Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
File: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft (raw, json)
Hash identifier: ERulV2yZDD63w1zUBFHvmiGPLspCXvEOZWDsTkzrxxk=
Subject key identifier: EF:AE:D0:18:7E:51:0A:6C:3D:ED:F9:EC:F5:DF:86:64:45:58:1A:6D
Authority key identifier: 3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
Certificate issuer: /CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Certificate serial: 01A19D6B701CF4A805A6FFFDEB8A0EF4B750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
Manifest number: 1472
Signing time: Mon 02 Nov 2026 18:00:26 +0000
Manifest this update: Mon 02 Nov 2026 18:00:26 +0000
Manifest next update: Tue 03 Nov 2026 18:00:26 +0000
Files and hashes: 1: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl (hash: oeT8TQJePWY/VZ84GXHiBn0nwyOTAzwSchjxz1toCS0=)
2: Rc1JKlzBWJzMspxz5Sz8_wKGjSQ.roa (hash: YXV2SDD7Lq/HvpspFTkxAD7KLYHXbsXZfXUiY1m7rzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 14:59:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9d:6b:70:1c:f4:a8:05:a6:ff:fd:eb:8a:0e:f4:b7:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Validity
Not Before: Nov 2 18:00:26 2026 GMT
Not After : Nov 3 18:00:26 2026 GMT
Subject: CN=efaed0187e510a6c3dedf9ecf5df866445581a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5d:70:0a:df:b2:af:f2:f7:d1:20:1e:7b:1a:
5b:98:95:fc:41:a5:c3:a7:41:cd:96:2b:4c:9b:74:
a8:13:c3:c8:99:78:2b:59:40:86:cd:19:7f:63:ee:
44:e7:24:ac:ea:48:33:ad:26:cc:6c:8d:a3:53:f3:
e2:3a:f0:b2:51:2a:dc:b1:f6:75:fd:4f:5d:40:75:
c2:3c:ac:dd:07:d3:a2:20:57:77:6b:1a:90:b4:4d:
3b:41:13:fa:39:9e:a4:1e:fe:d9:b3:31:c4:54:1a:
12:c5:e0:52:2c:48:80:94:34:0d:e9:06:6c:9d:31:
b8:83:aa:94:44:a7:01:17:58:56:30:e2:1b:3a:49:
ba:79:5b:12:7c:b7:f6:6b:55:14:91:88:1e:c2:ae:
5b:ed:6b:e9:a6:3c:29:67:25:2e:15:e2:c0:cf:43:
e9:ab:be:bf:55:1f:fe:35:ba:81:b6:09:f8:3e:6c:
45:19:00:e7:01:f3:0e:68:ba:0a:fb:13:50:ce:f5:
ec:b6:88:a5:a3:c4:c4:09:45:82:d3:97:e8:50:20:
c3:01:0d:de:2b:47:5e:8a:de:c9:21:f5:0c:e9:7d:
6a:6e:4c:71:40:3e:3f:51:15:6a:1d:e1:d1:9b:b8:
ae:7e:3c:d8:f8:0f:a8:b7:05:0d:58:c3:62:9a:10:
7d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AE:D0:18:7E:51:0A:6C:3D:ED:F9:EC:F5:DF:86:64:45:58:1A:6D
X509v3 Authority Key Identifier:
keyid:3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:bd:ed:64:45:e0:86:82:e5:b5:2d:5d:30:76:48:e6:c1:40:
8e:04:5a:6e:c6:48:4f:15:22:40:e1:12:f5:02:2c:16:8b:bc:
cd:bd:48:39:05:56:40:1f:19:0d:4b:dc:da:9b:08:59:3a:65:
7c:f4:9f:1a:38:e8:b0:08:bd:3b:54:86:ee:c0:09:b0:3a:4f:
b8:ac:28:4b:df:10:30:1e:1d:34:f9:79:4b:70:36:aa:37:14:
c9:8b:09:ea:4d:1d:b8:d7:0f:94:eb:6e:6c:2a:96:94:7e:f2:
ed:0d:35:3b:fe:5d:49:56:2d:3a:c4:36:34:4f:6e:82:18:23:
9e:ba:1c:76:c3:49:41:80:2f:a5:5d:8f:b0:cb:3f:ce:13:8c:
59:c4:0f:d5:b8:f0:96:34:78:e6:f5:c1:2b:06:a8:b6:04:61:
94:91:09:d8:44:93:27:49:ed:71:4b:30:fa:24:87:be:97:c8:
dd:53:16:c8:24:ce:1b:dc:33:fb:7e:f5:6d:55:a8:15:f0:50:
b7:0f:0c:fa:6b:57:b4:35:58:f8:87:f6:8c:cd:ac:82:60:9a:
2e:25:ef:35:7e:58:9a:d9:d1:66:89:8d:06:0e:24:43:6b:d0:
82:2a:e5:cc:90:ae:fe:8a:28:ba:1f:56:5a:8c:c0:95:13:3c:
f8:dd:28:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 21:57:19 2026 by rpki-client