Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
File: PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft (raw, json)
Hash identifier: 1TiBTO2rWJRkBxzbt2Aduk3lsBQs22GIoR6aRGhIpDE=
Subject key identifier: C4:E2:C7:51:3B:00:0F:55:F9:34:11:95:63:89:A2:21:9D:18:28:57
Authority key identifier: 3D:0B:E4:AE:38:73:55:54:CD:11:81:0A:9C:7D:20:30:19:04:01:98
Certificate issuer: /CN=3d0be4ae38735554cd11810a9c7d203019040198
Certificate serial: 019FF5A2944082E61146B147E67669500A98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
Manifest number: 03DF
Signing time: Wed 12 Aug 2026 11:01:40 +0000
Manifest this update: Wed 12 Aug 2026 11:01:40 +0000
Manifest next update: Thu 13 Aug 2026 11:01:40 +0000
Files and hashes: 1: PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl (hash: FMdeb3S0i469TYsURXDZNCWrCk5H3d8RbsasZ/NHrIc=)
2: xz923TuXOINB3WLY3XLk0pyQs6s.asa (hash: SGmXF+mIU3rmhMsPtkMgk1YdAxdF0xFT+cRVzGK/gGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 11:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:a2:94:40:82:e6:11:46:b1:47:e6:76:69:50:0a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0be4ae38735554cd11810a9c7d203019040198
Validity
Not Before: Aug 12 11:01:40 2026 GMT
Not After : Aug 13 11:01:40 2026 GMT
Subject: CN=c4e2c7513b000f55f93411956389a2219d182857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ce:3c:67:62:6a:81:50:4a:2c:63:4b:42:16:
40:8c:b1:0d:a4:82:43:67:6e:33:3e:7c:ce:68:90:
4d:29:67:f8:0f:58:43:79:73:a1:0a:85:02:45:21:
d4:3b:ea:9f:bc:81:0a:97:3b:b3:bb:13:69:bf:36:
f2:ae:95:48:36:e7:66:85:78:8b:e9:8f:33:ee:b9:
38:fb:30:6f:d4:75:a9:1a:ce:f4:21:f4:a1:aa:f1:
62:ea:2d:9d:2e:fa:0b:2d:9b:e5:9a:dc:71:a3:ee:
26:1c:4a:e0:3a:d3:3c:29:e3:37:35:fc:d6:3f:f7:
39:56:95:23:06:46:f9:21:f5:ca:3a:6d:08:98:5e:
ec:67:bb:68:f6:f2:75:29:21:aa:3d:0c:25:c0:c9:
18:f0:af:e0:24:d6:76:e1:a3:e0:de:1c:46:ae:1e:
74:e4:02:9b:a9:fe:5b:83:20:0e:55:34:33:8f:93:
4f:ec:d2:a6:3d:55:eb:d9:4d:54:a3:b5:69:fa:71:
9e:ef:40:1c:61:3c:70:81:8b:a1:a2:68:59:fe:8a:
d7:85:20:46:85:25:68:f3:a3:8c:48:50:30:95:a3:
1b:2a:1c:a8:7d:8f:dc:bd:cf:b4:ee:0c:cb:82:69:
8b:43:cb:4b:a6:30:94:fa:5e:c3:bd:3c:e3:0d:04:
c1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E2:C7:51:3B:00:0F:55:F9:34:11:95:63:89:A2:21:9D:18:28:57
X509v3 Authority Key Identifier:
keyid:3D:0B:E4:AE:38:73:55:54:CD:11:81:0A:9C:7D:20:30:19:04:01:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:94:75:36:51:a3:15:39:57:0d:5b:14:de:bb:dd:70:90:6f:
