Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
File: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft (raw, json)
Hash identifier: pAO00sQL1ayR0B+TUmHiPJVBUhuOblE9ndQXzNXKysg=
Subject key identifier: C4:89:45:88:AC:DA:19:07:FD:C0:20:90:03:25:32:44:89:09:C7:EE
Authority key identifier: 3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
Certificate issuer: /CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Certificate serial: 019EC55CE2A92C8480FC1C6012116103BD3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
Manifest number: 12F9
Signing time: Sun 14 Jun 2026 09:00:59 +0000
Manifest this update: Sun 14 Jun 2026 09:00:59 +0000
Manifest next update: Mon 15 Jun 2026 09:00:59 +0000
Files and hashes: 1: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl (hash: BD9roRBc10hkAPx4WrYEwaMRTT7YCsB/+y8IJyvzVFM=)
2: Rc1JKlzBWJzMspxz5Sz8_wKGjSQ.roa (hash: YXV2SDD7Lq/HvpspFTkxAD7KLYHXbsXZfXUiY1m7rzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c5:5c:e2:a9:2c:84:80:fc:1c:60:12:11:61:03:bd:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Validity
Not Before: Jun 14 09:00:59 2026 GMT
Not After : Jun 15 09:00:59 2026 GMT
Subject: CN=c4894588acda1907fdc02090032532448909c7ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ee:b3:d7:c3:28:e5:c1:20:6a:99:5f:09:fa:
52:2c:5f:ca:42:33:70:74:6f:12:91:44:69:44:88:
56:8f:12:84:a4:29:4b:87:f6:22:7f:b0:e7:0f:59:
f0:70:19:24:32:68:e9:a4:17:3b:48:b9:5a:19:08:
72:8d:4e:83:72:89:42:b0:9a:dd:5b:46:5b:ac:86:
fe:8f:29:2d:ee:6c:be:e8:f1:4e:f4:a3:8a:9c:ba:
1e:cc:25:fa:5c:e0:5f:ce:5c:3f:75:7e:54:2b:ac:
e4:9f:b2:95:ae:a0:34:78:5b:ee:2d:eb:ee:d5:1b:
d0:29:51:62:7a:a7:5e:79:13:0a:63:50:5a:a8:7c:
f8:29:24:73:cb:69:4d:3f:89:0f:5a:93:e1:07:3f:
52:d3:eb:6f:e8:7c:30:b2:b7:f1:cb:c7:19:ad:f8:
64:bb:ef:28:61:93:0f:3e:c5:23:d6:22:37:12:5a:
0e:e1:ac:2a:b7:b8:9c:99:61:b0:33:6a:5a:8c:5b:
31:db:ec:98:a5:d2:63:53:27:f4:a8:41:09:c6:06:
e5:52:b6:29:c5:a0:72:43:58:f8:76:28:d7:7a:d8:
53:aa:93:76:32:59:e6:ad:21:5e:d3:4f:00:3c:e4:
eb:02:6c:02:58:72:e2:c9:34:6f:85:b3:58:53:d9:
9b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:89:45:88:AC:DA:19:07:FD:C0:20:90:03:25:32:44:89:09:C7:EE
X509v3 Authority Key Identifier:
keyid:3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:46:e0:92:55:db:9e:82:82:03:51:12:b6:87:82:6e:46:7e:
74:d1:56:1d:24:40:8f:97:a2:d4:9b:24:e4:0c:64:c8:ac:3d:
2c:ce:0a:1c:a0:8d:b2:06:e9:e7:ea:7e:40:23:35:ed:8a:66:
7a:75:a4:2f:27:a3:06:4b:3c:90:e4:d1:19:8b:29:03:f5:98:
f9:15:9c:04:02:08:cc:f8:d2:1c:2e:86:69:28:54:ea:e9:95:
97:1a:f4:ba:c2:3a:ea:b8:90:b1:ad:6d:42:f9:ad:95:5b:77:
6a:ec:77:c5:4a:a8:c7:c5:3e:cb:0a:ff:ff:e8:a4:40:3c:c0:
3a:06:c2:df:80:d7:eb:d7:c1:35:4f:a0:70:54:c5:29:86:cc:
5a:ae:c2:39:68:1f:a8:88:25:ab:25:dd:aa:0a:4b:b6:9c:33:
a2:8f:0f:39:cc:62:49:36:ff:a8:f8:2f:90:fa:a0:4e:89:1c:
16:e5:71:4a:6d:d9:ae:2e:63:e6:aa:9c:63:c3:19:d7:1a:ec:
4e:98:2c:e0:28:a5:23:25:96:f1:68:2f:e5:de:c6:eb:5e:bc:
4f:5d:d6:6b:b1:ab:65:71:6b:5b:62:16:26:cc:e6:a6:8f:c9:
6f:20:a6:ba:4c:5c:09:46:d3:06:4f:56:81:7d:a6:41:63:44:
bd:f2:70:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 16:25:44 2026 by rpki-client