Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
File: PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft (raw, json)
Hash identifier: RNx0pwtEdvQXpUyizXUed076nGMGNxdmMP9OSNG+fec=
Subject key identifier: 75:50:45:EE:62:78:24:53:59:A6:2A:E2:D1:39:EE:01:E0:57:37:99
Authority key identifier: 3D:0B:E4:AE:38:73:55:54:CD:11:81:0A:9C:7D:20:30:19:04:01:98
Certificate issuer: /CN=3d0be4ae38735554cd11810a9c7d203019040198
Certificate serial: 019EFC83DF11D6EA2F7F0D1514329F7D5307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
Manifest number: 035E
Signing time: Thu 25 Jun 2026 02:02:41 +0000
Manifest this update: Thu 25 Jun 2026 02:02:41 +0000
Manifest next update: Fri 26 Jun 2026 02:02:41 +0000
Files and hashes: 1: PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl (hash: LD2NjAOzSvbInOWUaJvz2Z9nQtQWA29l1Qvztp50zDk=)
2: xz923TuXOINB3WLY3XLk0pyQs6s.asa (hash: SGmXF+mIU3rmhMsPtkMgk1YdAxdF0xFT+cRVzGK/gGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:83:df:11:d6:ea:2f:7f:0d:15:14:32:9f:7d:53:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0be4ae38735554cd11810a9c7d203019040198
Validity
Not Before: Jun 25 02:02:41 2026 GMT
Not After : Jun 26 02:02:41 2026 GMT
Subject: CN=755045ee6278245359a62ae2d139ee01e0573799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b9:73:cc:ff:7c:95:50:ff:e0:d0:20:33:25:
cb:f9:bb:77:80:10:35:19:51:19:d5:fa:b2:2d:90:
fd:94:02:83:b2:c6:9e:69:14:e2:05:32:ff:a3:48:
19:68:0c:4f:af:94:e3:61:f2:c0:aa:9a:19:0c:ff:
fd:61:4e:94:22:76:9e:35:bd:b3:a9:96:e2:bf:95:
b6:52:94:e0:7a:5a:56:84:7c:7c:ee:f9:93:f5:25:
8f:ef:20:84:53:77:ad:57:0d:37:91:c6:41:32:2d:
20:5a:a9:b1:e3:eb:bc:34:f7:36:93:c6:8a:81:88:
e8:6a:83:24:6c:25:2c:41:53:bf:66:0b:6e:24:45:
e9:c4:3a:91:59:da:9e:e6:ad:8e:31:de:53:0c:99:
d1:14:8e:8d:9e:fd:e0:62:ce:27:d0:5f:d9:11:bc:
7e:d8:bf:34:eb:8e:fc:7c:57:2d:42:e2:90:3d:2b:
30:ad:6c:fa:84:cc:68:d8:0c:ec:70:3d:e3:ae:a2:
99:59:59:8f:d8:85:52:fe:2f:9c:15:36:7e:61:df:
20:d4:31:c8:07:e6:23:a0:09:d0:27:7f:34:05:48:
35:ea:2a:fa:d2:50:59:92:37:44:19:33:8c:3b:a4:
ac:c0:3f:fc:a3:39:e3:fa:44:2b:1d:ea:5f:07:52:
ae:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:50:45:EE:62:78:24:53:59:A6:2A:E2:D1:39:EE:01:E0:57:37:99
X509v3 Authority Key Identifier:
keyid:3D:0B:E4:AE:38:73:55:54:CD:11:81:0A:9C:7D:20:30:19:04:01:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:98:f7:7b:ca:b8:a5:b5:81:ce:61:c2:5e:af:94:5f:8a:df:
a7:d6:89:70:1a:bc:32:48:a5:44:ae:35:3e:50:be:b4:02:75:
ef:9b:42:97:eb:a5:4d:2e:56:dd:25:55:a4:55:eb:eb:08:67:
c7:6b:41:50:5d:52:22:e9:f3:c9:85:b9:4a:55:30:95:58:14:
aa:87:0b:94:5b:a9:d2:a1:d7:6e:40:69:45:c0:ab:f6:6d:fb:
9c:69:46:d9:9c:62:fd:59:cd:3f:33:1c:74:81:c3:c4:55:c6:
68:a2:fd:60:a3:20:e1:6a:72:01:ca:d9:2e:b9:e1:6d:6a:48:
a0:33:b7:d9:e7:59:1e:40:ff:0d:af:02:e3:36:6b:ce:84:70:
2b:e7:c0:ff:f2:40:7a:fe:78:36:7f:c3:f9:35:09:e4:28:0c:
48:43:8d:5c:97:6a:cd:91:b6:70:56:9d:f0:d6:74:2f:14:24:
aa:2f:ad:ef:76:9e:15:ae:d9:6a:1c:a8:6d:20:21:70:bf:b2:
a0:84:a9:be:b1:54:0d:94:f7:47:93:fa:67:95:de:3f:e9:8b:
be:7a:2d:d3:71:c0:8f:ae:e8:0c:14:85:d2:41:b8:cd:91:63:
b4:3d:d5:57:eb:cf:9b:7a:1f:ac:f1:37:47:d9:86:20:a1:ff:
82:a9:10:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:29:39 2026 by rpki-client