Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
File: PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft (raw, json)
Hash identifier: Efpv7zyxA4yEvgcoRAKi36bDIrAaPXgdZw8Qhw5zgkA=
Subject key identifier: E8:CD:FC:8A:7A:4C:08:86:C4:05:8C:A8:F6:D0:A6:0A:37:BB:92:CF
Authority key identifier: 3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34
Certificate issuer: /CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334
Certificate serial: 019D3940848A320AE2E2DAA1DE939EE0E93F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 11:00:22 +0000
Manifest this update: Sun 29 Mar 2026 11:00:22 +0000
Manifest next update: Mon 30 Mar 2026 11:00:22 +0000
Files and hashes: 1: PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl (hash: qpxm83skIeddvS/DXIzd2RTclR8wYsHiPk5Pf3Kk0b4=)
2: nnxiFtwqx8GnsAuhyqsBzy-CKHk.roa (hash: a4O6X7QudSaMxrAiVWZoV6/Apq2rXIJ1YdJgf4/PVxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:84:8a:32:0a:e2:e2:da:a1:de:93:9e:e0:e9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334
Validity
Not Before: Mar 29 11:00:22 2026 GMT
Not After : Mar 30 11:00:22 2026 GMT
Subject: CN=e8cdfc8a7a4c0886c4058ca8f6d0a60a37bb92cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:94:91:98:ee:38:da:d6:58:d7:fe:86:ad:2a:
45:a2:42:0d:0e:b6:c9:fe:c3:c5:16:3d:9a:7f:9c:
05:b5:d9:f6:a9:3c:49:ab:2e:e9:d6:60:19:2a:e9:
61:e4:55:33:ac:1b:36:f7:0c:1a:42:f7:ab:b3:ba:
b3:7d:3c:51:58:99:4f:4e:bb:60:6e:c0:c1:e9:ea:
53:5f:e2:9a:5c:a4:bc:7a:d0:32:50:ac:18:95:5e:
9e:48:99:f4:4f:05:4f:c9:20:48:9f:09:8b:76:4c:
2e:a6:8f:38:d5:23:00:89:50:e9:d7:a5:3b:4a:6f:
60:d7:ac:bf:5b:80:e1:58:7c:6f:35:36:ff:d6:bb:
aa:10:28:b2:78:e6:1f:a0:7b:f8:57:44:df:8b:cb:
8a:7b:74:f3:a8:ce:d7:2a:a0:a1:d6:77:77:b1:db:
8b:2f:ea:9b:a4:65:b7:e7:40:27:b3:b0:54:e3:b4:
66:c4:52:1d:f5:77:b6:9c:aa:f5:95:0f:a7:37:e8:
b0:1e:ba:69:e3:52:ef:8e:6f:6e:45:c7:25:15:c4:
68:64:98:2e:0e:da:49:2b:15:7e:7d:13:ce:b0:e8:
12:bf:6a:b9:93:58:93:c4:cf:c6:49:e2:d9:d0:8c:
2c:7a:79:c2:7f:ef:b5:7e:db:eb:6d:bc:8c:db:19:
96:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CD:FC:8A:7A:4C:08:86:C4:05:8C:A8:F6:D0:A6:0A:37:BB:92:CF
X509v3 Authority Key Identifier:
keyid:3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:1d:d6:70:88:4d:c9:bf:b5:57:2a:81:0c:1e:28:e5:31:58:
02:62:a8:46:4b:d4:20:fa:55:06:ff:91:9b:eb:43:66:54:3f:
6c:4f:15:aa:27:0d:c2:0b:f2:d4:ae:aa:af:bc:f8:ed:0e:2e:
1c:45:5d:77:09:ff:5b:97:be:84:4b:cf:39:02:a3:e3:6c:e2:
6e:87:d4:9d:ce:9a:22:78:49:46:8d:6b:93:26:f1:81:71:ac:
f3:63:7a:17:1f:d8:99:18:b0:8f:57:77:6c:4d:b0:b3:a1:4a:
cd:f9:2d:54:5d:51:92:60:7d:d7:b8:da:aa:65:70:9c:17:56:
8b:9d:08:d3:44:4b:2d:b1:3d:9a:f1:6b:e5:d4:31:a5:9e:cb:
48:bb:18:d1:e9:11:ee:e4:42:c7:75:0e:8a:51:f1:0c:52:f1:
6f:50:81:6e:eb:dd:6e:0c:19:fd:82:35:9c:7d:21:cb:03:33:
52:6b:62:0c:90:a0:a0:66:6f:71:6c:be:14:63:6f:74:25:af:
3d:3f:00:20:6c:99:61:01:82:7e:63:66:67:80:8e:a0:34:f8:
93:b6:a3:2e:06:90:f7:76:91:ea:61:cd:b0:73:3e:67:20:35:
05:77:3a:7e:b6:3f:f3:d0:e6:83:82:c1:1d:89:22:e5:94:ba:
28:b0:b0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:47 2026 by rpki-client