Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
File: P3cnpBMI2bn25j3xsg6LnNgjgSA.mft (raw, json)
Hash identifier: qjJ9jcTy7pPkp9Jd16/MKE0VKFB7olL2cWhNeDZrFo8=
Subject key identifier: 70:72:75:86:83:C4:54:87:0A:7C:37:DC:C5:ED:33:76:6D:38:EC:A9
Authority key identifier: 3F:77:27:A4:13:08:D9:B9:F6:E6:3D:F1:B2:0E:8B:9C:D8:23:81:20
Certificate issuer: /CN=3f7727a41308d9b9f6e63df1b20e8b9cd8238120
Certificate serial: 019CABD9B15837BAFC0ADE5A03D0F92F5414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
Manifest number: 093D
Signing time: Mon 02 Mar 2026 00:01:36 +0000
Manifest this update: Mon 02 Mar 2026 00:01:36 +0000
Manifest next update: Tue 03 Mar 2026 00:01:36 +0000
Files and hashes: 1: P3cnpBMI2bn25j3xsg6LnNgjgSA.crl (hash: ycfRwvYvEbn+67AkosK8kYkM/akvJsXIHfmBHYEnSHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:b1:58:37:ba:fc:0a:de:5a:03:d0:f9:2f:54:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f7727a41308d9b9f6e63df1b20e8b9cd8238120
Validity
Not Before: Mar 2 00:01:36 2026 GMT
Not After : Mar 3 00:01:36 2026 GMT
Subject: CN=7072758683c454870a7c37dcc5ed33766d38eca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8b:ef:47:36:07:39:f0:91:f7:b6:5b:04:1f:
f9:06:c0:16:15:b4:e1:a3:00:93:1b:a8:f3:d3:a8:
8c:61:be:4c:c5:6a:90:1f:d1:63:c9:e8:95:95:d4:
9a:1d:b5:81:f4:48:42:42:1d:f2:07:9b:7b:96:c3:
99:24:ae:1b:36:36:86:43:ef:cc:53:bc:9e:09:b5:
86:0e:75:87:eb:23:4e:fd:b3:ab:0f:2e:94:65:bd:
a1:ae:48:60:5f:e2:76:8e:f4:3e:70:8d:ca:33:56:
dd:ef:01:a6:f7:33:3b:74:89:14:06:24:93:28:ae:
ab:b4:bc:e7:fe:d4:15:51:5f:45:fe:d5:88:fa:39:
82:7b:05:04:aa:38:7a:e8:00:b0:50:63:0a:4c:62:
21:6e:02:5a:b4:9c:c3:7c:50:07:d0:5a:32:be:ef:
8e:dc:04:55:5e:bb:9b:f2:6e:71:7e:67:6c:50:74:
07:d4:37:c0:d3:82:5b:57:60:90:03:85:ca:4b:f8:
9e:92:36:24:55:c1:5c:00:1a:4a:52:6c:88:3c:41:
7f:70:3b:ab:c0:69:65:96:35:e4:01:90:6e:10:1a:
ff:ae:95:a7:b0:b4:6c:21:4b:5e:09:fe:b6:b9:70:
03:b9:6c:fd:21:b4:c3:44:4a:93:01:1f:86:24:77:
9a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:72:75:86:83:C4:54:87:0A:7C:37:DC:C5:ED:33:76:6D:38:EC:A9
X509v3 Authority Key Identifier:
keyid:3F:77:27:A4:13:08:D9:B9:F6:E6:3D:F1:B2:0E:8B:9C:D8:23:81:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a7:ff:e9:74:5a:0a:b9:6d:d2:b9:60:97:bf:6a:88:dd:4f:
ba:ee:0a:9b:26:8a:60:4f:33:06:57:74:2f:cf:94:0b:d2:ae:
6e:1e:c8:a4:35:c5:12:b5:90:c3:b9:39:51:39:6b:25:8e:17:
8c:bf:b3:4f:78:49:d9:cb:8a:64:94:3c:2d:d9:17:46:60:48:
33:ef:80:ea:fc:3d:19:53:3c:83:d4:49:30:7e:94:c8:e8:7e:
ee:a0:10:be:a4:5c:cb:1e:8b:1e:3f:8a:b6:22:4e:6d:2c:b0:
9d:5e:6a:d3:33:4c:3e:12:6a:62:20:f5:9e:03:44:66:d2:18:
53:ce:d1:89:6d:19:07:2d:e9:1d:0a:7e:0a:c1:91:2e:93:22:
55:78:d1:b4:5f:6c:fd:76:d7:f9:b1:a6:61:24:58:15:d1:fe:
58:67:92:88:9e:51:99:25:e9:1e:f2:ab:ca:bf:8e:30:69:6b:
2f:88:dd:a5:82:c2:c7:f2:f7:84:c4:a4:e3:26:5d:3a:73:df:
98:7f:e5:90:4d:92:8f:f9:8c:da:08:15:ed:3c:ee:1a:0c:bf:
62:d7:4a:08:ac:a9:0d:71:44:fc:7e:44:d9:5b:5e:a8:96:f1:
23:d9:3a:d7:58:bb:a4:da:18:df:2c:9e:b6:ad:3d:d5:fc:da:
c8:93:43:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:13:35 2026 by rpki-client