Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/81dd1c-866d-4bbb-8295-14e930ffbd44/1/Pw5Q8wQo8xNlAgv9gW4urLPABIo.mft
File: Pw5Q8wQo8xNlAgv9gW4urLPABIo.mft (raw, json)
Hash identifier: K+fmG8Rh+pxcgYmU6BmOV0o1dZxIfgFWipjcO/miQxw=
Subject key identifier: 70:44:20:38:AB:70:99:F7:74:52:71:84:37:08:CC:33:0F:7D:BB:FC
Authority key identifier: 3F:0E:50:F3:04:28:F3:13:65:02:0B:FD:81:6E:2E:AC:B3:C0:04:8A
Certificate issuer: /CN=3f0e50f30428f31365020bfd816e2eacb3c0048a
Certificate serial: 019D3866007DB8B54708C014BF674B9DF303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pw5Q8wQo8xNlAgv9gW4urLPABIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/81dd1c-866d-4bbb-8295-14e930ffbd44/1/Pw5Q8wQo8xNlAgv9gW4urLPABIo.mft
Manifest number: 85
Signing time: Sun 29 Mar 2026 07:01:41 +0000
Manifest this update: Sun 29 Mar 2026 07:01:41 +0000
Manifest next update: Mon 30 Mar 2026 07:01:41 +0000
Files and hashes: 1: Pw5Q8wQo8xNlAgv9gW4urLPABIo.crl (hash: zeOhf0uPfxKUDzfFNF5gG96dGdaxJzys4qaAdqRJXdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/81dd1c-866d-4bbb-8295-14e930ffbd44/1/Pw5Q8wQo8xNlAgv9gW4urLPABIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/81dd1c-866d-4bbb-8295-14e930ffbd44/1/Pw5Q8wQo8xNlAgv9gW4urLPABIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pw5Q8wQo8xNlAgv9gW4urLPABIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:00:7d:b8:b5:47:08:c0:14:bf:67:4b:9d:f3:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f0e50f30428f31365020bfd816e2eacb3c0048a
Validity
Not Before: Mar 29 07:01:41 2026 GMT
Not After : Mar 30 07:01:41 2026 GMT
Subject: CN=70442038ab7099f7745271843708cc330f7dbbfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:37:b9:6c:28:e6:91:84:8c:67:aa:b6:21:ab:
15:a9:72:51:22:c0:60:52:d4:48:90:26:4e:0c:d4:
13:0c:e5:4c:f4:fe:3e:64:73:a8:0d:e7:94:cc:4e:
c3:97:af:fe:6f:e0:32:52:fe:2a:00:81:a7:fd:25:
85:25:f4:53:5f:a1:9c:35:95:eb:cc:73:26:a4:84:
b2:49:50:65:64:db:3f:cd:6c:fc:d3:68:7c:8e:69:
dd:d6:5d:5a:2e:79:69:0d:c1:66:f7:d3:4a:37:bc:
18:9f:ac:06:0e:db:fb:b4:6b:34:bc:c0:21:1e:2b:
53:b6:25:69:f9:41:b5:ab:0d:8a:d7:68:f7:4a:10:
39:a6:91:98:42:c5:1a:5e:53:c4:14:a1:ac:a8:95:
08:b5:20:b3:52:74:da:81:b4:c1:9c:bb:29:b8:57:
f9:80:f4:da:52:48:b8:c0:d9:8a:a4:d2:bb:5c:a3:
7d:d5:c8:e5:cd:d8:f9:96:4e:5f:21:14:f6:e3:e8:
9f:d2:e6:4a:3b:42:82:13:1f:09:b5:9f:a0:6d:59:
3c:73:e9:2b:fd:cf:9f:3f:90:ad:60:27:11:ac:54:
1f:a4:42:b3:07:ff:ab:ed:67:10:5a:12:88:36:ef:
8a:d9:7f:ea:11:5a:be:36:d2:d8:a3:13:fe:b8:ff:
b4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:44:20:38:AB:70:99:F7:74:52:71:84:37:08:CC:33:0F:7D:BB:FC
X509v3 Authority Key Identifier:
keyid:3F:0E:50:F3:04:28:F3:13:65:02:0B:FD:81:6E:2E:AC:B3:C0:04:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pw5Q8wQo8xNlAgv9gW4urLPABIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/81dd1c-866d-4bbb-8295-14e930ffbd44/1/Pw5Q8wQo8xNlAgv9gW4urLPABIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/81dd1c-866d-4bbb-8295-14e930ffbd44/1/Pw5Q8wQo8xNlAgv9gW4urLPABIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:59:57:d2:f1:2c:fb:e8:3f:10:ae:c1:29:18:31:03:db:64:
0a:b6:3d:a3:17:20:1d:c9:ec:83:9c:05:79:f4:01:1f:98:2e:
4b:76:30:ac:0f:b6:0a:fe:6d:9a:6d:1e:5e:95:c1:5e:5c:52:
bd:0a:f9:ff:16:cf:aa:aa:08:67:6b:29:37:5b:75:bf:cb:a8:
f4:02:cb:4e:f5:72:7d:93:d3:d6:db:57:af:d2:8d:84:2b:a6:
69:4f:ce:91:98:eb:9d:e8:a9:33:7d:b4:11:6c:71:b1:f6:2c:
af:5e:2f:4b:41:ac:91:64:90:e8:eb:46:07:da:12:21:e1:eb:
5b:ef:87:81:e1:29:8a:26:cb:ba:41:07:66:1b:e0:91:54:1b:
36:0f:b4:f4:13:94:c3:60:20:48:67:8f:5b:d2:2d:65:50:b3:
80:44:6e:8b:c2:1c:75:57:4e:cf:c4:a8:10:ef:7e:5d:dd:0a:
c3:20:66:22:76:64:e8:06:8c:42:07:4a:18:18:74:3c:03:46:
46:90:5a:76:81:d3:85:97:d7:bb:f9:ef:0f:cc:27:ad:1e:f2:
b3:fc:42:5f:dd:1d:7a:15:70:dd:4a:f2:08:75:f3:bb:1e:7f:
80:c5:53:e6:40:9a:a9:3a:ea:43:33:fc:dd:c0:68:84:ea:f4:
c7:6a:48:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:40 2026 by rpki-client