Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.mft
File: Pv1EVCQT55zFa-mDGjl-eqP1LTk.mft (raw, json)
Hash identifier: TppJj39d/Ml6eKyUNv8tWepc0/EmnZ/OcmtSwsqwv9E=
Subject key identifier: 97:A6:84:FA:7C:F9:83:DD:8D:6F:A5:E8:D2:9C:F3:D8:10:9E:39:3C
Authority key identifier: 3E:FD:44:54:24:13:E7:9C:C5:6B:E9:83:1A:39:7E:7A:A3:F5:2D:39
Certificate issuer: /CN=3efd44542413e79cc56be9831a397e7aa3f52d39
Certificate serial: 019D3A1D0429C8BE4D9929A9CA9074BC3D7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pv1EVCQT55zFa-mDGjl-eqP1LTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.mft
Manifest number: 2E
Signing time: Sun 29 Mar 2026 15:01:13 +0000
Manifest this update: Sun 29 Mar 2026 15:01:13 +0000
Manifest next update: Mon 30 Mar 2026 15:01:13 +0000
Files and hashes: 1: Pv1EVCQT55zFa-mDGjl-eqP1LTk.crl (hash: jPkPlz/ydXsrbmMlD0Xm9FNAihmrqqSqA06rw392xgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pv1EVCQT55zFa-mDGjl-eqP1LTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1d:04:29:c8:be:4d:99:29:a9:ca:90:74:bc:3d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efd44542413e79cc56be9831a397e7aa3f52d39
Validity
Not Before: Mar 29 15:01:13 2026 GMT
Not After : Mar 30 15:01:13 2026 GMT
Subject: CN=97a684fa7cf983dd8d6fa5e8d29cf3d8109e393c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8d:db:9a:7d:c9:9b:fa:6f:10:41:4e:39:68:
bf:77:da:fa:41:ea:76:14:b0:1d:6e:96:fd:ca:e6:
5a:dd:a6:17:d5:9d:25:b1:8b:7a:bc:85:eb:53:95:
48:9b:63:a1:6e:bb:70:8c:b2:9b:ea:09:2f:df:d5:
c5:90:ac:b7:a1:77:a8:4f:0f:dd:13:4f:a3:c4:8d:
1e:ef:23:a6:03:33:d0:41:14:bb:0b:c9:fc:03:39:
8a:ec:ae:89:c9:8d:14:15:0f:c5:48:d0:be:5a:1c:
74:07:d1:60:57:d1:f6:5f:39:55:a3:89:fe:68:07:
72:3e:25:4c:53:f7:1a:a3:9e:26:f3:30:67:eb:6d:
2d:5d:7f:83:7d:95:0b:3d:b2:f5:d5:ec:02:fb:2e:
ac:95:9c:86:2b:67:19:c2:1b:0a:6d:6e:ad:fe:1e:
06:19:1d:10:ca:89:c1:c9:93:76:94:96:73:f2:7b:
ce:00:39:b3:91:fe:cb:fa:da:c1:c0:a4:18:c0:c0:
22:64:68:25:dd:60:2a:21:b9:49:66:ee:51:00:2a:
9a:7f:c0:70:91:b4:a8:e6:52:b4:72:cc:98:f2:98:
98:47:22:7d:89:22:b7:3b:23:26:a1:1a:98:b3:d2:
96:01:cf:4f:ba:ce:4f:0c:7e:dd:85:da:90:e0:c5:
fe:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A6:84:FA:7C:F9:83:DD:8D:6F:A5:E8:D2:9C:F3:D8:10:9E:39:3C
X509v3 Authority Key Identifier:
keyid:3E:FD:44:54:24:13:E7:9C:C5:6B:E9:83:1A:39:7E:7A:A3:F5:2D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pv1EVCQT55zFa-mDGjl-eqP1LTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:57:c4:17:29:3b:75:44:5c:bf:ff:35:19:f0:40:f0:0f:b3:
1a:ea:21:ac:d7:db:77:17:70:1f:9f:f0:de:ed:74:e7:63:27:
84:c2:42:c1:4a:e6:f9:b8:81:df:7a:d3:30:8b:e5:eb:91:c1:
72:30:b6:de:9e:24:59:0f:56:22:0d:be:4f:74:e8:73:4b:87:
fc:80:0e:c9:cf:38:8f:7f:e0:1b:8b:b4:34:79:6a:e0:a5:51:
d4:b8:3b:a4:69:1d:cd:c8:9f:f1:ae:4b:58:bf:df:2a:f9:90:
63:32:4c:f3:81:7c:53:df:2b:d8:50:b7:eb:e4:ab:e3:51:45:
ff:52:a3:69:b4:4b:17:77:31:53:0e:ae:a6:f6:21:e8:49:ca:
3d:98:7d:ff:6e:55:1d:1b:b4:92:a3:f6:c5:f5:fe:3b:8a:11:
e0:15:3a:4f:f5:f4:15:5c:b4:ae:0a:ce:14:e9:2a:68:8a:f7:
49:44:d0:19:26:78:a3:71:c8:b0:31:84:7f:91:e7:60:b9:ba:
06:a3:36:ae:cb:40:65:f2:16:d6:f0:1c:4e:21:59:a0:3f:d5:
ca:e0:bd:8d:71:64:5b:7f:d0:97:c0:d8:bf:91:e9:80:2f:e8:
42:e9:bf:9a:54:25:34:e0:a5:eb:80:cf:c3:1d:a4:85:b9:f8:
ac:8a:cb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:43 2026 by rpki-client