Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
File: _PmtqbKLaZf9ocRoqNhpY4QHoLs.mft (raw, json)
Hash identifier: HgPkr9kgmFgEOLOxs6SzxUtpBz6Osl7kWkxwnIyIg0E=
Subject key identifier: 13:CA:BC:99:6C:0B:6D:CB:58:50:23:2E:0B:F6:56:F7:C1:4B:31:3E
Authority key identifier: FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB
Certificate issuer: /CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb
Certificate serial: 019D3789A37F3C61491005505A1FCA884843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 03:01:00 +0000
Manifest this update: Sun 29 Mar 2026 03:01:00 +0000
Manifest next update: Mon 30 Mar 2026 03:01:00 +0000
Files and hashes: 1: 5vpEBDoytppmUG_e9rj_C25Xyl8.roa (hash: WBDmOCdQ0a30XWFeqB9R0DXCUU5WmVW9tSy74+sYoEQ=)
2: _PmtqbKLaZf9ocRoqNhpY4QHoLs.crl (hash: lj56DSxJnIw8bDlNJ1f3fQ3gaDrLdMkFF7ioCETnV8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:a3:7f:3c:61:49:10:05:50:5a:1f:ca:88:48:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb
Validity
Not Before: Mar 29 03:01:00 2026 GMT
Not After : Mar 30 03:01:00 2026 GMT
Subject: CN=13cabc996c0b6dcb5850232e0bf656f7c14b313e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:30:c4:20:e0:59:38:fa:68:77:da:56:4d:28:
65:a9:c9:3a:c8:db:6e:db:e0:f5:d6:1c:a9:84:20:
6e:91:40:aa:2d:21:4c:31:a8:52:95:12:51:39:e9:
06:e7:cc:65:ec:65:90:46:4a:39:d9:2a:20:ea:89:
ac:d3:58:07:f0:fe:4b:b6:d1:c4:4b:42:0d:d6:c3:
ff:60:b9:66:a2:fe:72:af:95:1c:9b:76:14:8e:4b:
d7:79:4d:c6:06:c8:b8:41:8b:56:51:02:bf:14:d4:
56:f5:78:86:3f:a2:d9:24:95:ec:76:e6:57:dd:72:
17:0f:46:73:d0:05:33:36:c1:cb:cf:66:3d:cb:5f:
b1:4f:3f:59:57:8e:ab:7e:82:a1:f5:cc:66:11:d0:
2b:d2:9a:f3:74:d9:6c:7c:ec:51:56:74:bf:e8:09:
7e:72:b1:7c:72:0a:5d:69:82:84:5e:71:3e:7f:f9:
88:ca:5e:bf:e6:af:ee:46:27:03:28:be:bf:81:91:
53:39:a6:12:ca:b8:b6:9f:e0:88:7e:2c:87:b5:ee:
0f:32:0a:89:b7:39:8e:3b:3a:0b:84:96:8e:6d:01:
74:39:9c:72:14:d2:47:32:2a:51:c8:ef:d0:e4:89:
28:78:ec:b9:a2:56:66:3e:c6:a6:25:cf:d3:6c:00:
0b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CA:BC:99:6C:0B:6D:CB:58:50:23:2E:0B:F6:56:F7:C1:4B:31:3E
X509v3 Authority Key Identifier:
keyid:FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f7:e5:f3:dc:ef:09:c0:22:ae:37:92:2e:11:14:05:33:e5:
a4:96:08:1e:e5:99:68:1c:a1:c1:3f:ba:31:ec:4d:f9:6a:36:
30:b1:22:00:a9:a5:6c:da:99:4e:fc:79:8d:5e:a6:3c:49:ac:
8d:39:51:70:6c:90:e6:88:60:d8:0c:c0:1c:2d:5b:2a:e0:c4:
29:81:09:67:6b:d8:60:c0:30:df:1e:18:3d:f1:16:fc:db:a9:
a0:e4:c0:b2:c7:7d:8f:fa:aa:54:8c:4f:d5:8a:b4:67:88:47:
ed:0d:de:5f:7d:7f:2f:41:34:fe:9f:4f:f1:97:5a:c4:65:e8:
f6:62:d6:cf:8e:53:a8:2c:60:48:a3:b2:2e:58:7d:f1:47:44:
85:ec:a8:9c:e5:fc:a9:fe:1f:b1:6f:70:78:03:1e:e4:4b:0c:
d1:48:82:a9:69:2b:fc:10:53:85:4a:83:ab:65:e0:b0:4b:96:
f2:d3:3d:b1:32:a3:e5:d2:13:c6:28:ca:41:ba:9f:f5:75:72:
94:c7:66:0a:06:df:8f:c0:9d:5d:93:04:75:1a:22:6e:48:b4:
2f:96:0d:94:ec:57:90:51:cf:8d:19:c2:62:d9:2f:02:31:4f:
24:a1:60:36:9b:11:3d:c5:fe:b1:fa:86:98:c1:62:9a:0f:63:
42:2d:d7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:35 2026 by rpki-client