Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
File: PksGq_B-6qwRslmgj-Fx1mvSgw0.mft (raw, json)
Hash identifier: NRm6xv+kjYw8E72sphxKYomxS3/6KcQ3BtzCyPLLEiM=
Subject key identifier: 5A:BC:0C:D1:78:87:C4:2F:59:DE:69:76:E2:0D:5D:4C:65:97:19:4B
Authority key identifier: 3E:4B:06:AB:F0:7E:EA:AC:11:B2:59:A0:8F:E1:71:D6:6B:D2:83:0D
Certificate issuer: /CN=3e4b06abf07eeaac11b259a08fe171d66bd2830d
Certificate serial: 019D3752A570DB540A31BEEB2E981C166AA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
Manifest number: 0824
Signing time: Sun 29 Mar 2026 02:00:56 +0000
Manifest this update: Sun 29 Mar 2026 02:00:56 +0000
Manifest next update: Mon 30 Mar 2026 02:00:56 +0000
Files and hashes: 1: P_mFxEcYlCrFN3MG993zE4Mm2l4.roa (hash: qelseO1it8WIi6uPqUIeiOJkVLkt0DoO5JMwvTxaQaY=)
2: PksGq_B-6qwRslmgj-Fx1mvSgw0.crl (hash: dfmCTpwqQIjWwKa0VeBjv1vjpmRA/56NTLdTlIpKa8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:a5:70:db:54:0a:31:be:eb:2e:98:1c:16:6a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e4b06abf07eeaac11b259a08fe171d66bd2830d
Validity
Not Before: Mar 29 02:00:56 2026 GMT
Not After : Mar 30 02:00:56 2026 GMT
Subject: CN=5abc0cd17887c42f59de6976e20d5d4c6597194b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:da:8e:22:cf:cc:ec:cf:e1:84:a0:ea:43:c2:
bb:37:a2:58:9c:86:63:13:76:24:57:c3:65:ac:a1:
e8:3f:11:69:78:7a:82:9e:f7:ef:51:80:be:e3:56:
58:21:91:35:02:1b:e5:7c:f2:c4:4b:d1:6c:33:3e:
8b:ca:55:45:a9:29:81:92:13:d1:31:ef:1f:f0:4c:
3b:e0:ce:b4:71:f9:13:f7:0e:88:3c:4c:e9:97:59:
16:1a:2f:cd:55:0d:94:aa:e5:01:81:03:85:34:dc:
a5:bb:2a:5f:26:27:f6:3b:1b:99:59:8f:f6:4f:37:
6e:21:2b:be:00:23:68:83:ed:0b:81:e9:6e:de:f1:
b8:b5:1e:5d:db:63:f5:f6:2d:ff:b8:0c:27:70:23:
73:4b:cd:05:5a:44:14:4d:47:48:5d:df:7c:30:a1:
84:f8:e2:da:c3:9d:de:a9:b1:b4:8c:b2:58:80:28:
5f:0d:a7:b3:19:18:0f:dc:41:2c:28:bf:3e:15:d3:
19:e1:18:db:b3:bf:c5:b2:eb:84:9a:87:14:99:a9:
0a:3a:d2:1b:9f:cc:b9:ac:5b:69:6e:66:fb:f1:d2:
dc:04:a8:27:ca:71:4c:7c:a8:dd:ca:38:83:6e:84:
f7:c8:27:42:8c:ed:d6:47:b9:ba:2a:9c:da:8f:14:
fa:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BC:0C:D1:78:87:C4:2F:59:DE:69:76:E2:0D:5D:4C:65:97:19:4B
X509v3 Authority Key Identifier:
keyid:3E:4B:06:AB:F0:7E:EA:AC:11:B2:59:A0:8F:E1:71:D6:6B:D2:83:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:2e:6d:76:7c:c0:35:bb:ee:13:5e:ef:d1:00:50:e8:2f:bc:
af:69:79:d7:67:57:7f:d0:6a:50:d8:2d:a4:d4:50:01:95:c0:
ba:03:fa:50:f3:0f:1c:7f:9b:c1:12:ef:7c:9d:c4:cf:0c:71:
ab:d3:06:67:4a:fa:c1:60:5d:04:b3:97:2b:9d:e2:db:e7:db:
99:91:d9:21:c7:1d:87:08:eb:19:c5:a8:db:76:32:50:6b:f7:
03:bf:5c:26:02:bb:4d:d9:11:73:d1:57:cf:75:7a:3b:71:74:
4a:2a:f0:2c:b0:21:3f:4c:8b:dc:b8:97:ce:3e:7c:fb:d0:61:
b3:cd:e5:82:ad:8c:2c:b5:de:62:b8:bc:2c:fb:d8:9a:5d:74:
54:1e:0f:dd:23:98:d9:4f:53:0e:20:90:c6:3d:4e:01:b4:36:
74:52:1f:69:5b:8a:0d:d8:02:c9:79:3d:69:6c:4e:eb:9d:d8:
98:d2:1f:20:0a:f6:30:25:97:23:16:17:8e:4c:bf:ed:08:ff:
b2:62:f2:89:48:d2:70:9b:a6:b1:89:1f:46:d0:e9:a3:55:bf:
a6:34:d1:c0:b9:60:1c:b1:75:41:06:54:05:b0:ac:7c:fd:2c:
db:31:f7:91:9e:29:79:c9:75:cd:52:ba:af:5c:96:76:c5:a5:
dd:7d:ec:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:17 2026 by rpki-client