Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
File: P5YkCZj85BJMPLTfusuw7RYYQFo.mft (raw, json)
Hash identifier: robu+E1K2/FxhQVGPDDfjgXNwGh6CpPqXWIIJnfhiqk=
Subject key identifier: 8D:51:F2:87:27:7F:2A:45:A4:07:54:72:D9:D5:73:C3:D9:D0:45:C5
Authority key identifier: 3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
Certificate issuer: /CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
Certificate serial: 019CA945EFEE4BBDA16D507700B1EACFD348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 12:00:58 +0000
Manifest this update: Sun 01 Mar 2026 12:00:58 +0000
Manifest next update: Mon 02 Mar 2026 12:00:58 +0000
Files and hashes: 1: 8ncEIlz1-5zSR1QhL0rDdEkpqI4.roa (hash: nuQfSOfvY6zkx/iP7wr0MpQfCSukhDWy8/9CULyV7C4=)
2: IvA9B2nFsUB8N2tSxI1Z1owm5SY.asa (hash: Luu+iEJI9TF5mINkPbC0AuUUy8TwF281MV1BlQU5AFk=)
3: MhAe01ZmLmGIo1FB00FAZblkwBo.asa (hash: aUcLI++76yd3mnnAy6xNFCz8PJWqoY+FNcByDh9aH0o=)
4: P5YkCZj85BJMPLTfusuw7RYYQFo.crl (hash: jVkF8Ijsu6AbEH4hj1UoPZwEWCz8IskTjeMov4GCJbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:ef:ee:4b:bd:a1:6d:50:77:00:b1:ea:cf:d3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
Validity
Not Before: Mar 1 12:00:58 2026 GMT
Not After : Mar 2 12:00:58 2026 GMT
Subject: CN=8d51f287277f2a45a4075472d9d573c3d9d045c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ef:f7:28:4f:66:2e:ac:dd:56:9f:8f:4f:62:
9f:83:5c:42:75:0e:5e:43:4e:dd:20:bd:74:58:bf:
a1:62:fc:71:4a:32:a7:2d:34:57:f9:01:dd:cf:08:
c3:26:fd:e6:5e:cc:67:af:53:e6:ad:1c:6e:d9:6b:
71:f2:1f:3c:8a:a1:04:b1:4b:1f:8d:9b:38:97:cc:
ce:0e:a4:0b:b2:f4:45:0f:6d:c2:be:0a:c9:9f:38:
b7:44:8e:32:de:b0:74:8a:d3:5c:56:7f:d9:af:75:
34:1d:6e:41:9e:d8:c6:21:9b:f6:88:cf:ca:70:62:
56:38:a6:d3:44:2e:e0:0e:f5:1d:37:c3:a4:38:69:
18:05:b7:63:56:61:24:ef:f4:54:0c:ce:d4:4a:17:
be:f8:03:5c:32:2e:95:e3:ea:fa:90:7e:7e:92:3a:
f4:d7:1b:b4:01:3f:3e:e3:3c:ae:37:fc:af:f6:9b:
b1:57:69:5e:9d:fb:b6:54:2a:3c:ba:aa:c9:c6:f4:
e2:46:03:18:80:98:c7:3f:c9:ff:32:48:2f:e2:3c:
54:f9:7d:54:a2:10:3c:8b:bd:ce:74:88:74:a9:94:
94:31:84:85:77:95:78:f0:7c:c5:dd:8b:b3:d6:c7:
5e:94:c1:f3:da:8f:0c:a7:b0:84:66:98:00:b1:f9:
5e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:51:F2:87:27:7F:2A:45:A4:07:54:72:D9:D5:73:C3:D9:D0:45:C5
X509v3 Authority Key Identifier:
keyid:3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a9:58:87:e2:fb:ce:9d:f2:af:31:d0:75:e0:e6:00:ea:a0:
49:9b:5e:75:af:1c:1d:d6:97:a0:9c:69:f7:30:c8:dc:24:b4:
c7:2a:3a:38:77:03:2c:6e:01:35:e3:6c:92:6e:7e:b8:ae:e7:
89:7f:cb:b9:b4:06:34:17:0b:c5:54:de:d9:57:d8:86:b4:63:
6d:b6:a1:22:4a:fe:cb:3c:84:24:88:a4:c1:78:ad:1f:50:09:
68:a6:23:73:b7:aa:60:2d:74:e3:a7:97:3a:fb:83:2a:14:9e:
e1:76:a0:07:3c:b1:1f:24:e0:00:06:9a:34:ff:ca:b7:47:45:
22:0e:b9:c8:eb:fe:64:8c:93:c9:68:25:86:ac:84:14:46:c3:
af:cb:eb:53:89:0c:81:25:2d:5c:1d:33:a3:00:a2:14:35:c9:
68:a8:e7:5d:a2:43:8e:5e:79:39:fe:80:6c:af:79:0c:8b:e2:
2f:54:22:84:53:75:aa:fe:16:cf:98:39:b8:e7:ba:cc:34:18:
1e:4a:8d:be:f8:9c:d0:4c:9b:94:67:7f:3e:23:ce:0c:71:69:
70:e0:ad:db:c5:00:84:b7:d1:6a:66:c7:3a:a3:67:c8:1c:7b:
a8:f3:03:cf:95:1c:d1:30:bd:09:37:ec:46:ab:6c:25:73:a2:
81:56:3e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:44:39 2026 by rpki-client