Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
File: PBtlq7jKPpDpdlehqTHkZGneuaA.mft (raw, json)
Hash identifier: dEpKlFZFHkKUqoRj8PKeMoCvKunrUcDZk1AZxArsZG4=
Subject key identifier: 98:21:95:47:46:91:A1:26:B5:40:16:26:31:1E:2B:BE:CC:A9:3E:A5
Authority key identifier: 3C:1B:65:AB:B8:CA:3E:90:E9:76:57:A1:A9:31:E4:64:69:DE:B9:A0
Certificate issuer: /CN=3c1b65abb8ca3e90e97657a1a931e46469deb9a0
Certificate serial: 01A1DF83464A3176C347F2B99FBADD8D1A79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBtlq7jKPpDpdlehqTHkZGneuaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
Manifest number: 028C
Signing time: Sun 15 Nov 2026 14:01:24 +0000
Manifest this update: Sun 15 Nov 2026 14:01:24 +0000
Manifest next update: Mon 16 Nov 2026 14:01:24 +0000
Files and hashes: 1: PBtlq7jKPpDpdlehqTHkZGneuaA.crl (hash: ZJ5aqm7hA7aoSDzjj2ChS9nn23JsXqySPJlrMvWk5f4=)
2: gMCIz449uqD5WX8VFOvlE05m9FM.asa (hash: piapX0oug4b2n4Ly7SK9SEYjbmdeHD72ighx3Ds0YaQ=)
3: ufhzE0W5SH0Js0oKYXP2RX7vpvA.roa (hash: L+5eFfEh2iKkPrG9ir0RuhaK5ClvADkNCI+XRwX6vSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBtlq7jKPpDpdlehqTHkZGneuaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:46:4a:31:76:c3:47:f2:b9:9f:ba:dd:8d:1a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1b65abb8ca3e90e97657a1a931e46469deb9a0
Validity
Not Before: Nov 15 14:01:24 2026 GMT
Not After : Nov 16 14:01:24 2026 GMT
Subject: CN=982195474691a126b5401626311e2bbecca93ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:41:25:8d:f5:24:fa:10:d8:04:bf:e7:1b:b4:
80:24:72:18:4b:0b:0c:71:76:7e:31:0d:9f:f7:72:
a6:48:24:ca:02:2c:cd:c8:0d:f1:2b:db:68:f6:db:
87:79:e9:e6:be:97:6d:ee:d5:b1:17:73:a5:d1:f6:
0b:b5:7d:ed:4b:51:26:00:85:ae:61:45:a7:3d:02:
10:f2:ca:77:ee:2e:38:ff:96:b3:cf:31:6e:e5:c3:
66:85:24:94:3a:b8:22:1b:9a:26:d0:4d:d4:28:a7:
f0:2c:6d:09:cb:3b:7b:48:d7:7c:fc:56:46:0a:2a:
19:3d:5e:e4:8a:b0:8b:f9:f2:7e:a3:8d:f2:dd:46:
9f:71:0b:12:8e:71:7e:dc:85:a5:63:17:ed:ed:6b:
90:a9:58:70:e3:c0:ce:93:34:dc:4b:92:b8:dd:7d:
8d:e7:c3:5a:63:3b:74:99:5f:72:a0:5b:0f:9a:13:
48:ae:dc:e1:81:e0:cd:da:1f:a3:2c:5d:6e:48:d1:
ac:2f:d6:b4:4c:04:16:53:dc:c2:17:ac:4f:86:cb:
8d:18:b8:c5:2a:e3:65:20:4f:37:da:dc:2a:d9:be:
e0:9a:95:08:5a:d6:bc:b2:7e:38:49:d8:9c:6b:ca:
68:85:35:ac:86:c2:7f:64:1f:2a:b5:04:ea:4e:ef:
72:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:21:95:47:46:91:A1:26:B5:40:16:26:31:1E:2B:BE:CC:A9:3E:A5
X509v3 Authority Key Identifier:
keyid:3C:1B:65:AB:B8:CA:3E:90:E9:76:57:A1:A9:31:E4:64:69:DE:B9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBtlq7jKPpDpdlehqTHkZGneuaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b0:14:e6:45:c8:dc:bf:c3:c9:1c:db:f0:68:0b:8d:d3:aa:
f4:01:98:0e:e5:a8:9b:ca:44:07:c9:7a:3c:35:c6:84:14:11:
09:37:42:eb:e5:42:a8:b8:ae:c1:b4:b6:95:be:3e:2d:2d:54:
1c:bd:e9:13:24:cd:ec:4b:6c:96:01:82:3a:54:15:df:fa:9a:
33:fb:35:df:a5:28:7b:a3:a9:6f:d9:e7:81:b4:c3:03:1c:92:
ed:c9:fa:57:b5:1c:f1:7c:4d:77:6d:9e:39:60:a4:61:dc:fd:
48:e3:b0:e1:af:ea:23:6a:67:83:4e:a1:55:d5:c9:3b:c8:82:
ba:08:35:ea:f8:20:5f:8b:10:44:b0:0a:48:5a:e2:92:48:ca:
f0:2f:78:ff:99:75:35:bc:d4:a3:e3:d1:76:ef:53:6e:2d:5e:
e9:8a:2e:00:f2:ed:59:3d:a7:8a:d1:eb:de:94:a0:71:5b:2f:
21:17:b1:79:f2:7f:bd:97:0e:1b:09:0c:a5:02:f8:d2:d7:00:
4e:66:7c:10:00:ad:23:50:7e:cd:c8:77:2d:49:0d:16:29:ff:
ab:9b:de:42:ab:13:09:2c:79:ba:3f:3c:3b:15:98:6a:90:20:
69:e8:60:af:b7:9f:00:b7:3b:f7:a0:b2:c3:04:3c:16:20:ee:
a9:be:3a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:48:29 2026 by rpki-client