Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.mft
File: Pv1EVCQT55zFa-mDGjl-eqP1LTk.mft (raw, json)
Hash identifier: KIJgqIoGQF12WNHyGSjFNMq0SwuMurqbUl9GlZTxCJs=
Subject key identifier: BF:8D:4C:9E:74:85:FA:49:1F:91:53:F3:AD:FE:C1:19:3B:41:91:E9
Authority key identifier: 3E:FD:44:54:24:13:E7:9C:C5:6B:E9:83:1A:39:7E:7A:A3:F5:2D:39
Certificate issuer: /CN=3efd44542413e79cc56be9831a397e7aa3f52d39
Certificate serial: 01A165D90DE34DA1B11F7879D98106F6EF68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pv1EVCQT55zFa-mDGjl-eqP1LTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.mft
Manifest number: 0258
Signing time: Thu 22 Oct 2026 23:01:25 +0000
Manifest this update: Thu 22 Oct 2026 23:01:25 +0000
Manifest next update: Fri 23 Oct 2026 23:01:25 +0000
Files and hashes: 1: Pv1EVCQT55zFa-mDGjl-eqP1LTk.crl (hash: WfsL39/6hsNqCnOt4FpTMnm8U87Jsd8qKAoWS0Kn0/k=)
2: mcJm8HeYM8tAaxj_DbPV_ZHMr0U.asa (hash: fdM8B4LFVNA1rExhWmALS3M97yC0S/Herj8AXOIShkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pv1EVCQT55zFa-mDGjl-eqP1LTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 23:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:65:d9:0d:e3:4d:a1:b1:1f:78:79:d9:81:06:f6:ef:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efd44542413e79cc56be9831a397e7aa3f52d39
Validity
Not Before: Oct 22 23:01:25 2026 GMT
Not After : Oct 23 23:01:25 2026 GMT
Subject: CN=bf8d4c9e7485fa491f9153f3adfec1193b4191e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1b:fc:81:3c:b1:3b:da:44:51:fa:03:49:94:
86:06:c1:6c:8b:00:d0:93:1e:b6:71:7c:a1:23:c0:
30:6c:e0:c4:c3:7a:f6:0f:46:62:6b:a0:85:56:a1:
7a:28:01:68:2e:4c:de:9d:74:a3:82:5f:e7:d5:84:
6f:88:7f:4b:31:c8:7d:bd:9c:f1:57:83:e0:af:dc:
4b:c0:88:3f:67:34:77:59:e4:d7:b7:ae:e0:65:49:
98:53:64:13:82:a1:55:66:56:26:2b:fa:e2:80:b0:
d2:1f:75:71:7c:12:52:07:50:df:fa:39:d1:60:bc:
b0:3d:47:a2:d8:b5:1d:04:4c:f5:ae:cf:9e:99:fa:
f0:83:be:2f:de:4f:31:52:0c:02:be:9d:9c:67:a2:
61:54:56:76:48:1b:d3:5f:5c:69:75:59:59:8e:2e:
d8:ce:83:b6:1a:63:ed:ae:a6:d0:5f:ca:24:51:ee:
ba:50:0f:52:62:0b:0b:dd:d1:10:55:32:f8:ad:cb:
0d:e0:c9:92:60:00:74:5c:f6:3b:ff:64:44:62:71:
b8:32:7d:bd:54:2a:0a:3a:a4:52:8a:b3:f2:33:a9:
ad:8c:bc:e9:47:11:f8:aa:ad:ba:d8:ef:6b:f3:34:
42:21:18:4d:87:ba:ed:01:d0:04:9c:df:22:24:34:
f3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8D:4C:9E:74:85:FA:49:1F:91:53:F3:AD:FE:C1:19:3B:41:91:E9
X509v3 Authority Key Identifier:
keyid:3E:FD:44:54:24:13:E7:9C:C5:6B:E9:83:1A:39:7E:7A:A3:F5:2D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pv1EVCQT55zFa-mDGjl-eqP1LTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:1b:39:24:4a:81:ea:72:cb:8f:e2:0d:17:b7:4e:f9:b7:5e:
26:8c:08:22:51:fe:50:ad:1d:59:96:47:54:89:61:a7:71:56:
16:d9:cf:0d:82:c7:e2:14:27:22:64:97:a5:8d:09:45:43:91:
da:0f:65:92:b6:9a:a9:c7:79:15:3e:e4:ce:9c:19:97:f5:c9:
e3:27:1e:64:d1:03:c7:f1:fb:af:93:fd:4f:82:e5:05:cc:9a:
1c:3c:db:65:5a:0b:1e:69:20:ec:81:58:19:36:6c:aa:4f:a3:
c3:35:ff:8a:ad:7b:c5:02:aa:37:9e:cd:22:04:7d:a9:15:b9:
05:a6:e9:86:63:46:b6:a4:df:be:54:ca:53:b7:43:c2:bd:c9:
9d:c4:15:42:21:ea:d3:34:b7:c8:9f:2f:01:9d:43:42:73:f7:
58:0c:e7:79:4b:75:f4:8e:fd:a5:b9:a9:d6:98:8e:47:0e:fc:
42:d0:47:01:95:dd:6e:02:c5:a9:f3:95:cc:a9:47:67:c8:54:
23:25:b1:12:55:a6:07:11:0e:cf:fd:3a:5c:10:81:91:cf:e5:
84:ba:d8:d0:68:6a:68:92:5a:83:dd:e9:41:13:c7:2a:93:5f:
54:b2:b1:c5:8e:a3:b3:e5:1b:74:7c:aa:ee:4d:07:f0:09:63:
0f:60:4d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 09:53:12 2026 by rpki-client