Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
File: P3cnpBMI2bn25j3xsg6LnNgjgSA.mft (raw, json)
Hash identifier: a5uX/+u2Qs1gFXQ0e7rWz01fWgPdY+pg5O/y3pcaTXE=
Subject key identifier: EE:23:87:AF:D9:7D:7B:9E:27:6D:16:14:12:40:44:B9:DD:31:84:83
Authority key identifier: 3F:77:27:A4:13:08:D9:B9:F6:E6:3D:F1:B2:0E:8B:9C:D8:23:81:20
Certificate issuer: /CN=3f7727a41308d9b9f6e63df1b20e8b9cd8238120
Certificate serial: 019D9B51154AC0F7ECF43282A467BAF70D58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
Manifest number: 09B9
Signing time: Fri 17 Apr 2026 12:01:15 +0000
Manifest this update: Fri 17 Apr 2026 12:01:15 +0000
Manifest next update: Sat 18 Apr 2026 12:01:15 +0000
Files and hashes: 1: P3cnpBMI2bn25j3xsg6LnNgjgSA.crl (hash: TZ3Y/za84d/dXr2DpNVwNZP72j01s+5DXojN+IwMiCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:15:4a:c0:f7:ec:f4:32:82:a4:67:ba:f7:0d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f7727a41308d9b9f6e63df1b20e8b9cd8238120
Validity
Not Before: Apr 17 12:01:15 2026 GMT
Not After : Apr 18 12:01:15 2026 GMT
Subject: CN=ee2387afd97d7b9e276d1614124044b9dd318483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:15:84:38:7a:33:7c:18:64:f7:e4:9b:50:8d:
65:cd:89:64:15:28:14:61:2e:7c:09:45:4a:bf:5e:
13:f5:36:ff:80:c5:34:80:5f:e8:dc:87:20:84:d5:
85:53:2c:60:47:7a:6a:24:4d:16:57:24:a9:1e:28:
94:dd:2b:2d:bd:ae:b6:98:c9:19:3c:79:c2:81:91:
d0:97:60:c4:19:20:df:16:a2:82:14:3a:fd:ca:38:
fb:79:cd:66:76:e6:f1:66:96:3b:2e:41:a5:74:0f:
52:ed:78:0f:2c:e3:d9:e9:b4:b2:67:af:21:b2:ee:
86:44:25:0b:db:08:e4:f1:2a:e6:ff:f2:6a:c3:52:
98:3e:50:99:bc:7e:18:2a:d9:cb:fa:18:74:a9:63:
12:b7:7c:32:2e:f5:87:96:b9:16:c7:dc:a8:99:2d:
50:01:89:79:4f:1c:0a:c1:99:49:6c:1e:92:64:2c:
67:42:ed:3c:51:b8:82:53:97:c1:27:5f:04:75:47:
ec:6d:5f:5c:81:dc:04:c3:65:ef:36:b4:15:89:d6:
92:02:99:10:ff:ac:f6:4e:22:5e:e7:26:02:46:20:
15:33:e8:87:f9:6a:d8:83:73:3c:25:f6:bc:63:4e:
14:09:31:79:fc:ca:36:2b:fc:c8:c5:a2:3d:1a:7a:
a3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:23:87:AF:D9:7D:7B:9E:27:6D:16:14:12:40:44:B9:DD:31:84:83
X509v3 Authority Key Identifier:
keyid:3F:77:27:A4:13:08:D9:B9:F6:E6:3D:F1:B2:0E:8B:9C:D8:23:81:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:42:7c:1a:3f:b0:56:ff:ee:46:90:6d:41:0a:f9:fb:5f:b3:
db:12:f8:97:e1:89:9d:9b:85:ad:76:62:13:2a:42:15:c7:ae:
02:f5:a8:73:ed:a5:e6:97:43:b7:6d:db:53:7a:62:ad:08:05:
10:7e:38:52:1b:0f:f0:ee:96:cc:b8:ad:50:f6:cc:a2:6f:2e:
67:2c:8a:9b:0c:60:90:e4:55:20:e3:26:2d:af:dc:79:43:7f:
31:2b:82:78:71:70:f7:14:3d:2d:34:8a:5e:29:8d:be:6a:24:
7b:d9:85:cb:c9:3e:e5:f2:ef:3d:ed:91:22:46:7a:e8:7a:6a:
96:44:a9:59:cf:f1:04:79:85:e0:87:da:f7:16:3b:9a:40:fe:
6e:f1:65:74:11:7a:ba:91:4e:18:dc:ac:97:5b:37:3c:4b:e5:
3a:a8:00:13:89:79:e1:9b:e7:0a:ef:0d:8e:57:6c:35:fb:df:
18:0f:5a:ab:14:42:9b:0e:5c:33:5f:f4:07:ef:ec:e5:17:aa:
41:8d:86:9c:fb:41:3c:0f:11:5b:a4:8d:77:00:9f:a3:6f:27:
d4:74:b1:21:0f:24:0b:2e:2e:d8:d2:74:5d:62:0a:f1:ac:d9:
5b:18:88:97:6b:8b:26:63:e7:f2:db:31:c7:be:f7:2e:56:eb:
31:a6:d7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:34:36 2026 by rpki-client