Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/04b03d-fc77-42a4-8aae-055e86630227/1/Pnv1sZoATBwX_1zn3MDPyAeH0Lk.mft
File: Pnv1sZoATBwX_1zn3MDPyAeH0Lk.mft (raw, json)
Hash identifier: L/KNDanHYGlxinlUIb0mv0GpZOtU8A3/8XrvhnyDP08=
Subject key identifier: 70:6D:00:B7:9E:BA:B8:19:86:18:58:EC:2B:BA:CF:6B:A5:4A:C8:21
Authority key identifier: 3E:7B:F5:B1:9A:00:4C:1C:17:FF:5C:E7:DC:C0:CF:C8:07:87:D0:B9
Certificate issuer: /CN=3e7bf5b19a004c1c17ff5ce7dcc0cfc80787d0b9
Certificate serial: 019D38D2C701CBBC7CE09D1AF0307D28E3A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pnv1sZoATBwX_1zn3MDPyAeH0Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/04b03d-fc77-42a4-8aae-055e86630227/1/Pnv1sZoATBwX_1zn3MDPyAeH0Lk.mft
Manifest number: 01F1
Signing time: Sun 29 Mar 2026 09:00:30 +0000
Manifest this update: Sun 29 Mar 2026 09:00:30 +0000
Manifest next update: Mon 30 Mar 2026 09:00:30 +0000
Files and hashes: 1: Pnv1sZoATBwX_1zn3MDPyAeH0Lk.crl (hash: DCF2hKw0bG0E4rripr0Gh1GyzrscqzscsC3sjakRPx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/04b03d-fc77-42a4-8aae-055e86630227/1/Pnv1sZoATBwX_1zn3MDPyAeH0Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/04b03d-fc77-42a4-8aae-055e86630227/1/Pnv1sZoATBwX_1zn3MDPyAeH0Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pnv1sZoATBwX_1zn3MDPyAeH0Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:c7:01:cb:bc:7c:e0:9d:1a:f0:30:7d:28:e3:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e7bf5b19a004c1c17ff5ce7dcc0cfc80787d0b9
Validity
Not Before: Mar 29 09:00:30 2026 GMT
Not After : Mar 30 09:00:30 2026 GMT
Subject: CN=706d00b79ebab819861858ec2bbacf6ba54ac821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c8:c1:56:08:6a:59:26:2b:fa:22:0b:4f:0f:
49:08:fa:06:a1:19:c3:18:d3:93:00:c4:3d:63:05:
e7:29:4f:f0:9e:a6:4e:4f:74:d4:9b:a0:71:72:44:
4e:a4:ef:b6:f3:ad:b8:49:d1:d4:0a:20:9d:02:b3:
3f:25:0d:60:9b:1a:db:93:28:94:6a:c0:83:98:74:
63:9a:e9:8a:cb:52:1f:70:22:a7:39:4e:e0:df:40:
ac:60:5d:5a:45:07:8b:ca:58:e1:b2:4b:a7:2b:79:
15:71:c2:55:39:24:eb:10:65:96:4f:7a:5a:ba:96:
5a:d6:47:4f:f2:aa:ef:33:c3:31:8a:f8:cc:3c:51:
5f:78:71:8f:df:1a:74:a9:7d:6b:80:a6:d7:42:8f:
94:88:7a:12:14:73:d3:1c:1e:9a:1f:c0:5c:36:a7:
1b:4c:04:3b:ea:af:4d:e1:b2:ca:0b:5c:13:a1:e6:
9e:2b:8c:a3:a6:39:06:eb:bf:c3:40:08:3d:fe:fa:
93:be:3f:87:ee:81:57:48:fc:38:bb:86:7f:26:ec:
5d:b8:6c:8f:55:77:48:57:40:62:74:18:64:68:bd:
84:f5:66:5c:0e:26:85:51:e9:43:d0:f8:6a:65:cb:
b0:c9:81:7f:0f:57:58:77:f2:da:dd:7d:db:de:28:
24:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6D:00:B7:9E:BA:B8:19:86:18:58:EC:2B:BA:CF:6B:A5:4A:C8:21
X509v3 Authority Key Identifier:
keyid:3E:7B:F5:B1:9A:00:4C:1C:17:FF:5C:E7:DC:C0:CF:C8:07:87:D0:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pnv1sZoATBwX_1zn3MDPyAeH0Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/04b03d-fc77-42a4-8aae-055e86630227/1/Pnv1sZoATBwX_1zn3MDPyAeH0Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/04b03d-fc77-42a4-8aae-055e86630227/1/Pnv1sZoATBwX_1zn3MDPyAeH0Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:4c:6e:33:e1:e9:d6:40:ff:dc:ec:20:0d:85:eb:11:f2:5e:
3a:bc:e3:e3:91:a4:98:76:cb:47:bc:a1:1e:a0:80:00:b8:f8:
27:0a:2b:97:f4:3b:65:84:1f:be:65:63:25:a4:b1:f4:7c:f4:
ff:7e:0b:a8:bd:41:74:60:32:09:f3:62:2e:69:88:50:97:c9:
88:34:b5:0f:af:4f:a9:12:e6:7d:2a:99:bd:22:d0:b9:26:a8:
75:54:c5:93:31:bd:c2:93:6d:25:12:5e:ea:92:9f:d1:b4:53:
b0:c3:93:6e:aa:7f:e2:82:26:a8:26:08:6f:03:72:c0:61:9c:
f9:87:b8:15:25:f4:4c:70:f7:a0:c8:e5:f7:38:04:2d:82:19:
6d:be:b1:5e:c0:b1:f4:34:c5:f8:f3:8f:e1:92:34:12:97:5e:
cc:cf:a3:fe:c7:85:6e:5a:b4:c1:bd:57:9b:a6:03:13:95:15:
a2:35:d0:9c:af:6d:a0:18:c6:79:81:34:3b:66:81:72:50:9b:
7b:74:88:ed:a5:7f:bc:9c:42:e0:69:af:92:47:cf:99:23:a9:
ee:6c:22:8e:a7:b1:07:37:7e:32:e4:b7:48:4f:3c:0d:f2:10:
d2:fe:0b:69:34:0c:81:81:0c:e3:29:c4:68:3e:4d:5a:ed:d1:
a7:6a:a9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:14 2026 by rpki-client