95:6a:e3:c5:09:da:8f:35:67:85:17:39:82:3c:70:24:0b:46:
42:1f:47:90:50:fe:4e:5a:e7:d8:79:51:5c:dc:fb:6d:9a:a1:
b9:77:d8:ea:5c:8b:dc:c2:17:a7:35:0c:1a:9b:93:50:ce:c9:
7e:a4:4e:be:5e:ee:84:6c:ec:08:d3:a7:e7:a0:da:1b:bc:e6:
bc:4c:8b:73:14:70:35:d2:e4:64:c1:d9:f2:cb:c2:38:b3:b7:
eb:0b:a2:b0:a5:0e:f1:18:5c:d2:6c:33:03:6e:53:f4:8e:e9:
db:3b:c3:30:4f:d9:6c:e3:73:8f:72:45:35:0c:41:c4:8f:9e:
ba:34:ad:be:be:ae:29:6a:03:ea:5c:4a:77:9a:65:d0:50:83:
11:59:2b:6c:9c:68:82:55:ba:1c:06:58:aa:e7:89:1a:27:c8:
18:8b:c8:7e:bf:12:cd:24:45:10:61:f1:92:42:f9:31:82:2d:
9c:f8:ff:bb:4a:f4:60:7f:e1:73:05:3c:66:2d:54:f5:b9:a3:
d3:15:2b:15:94:43:2b:8a:51:c8:44:75:b7:f3:d2:0e:6e:b1:
19:cd:52:44:4a:3e:1f:bc:a6:1c:cc:dd:21:90:73:5a:71:43:
7e:ff:b1:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/1opRAguYRRrFH5nZpUAqYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMGJlNGFlMzg3MzU1NTRjZDExODEwYTljN2QyMDMwMTkw
NDAxOTgwHhcNMjYwODEyMTEwMTQwWhcNMjYwODEzMTEwMTQwWjAzMTEwLwYDVQQD
EyhjNGUyYzc1MTNiMDAwZjU1ZjkzNDExOTU2Mzg5YTIyMTlkMTgyODU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl848Z2JqgVBKLGNLQhZAjLENpIJD
Z24zPnzOaJBNKWf4D1hDeXOhCoUCRSHUO+qfvIEKlzuzuxNpvzbyrpVINudmhXiL
6Y8z7rk4+zBv1HWpGs70IfShqvFi6i2dLvoLLZvlmtxxo+4mHErgOtM8KeM3NfzW
P/c5VpUjBkb5IfXKOm0ImF7sZ7to9vJ1KSGqPQwlwMkY8K/gJNZ24aPg3hxGrh50
5AKbqf5bgyAOVTQzj5NP7NKmPVXr2U1Uo7Vp+nGe70AcYTxwgYuhomhZ/orXhSBG
hSVo86OMSFAwlaMbKhyofY/cvc+07gzLgmmLQ8tLpjCU+l7DvTzjDQTB2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMTix1E7AA9V+TQRlWOJoiGdGChXMB8GA1UdIwQY
MBaAFD0L5K44c1VUzRGBCpx9IDAZBAGYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFF2a3JqaHpWVlRORVlFS25IMGdNQmtFQVpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kNDA0YTAtNzgwZC00M2M4LWI3MjEt
ZmQyZWI1NDk3YjVjLzEvUFF2a3JqaHpWVlRORVlFS25IMGdNQmtFQVpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kNDA0YTAtNzgwZC00M2M4LWI3MjEtZmQyZWI1NDk3YjVj
LzEvUFF2a3JqaHpWVlRORVlFS25IMGdNQmtFQVpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJR1NlGj
FTlXDVsU3rvdcJBvlWrjxQnajzVnhRc5gjxwJAtGQh9HkFD+Tlrn2HlRXNz7bZqh
uXfY6lyL3MIXpzUMGpuTUM7JfqROvl7uhGzsCNOn56DaG7zmvEyLcxRwNdLkZMHZ
8svCOLO36wuisKUO8Rhc0mwzA25T9I7p2zvDME/ZbONzj3JFNQxBxI+eujStvr6u
KWoD6lxKd5pl0FCDEVkrbJxoglW6HAZYqueJGifIGIvIfr8SzSRFEGHxkkL5MYIt
nPj/u0r0YH/hcwU8Zi1U9bmj0xUrFZRDK4pRyER1t/PSDm6xGc1SREo+H7ymHMzd
IZBzWnFDfv+xxg==
-----END CERTIFICATE-----
Generated at Wed Aug 12 21:08:03 2026 by rpki-client