Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
File: PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft (raw, json)
Hash identifier: rUDlKT5ZxklnrSWj4bRq9SH0NdV5Wa1rWKdc/QK4eWc=
Subject key identifier: 7E:C0:BF:D3:80:D6:41:C5:53:47:23:75:C4:B9:AF:7D:99:4F:00:CA
Authority key identifier: 3E:A6:ED:31:F9:7F:37:C5:E5:C5:50:73:2F:85:D2:46:90:96:2C:EF
Certificate issuer: /CN=3ea6ed31f97f37c5e5c550732f85d24690962cef
Certificate serial: 019D386667115DF153223CD7E854E1846412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
Manifest number: 188A
Signing time: Sun 29 Mar 2026 07:02:08 +0000
Manifest this update: Sun 29 Mar 2026 07:02:08 +0000
Manifest next update: Mon 30 Mar 2026 07:02:08 +0000
Files and hashes: 1: PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl (hash: GFYElATdmtdqEHeTqBg0T4AVqWk+ouLHYlStZsmIky8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:67:11:5d:f1:53:22:3c:d7:e8:54:e1:84:64:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea6ed31f97f37c5e5c550732f85d24690962cef
Validity
Not Before: Mar 29 07:02:08 2026 GMT
Not After : Mar 30 07:02:08 2026 GMT
Subject: CN=7ec0bfd380d641c553472375c4b9af7d994f00ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f1:7e:9f:33:cc:c3:42:73:56:60:dc:55:14:
5e:dc:86:c4:7a:da:7c:3e:9f:9e:85:c3:8f:83:89:
3f:a6:27:13:cf:b8:f4:be:c7:fc:b2:f8:d3:38:a8:
b2:30:fa:e3:cc:70:68:5a:7d:fc:09:d5:74:54:ea:
b3:f3:9f:c2:47:08:9a:2e:49:af:e8:e5:bf:85:e4:
cc:c4:6f:d9:02:ba:f7:44:be:dc:ae:e8:aa:bb:38:
eb:1c:b9:92:d5:1a:b7:8e:e2:3b:84:3e:7b:47:53:
4d:6a:ed:62:5d:d1:4a:d5:84:4d:64:90:c8:3d:4c:
ee:32:b7:51:9f:d3:c9:a1:f8:4d:12:75:44:d9:9d:
b1:0e:44:b2:36:33:86:de:e4:82:e3:75:fe:41:a5:
f5:2e:28:c8:4d:80:04:12:98:c8:ae:76:ac:85:3f:
c3:b9:6e:3f:0c:b8:cf:81:4e:2a:67:40:f1:bd:08:
59:fa:2d:09:f0:0f:ce:3d:fa:bd:ab:a6:f5:be:d2:
0d:58:9d:c2:40:0e:db:78:8d:30:a0:89:60:7b:94:
35:d6:4f:0d:c1:31:42:a1:a6:34:fe:56:f2:1f:06:
bf:0c:13:27:9b:90:8d:e2:de:a9:23:91:69:fd:25:
dd:f9:76:8c:ea:19:1b:94:ba:20:26:8d:49:12:a8:
f3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C0:BF:D3:80:D6:41:C5:53:47:23:75:C4:B9:AF:7D:99:4F:00:CA
X509v3 Authority Key Identifier:
keyid:3E:A6:ED:31:F9:7F:37:C5:E5:C5:50:73:2F:85:D2:46:90:96:2C:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:bb:b3:51:7a:c4:d3:71:40:cf:92:1f:25:0c:e7:98:b0:eb:
38:e0:d6:8c:42:a5:f6:e1:3f:64:a9:aa:9f:6f:de:2f:65:de:
0f:a5:b3:2c:9e:60:2a:b5:89:09:fd:9f:77:cd:29:f2:e3:90:
27:a4:14:bf:92:71:d2:a5:b1:bc:d9:39:da:da:46:3f:29:a7:
ad:01:43:83:ea:31:60:7b:2f:9b:de:a7:6e:e2:a5:6e:07:45:
fb:dd:44:1f:77:9a:34:ec:9e:23:12:02:99:41:a9:81:56:12:
af:e2:fa:99:8e:25:94:87:96:77:10:b7:77:b0:f5:4d:b0:f7:
65:1f:14:d0:84:37:5f:6b:60:bf:26:f9:2f:64:5c:2c:e4:51:
1a:83:75:29:90:09:68:4c:6c:e6:04:9a:68:90:40:d8:f2:eb:
26:a3:e5:97:fb:3f:9d:55:3f:82:d6:b9:11:20:ee:65:53:0d:
84:d8:55:c3:dd:71:a4:b5:bd:7d:67:ec:89:b2:f9:1d:57:4c:
22:b2:10:89:8a:6c:3f:7a:a7:e3:2d:63:02:9a:fb:96:16:b9:
3a:9f:a8:9b:e0:15:96:38:32:36:d9:61:73:44:b2:aa:73:90:
38:d6:96:c6:f2:14:b9:6f:80:de:f2:42:4f:23:b6:d3:1a:cf:
98:0c:d9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:05 2026 by rpki-client