Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
File: Pme6gge4HBtHJjsf3o95uZWXA30.mft (raw, json)
Hash identifier: keN5JGdHOiqblUospqOFbq1ezizxVrxwpXQrvJwKfd8=
Subject key identifier: CE:72:17:C2:3C:36:44:CD:B7:C7:86:BB:96:A7:B3:41:32:E9:54:B7
Authority key identifier: 3E:67:BA:82:07:B8:1C:1B:47:26:3B:1F:DE:8F:79:B9:95:97:03:7D
Certificate issuer: /CN=3e67ba8207b81c1b47263b1fde8f79b99597037d
Certificate serial: 019E3185E133E7F596591ED13610561DE4AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
Manifest number: 18A2
Signing time: Sat 16 May 2026 16:01:57 +0000
Manifest this update: Sat 16 May 2026 16:01:57 +0000
Manifest next update: Sun 17 May 2026 16:01:57 +0000
Files and hashes: 1: DJdqiSENKGFZJ1k4CQJ0qhVj-NU.roa (hash: JPyYKilJIGfMtwMBvPqVfl8PNsFxqskM2FqefiGjuEU=)
2: Pme6gge4HBtHJjsf3o95uZWXA30.crl (hash: 46ai3l0nnc0OONU/yGPzYFCma2lwCbZBblve791xtCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:85:e1:33:e7:f5:96:59:1e:d1:36:10:56:1d:e4:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e67ba8207b81c1b47263b1fde8f79b99597037d
Validity
Not Before: May 16 16:01:57 2026 GMT
Not After : May 17 16:01:57 2026 GMT
Subject: CN=ce7217c23c3644cdb7c786bb96a7b34132e954b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fe:4f:f4:73:cf:8b:04:a6:dc:72:17:75:40:
de:46:73:2b:b8:49:9c:4c:b0:88:da:4c:41:2f:d3:
9a:af:c0:6c:a7:96:1b:70:dc:84:aa:8b:f0:4a:dd:
f8:83:d5:1b:87:f5:ea:f6:50:53:ac:56:f8:a0:87:
69:61:e6:28:87:8d:12:ff:62:c4:f2:51:13:5c:2e:
5d:4f:cf:4d:c3:5f:04:ce:72:51:06:c9:22:24:24:
8b:13:59:5a:b2:5f:c7:e1:0d:99:75:17:99:07:60:
77:30:b6:8e:f3:9c:be:b6:ae:4e:04:b9:41:fb:dc:
d8:75:a6:35:d9:72:65:9f:3a:1d:34:87:84:57:aa:
74:3b:66:d7:cb:bb:f0:73:91:d7:bf:00:32:3d:1e:
fd:25:80:fe:36:2b:4c:13:2c:90:83:e3:1b:7f:e4:
af:2e:3c:de:f1:77:8a:fa:04:28:8f:d4:56:ce:e2:
9b:82:9f:93:ad:ee:a4:a2:3f:9d:c1:48:f4:b0:b1:
2f:93:40:9a:14:88:66:a6:37:2f:13:ee:9b:0e:e6:
6c:5b:31:ec:1b:82:92:b8:28:3e:da:17:09:d4:a3:
ed:14:bd:b3:77:70:cd:f5:17:9f:42:a0:d9:ce:f6:
44:d2:69:86:cd:6f:16:70:15:6c:be:98:b7:e1:f8:
ff:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:72:17:C2:3C:36:44:CD:B7:C7:86:BB:96:A7:B3:41:32:E9:54:B7
X509v3 Authority Key Identifier:
keyid:3E:67:BA:82:07:B8:1C:1B:47:26:3B:1F:DE:8F:79:B9:95:97:03:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:eb:ce:e5:af:54:2f:04:c1:e0:45:5e:44:97:56:13:f4:e4:
74:ed:98:9c:f8:11:1d:0a:ee:fc:2e:ec:51:79:d8:9e:77:8a:
51:da:9e:a0:48:38:bb:29:98:2c:e1:e8:6a:1f:e4:50:d2:d7:
6d:31:5a:b8:6c:69:38:f7:13:0f:12:51:19:35:32:d5:36:48:
9d:ff:a8:10:9c:f6:c8:55:ef:25:65:f7:bf:6f:20:45:24:2b:
31:1d:31:5e:bf:fa:21:df:6e:a9:69:a4:6a:6f:85:b5:d4:2c:
69:c1:e1:c3:0c:1a:eb:0d:56:08:cd:2e:f9:a8:f8:e6:07:42:
9e:0e:55:03:ef:cf:d9:63:84:56:c3:68:1a:33:58:0a:99:ae:
b7:55:54:ec:b9:78:ad:5f:79:6c:aa:7f:5c:00:72:27:69:ce:
8c:4a:eb:72:1d:af:72:86:fc:d2:01:18:a6:9e:42:80:21:f0:
0a:6a:c3:71:a8:39:c9:22:88:9b:e4:08:63:7c:e3:4a:c4:e0:
81:fd:89:e6:c7:2b:36:59:4a:41:1a:a4:ab:33:23:da:d4:a1:
24:0f:98:fd:8a:41:4c:08:82:40:4d:77:51:e8:c7:c8:8b:22:
e1:5a:af:bb:63:b5:66:b3:3b:4e:a4:64:a1:71:ce:6d:7c:26:
b2:2f:33:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:43:43 2026 by rpki-client