Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
File: PBtlq7jKPpDpdlehqTHkZGneuaA.mft (raw, json)
Hash identifier: A3fKicN0x6n03BfehVjedrK0NN6v3Ic6C40gCzacTd4=
Subject key identifier: 32:08:A7:7C:77:F3:95:EE:CD:ED:D1:D2:4F:2D:12:7A:50:03:70:42
Authority key identifier: 3C:1B:65:AB:B8:CA:3E:90:E9:76:57:A1:A9:31:E4:64:69:DE:B9:A0
Certificate issuer: /CN=3c1b65abb8ca3e90e97657a1a931e46469deb9a0
Certificate serial: 019F1152CD1958B99F40B669C7292E3E0FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBtlq7jKPpDpdlehqTHkZGneuaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
Manifest number: 0118
Signing time: Mon 29 Jun 2026 03:01:06 +0000
Manifest this update: Mon 29 Jun 2026 03:01:06 +0000
Manifest next update: Tue 30 Jun 2026 03:01:06 +0000
Files and hashes: 1: PBtlq7jKPpDpdlehqTHkZGneuaA.crl (hash: aJViWtxbNqcz3UfkoomxX8AZz1J7GLhSM5SffUe7LRQ=)
2: gMCIz449uqD5WX8VFOvlE05m9FM.asa (hash: piapX0oug4b2n4Ly7SK9SEYjbmdeHD72ighx3Ds0YaQ=)
3: ufhzE0W5SH0Js0oKYXP2RX7vpvA.roa (hash: L+5eFfEh2iKkPrG9ir0RuhaK5ClvADkNCI+XRwX6vSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBtlq7jKPpDpdlehqTHkZGneuaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:52:cd:19:58:b9:9f:40:b6:69:c7:29:2e:3e:0f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1b65abb8ca3e90e97657a1a931e46469deb9a0
Validity
Not Before: Jun 29 03:01:06 2026 GMT
Not After : Jun 30 03:01:06 2026 GMT
Subject: CN=3208a77c77f395eecdedd1d24f2d127a50037042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:89:5d:f8:d5:4a:f3:ba:be:28:9a:a3:2d:28:
07:1a:a4:89:f5:ab:a4:dc:91:98:a8:4f:ec:c8:a3:
3a:82:37:c3:d0:56:02:45:ea:5b:41:6e:90:68:f1:
c3:96:76:8c:4e:05:e8:b1:c5:e8:3f:d3:ed:94:2c:
2e:95:97:60:47:df:41:fe:4d:a4:7b:73:f8:df:7c:
b0:c8:c1:58:3d:ee:f4:53:1b:1b:ef:5f:d1:33:0e:
0d:f3:ee:10:2b:0f:f9:3a:b9:ac:57:88:83:c1:22:
ba:f2:e5:96:8f:3b:be:d4:5f:b7:d6:e0:5e:ae:1e:
b4:b6:a4:6e:ad:56:de:4f:45:3c:9f:95:be:1a:cd:
72:9c:fd:69:a3:97:4e:af:c3:da:aa:04:f2:39:65:
9a:37:9c:04:cb:e1:76:f8:4d:69:aa:a4:e6:3a:40:
ee:6a:23:c9:a6:40:7f:d7:f4:de:f8:ac:4a:73:09:
70:5c:8e:98:50:5b:8f:19:93:ca:67:26:b9:95:5f:
e0:8c:0e:3d:4c:68:48:0d:38:ad:bd:0d:cc:0d:a1:
de:98:d7:94:04:db:7c:d0:60:fe:64:67:36:b3:48:
bf:45:d5:dd:02:d3:3b:52:0e:b9:82:7f:f8:da:37:
fc:6a:76:30:6c:c2:5d:64:f1:52:4c:ba:ac:a7:25:
e8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:08:A7:7C:77:F3:95:EE:CD:ED:D1:D2:4F:2D:12:7A:50:03:70:42
X509v3 Authority Key Identifier:
keyid:3C:1B:65:AB:B8:CA:3E:90:E9:76:57:A1:A9:31:E4:64:69:DE:B9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBtlq7jKPpDpdlehqTHkZGneuaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:af:bb:5d:61:fc:81:6f:90:30:c0:9a:0f:c2:85:9c:23:99:
4f:92:1e:05:51:7f:48:8f:7b:78:a8:da:f6:44:4e:0a:a4:4b:
06:c3:54:a9:dd:94:c6:86:b0:f8:87:c8:ca:07:95:66:15:e6:
8c:77:b7:ad:b4:6b:8f:ca:a5:53:74:c2:06:4d:ec:77:59:98:
97:d5:db:b9:a8:0c:9c:5d:09:90:f2:57:1d:48:2e:08:42:f1:
d7:80:fb:df:d6:cc:3d:72:d0:d5:59:51:6a:2c:d1:5e:a6:ec:
b2:ed:de:e8:8c:e7:ae:77:fd:61:41:cc:a3:c6:8f:05:ff:c1:
31:c3:a5:db:08:72:f3:fc:19:21:3c:bb:1f:21:5c:b8:47:16:
08:54:eb:86:6d:5e:8a:fe:9a:ed:a7:a6:40:7e:e0:fb:8b:e1:
bc:94:16:ba:2a:2e:f4:01:05:f0:aa:ad:52:19:48:1b:23:3d:
dc:c4:d7:fb:67:7f:a6:6c:5f:3f:20:b9:99:eb:6c:17:ed:d0:
47:b7:4b:ef:21:90:74:f2:68:73:45:94:57:92:27:20:a4:25:
0e:80:fb:e8:4d:5c:52:b0:81:83:77:64:c2:b3:27:ec:1f:17:
dd:0a:d4:cb:ff:f4:4a:e8:35:58:b4:d0:e0:1d:c5:ba:70:b0:
a7:de:15:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:03 2026 by rpki-client