Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
File: PBtlq7jKPpDpdlehqTHkZGneuaA.mft (raw, json)
Hash identifier: 9deSCs1TAr33pAIem3kVNJuWiFYnk+CBFSQXH28Uq/U=
Subject key identifier: 68:0F:88:63:A6:C4:24:DD:6B:17:B2:FD:27:6F:72:42:D3:5D:A4:85
Authority key identifier: 3C:1B:65:AB:B8:CA:3E:90:E9:76:57:A1:A9:31:E4:64:69:DE:B9:A0
Certificate issuer: /CN=3c1b65abb8ca3e90e97657a1a931e46469deb9a0
Certificate serial: 019D382DFCA531BDEB4C32470E47BBF9AAA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBtlq7jKPpDpdlehqTHkZGneuaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
Manifest number: 23
Signing time: Sun 29 Mar 2026 06:00:31 +0000
Manifest this update: Sun 29 Mar 2026 06:00:31 +0000
Manifest next update: Mon 30 Mar 2026 06:00:31 +0000
Files and hashes: 1: PBtlq7jKPpDpdlehqTHkZGneuaA.crl (hash: rwwjo/j4sqF6PsMWT8HNP3JRSOiA9h52TR0cRbSkchY=)
2: gMCIz449uqD5WX8VFOvlE05m9FM.asa (hash: piapX0oug4b2n4Ly7SK9SEYjbmdeHD72ighx3Ds0YaQ=)
3: ufhzE0W5SH0Js0oKYXP2RX7vpvA.roa (hash: L+5eFfEh2iKkPrG9ir0RuhaK5ClvADkNCI+XRwX6vSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBtlq7jKPpDpdlehqTHkZGneuaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:fc:a5:31:bd:eb:4c:32:47:0e:47:bb:f9:aa:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1b65abb8ca3e90e97657a1a931e46469deb9a0
Validity
Not Before: Mar 29 06:00:31 2026 GMT
Not After : Mar 30 06:00:31 2026 GMT
Subject: CN=680f8863a6c424dd6b17b2fd276f7242d35da485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2b:b5:3b:40:ab:b2:95:c8:3f:da:66:b8:50:
00:d4:54:6b:e9:d5:1c:48:07:4d:5c:24:5c:99:25:
77:ed:54:25:35:96:8e:e5:23:48:bb:96:bc:9e:18:
59:69:d4:d1:4e:02:8b:bb:2c:97:74:0d:0b:a2:d1:
0f:b6:80:e4:53:ba:84:5c:8f:97:e3:69:1f:f2:a6:
27:ed:0f:f7:10:24:0e:04:22:08:c1:0c:f3:4c:2f:
42:75:7e:66:16:dc:61:de:66:65:bf:1a:a9:96:0a:
6b:28:4b:c0:78:09:50:11:0a:99:59:33:2c:4c:b6:
d7:55:0d:d8:77:2f:74:62:ce:07:59:10:a1:12:d4:
fc:a0:a8:4a:06:1b:27:d1:c2:1f:00:7a:e4:67:9a:
63:70:2a:ab:54:a8:57:67:29:9a:8f:ce:ab:57:d9:
9c:f1:a5:9c:c5:0e:83:3b:38:54:c7:c5:80:11:ac:
10:2d:e9:a3:6a:45:5f:80:98:a1:b9:34:4b:10:7d:
92:9c:a1:04:b5:bd:8e:48:3e:8d:48:20:86:46:bc:
dd:3b:2b:1d:1e:2a:52:69:9f:74:52:cd:67:ad:a6:
60:9b:2c:47:ab:c6:be:59:ce:eb:3a:80:8a:8d:36:
0f:d2:ca:5f:ef:fa:0b:24:16:53:e1:98:19:ab:6f:
fc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0F:88:63:A6:C4:24:DD:6B:17:B2:FD:27:6F:72:42:D3:5D:A4:85
X509v3 Authority Key Identifier:
keyid:3C:1B:65:AB:B8:CA:3E:90:E9:76:57:A1:A9:31:E4:64:69:DE:B9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBtlq7jKPpDpdlehqTHkZGneuaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:43:73:f5:00:01:d9:fb:81:fc:80:66:06:bb:77:ba:b2:64:
45:f7:f7:c0:1f:d7:0c:a4:5b:cd:a5:2c:18:d7:1d:a0:9c:1b:
d8:c9:f6:f5:50:68:2d:8c:10:74:fa:c0:1a:7a:0d:8d:e2:bf:
9c:40:2c:83:fb:59:e8:f1:b4:40:10:b7:62:f5:7f:49:bc:55:
df:2e:ef:10:4b:a2:0d:0a:71:4a:d4:aa:f6:95:8a:47:7c:45:
f8:51:76:8a:b7:64:53:b7:62:5c:39:85:08:9f:a0:db:16:7b:
25:d0:72:8c:cf:a6:31:3e:e1:13:03:a5:ad:87:6f:c0:ef:7b:
18:c7:d0:12:b7:c4:63:f1:e4:7c:2e:97:61:58:d5:1f:79:29:
99:f0:f6:97:b4:c2:f4:07:4e:b1:6c:a3:0c:d5:9d:bd:c8:ad:
8d:48:cf:f8:3c:6f:f2:90:ff:eb:87:6e:ec:0b:50:85:db:f3:
90:67:bf:42:f9:d3:60:d2:6b:fc:4f:73:05:fb:08:f3:30:15:
19:43:d7:0f:9a:22:da:60:1f:08:8d:9d:63:e3:a0:e2:d9:62:
af:aa:94:ad:63:ad:08:00:e5:04:87:fe:de:e3:dd:d4:a6:9f:
41:15:d6:5e:dc:4c:11:5b:d2:f5:fb:6b:30:c6:1b:ec:60:7d:
77:ec:5b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:27:39 2026 by rpki-client