Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
File: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft (raw, json)
Hash identifier: CHG7pUPm/24qU4Epchhi75aDj+WtHbn8P6k2CQgH9Ok=
Subject key identifier: C8:1B:F7:30:D4:D5:52:A1:92:FF:D8:21:37:EB:D8:DD:84:39:32:B5
Authority key identifier: 3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
Certificate issuer: /CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Certificate serial: 019D378994F31045A1C5F9C5CC9C41DF46C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
Manifest number: 122B
Signing time: Sun 29 Mar 2026 03:00:56 +0000
Manifest this update: Sun 29 Mar 2026 03:00:56 +0000
Manifest next update: Mon 30 Mar 2026 03:00:56 +0000
Files and hashes: 1: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl (hash: MBHxdWgf3oDYFoXmosPXSOrDHhLfWlpQX2KKBrFQ57Y=)
2: Rc1JKlzBWJzMspxz5Sz8_wKGjSQ.roa (hash: YXV2SDD7Lq/HvpspFTkxAD7KLYHXbsXZfXUiY1m7rzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:94:f3:10:45:a1:c5:f9:c5:cc:9c:41:df:46:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Validity
Not Before: Mar 29 03:00:56 2026 GMT
Not After : Mar 30 03:00:56 2026 GMT
Subject: CN=c81bf730d4d552a192ffd82137ebd8dd843932b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8e:0e:92:39:b1:af:e2:82:ce:4c:74:95:66:
43:23:6b:e0:82:86:b9:1d:b0:c2:03:ef:78:9e:70:
83:d7:e4:54:11:bd:b5:48:57:01:1f:96:b5:dd:f2:
ae:5e:08:d1:ce:99:d3:21:be:24:99:4f:57:a6:49:
b1:fa:75:ec:98:2f:df:f1:66:a4:cf:13:c9:ba:5c:
88:22:8a:54:94:94:f2:c7:06:43:d1:6c:4c:35:ab:
f2:4c:45:1c:48:12:1b:66:07:cb:3e:20:33:7a:39:
26:da:9e:32:3a:c1:eb:36:71:5a:91:89:55:19:6b:
cd:b4:d8:71:86:f9:38:cc:e6:63:24:dc:3b:47:a3:
29:9b:6d:dc:c4:ab:27:8d:6b:78:5f:49:42:8d:7e:
42:7b:b0:75:c1:a2:cf:bf:f6:a7:6a:82:1e:4b:f6:
dd:40:d2:99:86:da:76:ad:17:9d:7b:b7:98:00:a2:
2f:c0:cd:4a:ed:54:48:18:38:57:b6:b8:57:5a:96:
66:3b:f8:e2:4e:71:c6:aa:f8:8f:2e:a8:68:83:f9:
83:91:85:4c:58:33:54:2b:d6:e3:f3:aa:5d:e2:c0:
be:ad:db:f6:f2:c5:6f:9c:ce:51:55:54:cf:88:2f:
36:7c:31:a7:1f:07:36:4f:b2:5c:0f:67:8e:47:06:
ce:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1B:F7:30:D4:D5:52:A1:92:FF:D8:21:37:EB:D8:DD:84:39:32:B5
X509v3 Authority Key Identifier:
keyid:3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:00:69:a4:10:ea:51:bd:93:d8:f2:45:db:64:8d:6a:42:52:
7c:b8:12:fd:13:90:d0:13:d0:63:c3:f2:9b:be:99:6c:26:d4:
4c:18:34:fe:36:a3:35:e3:4f:50:e2:dd:67:35:ee:51:e9:e6:
cc:5e:91:63:2e:99:09:10:38:32:ba:ee:8a:fa:17:49:33:77:
a7:44:24:a0:be:b2:a8:fa:3a:8c:a7:31:e4:83:39:f4:b7:9a:
17:cf:09:62:36:1f:d0:4c:1a:1f:dd:a5:45:ec:6f:47:96:d9:
73:e1:40:4b:56:dc:94:db:6d:03:3a:dd:c7:f9:ad:6a:7a:c4:
e6:36:10:e3:0f:e2:28:31:f8:c1:e3:fb:60:2e:00:47:d6:78:
af:a1:4b:07:b8:cc:f6:af:90:bb:9d:31:9f:c7:51:91:f7:f8:
7e:aa:dc:0d:3b:e4:5c:1b:b2:d5:32:3a:fd:17:ff:0d:a9:7d:
68:4e:95:ad:73:2d:72:66:a7:c1:0a:db:d3:ae:cf:11:4e:16:
f7:93:b4:4d:01:fb:81:f4:6d:4c:ed:57:c4:16:9c:0b:c6:67:
e0:39:23:a3:64:9f:8f:f4:f0:02:32:2b:d0:36:98:47:c1:24:
91:2f:d2:f8:18:2c:b9:63:2f:7a:6e:28:a0:22:d8:b5:6b:b5:
c3:4d:fb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:26 2026 by rpki-client