:00:ac:2d:3b:13:33:
af:aa:4a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:40:27 2026 by rpki-client