Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
File: pBdnGZEpiZeeCGEloqQaEz__3CQ.mft (raw, json)
Hash identifier: e+aUnPfANT9jIAEfv6Cu7lUKpgkwRYik9yNkYAzMNug=
Subject key identifier: E8:1E:A4:DD:D9:38:0F:57:56:1D:FC:A6:40:EF:CB:85:BF:DB:CF:9B
Authority key identifier: A4:17:67:19:91:29:89:97:9E:08:61:25:A2:A4:1A:13:3F:FF:DC:24
Certificate issuer: /CN=a4176719912989979e086125a2a41a133fffdc24
Certificate serial: 019D3A5383140750764405B756D05CA7A1B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
Manifest number: 047B
Signing time: Sun 29 Mar 2026 16:00:44 +0000
Manifest this update: Sun 29 Mar 2026 16:00:44 +0000
Manifest next update: Mon 30 Mar 2026 16:00:44 +0000
Files and hashes: 1: pBdnGZEpiZeeCGEloqQaEz__3CQ.crl (hash: zwUK5T6def7a2KmYYa7yxepl+MbYKWBgE/57ZTXPpZo=)
2: rARCZBQx81Clx2YkjkNrgwNwwGw.roa (hash: m/bTzb/MHtintyTMzTN6NuL6tPs6yNlDmOaQ8Q4iw1s=)
3: z4Ea-_smfK8pY-O7TeNPgzC6Xm0.roa (hash: 1vptVTLhkufvE9Ios5V+HLnfGDLY4lc0acUg7cG/MQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:83:14:07:50:76:44:05:b7:56:d0:5c:a7:a1:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4176719912989979e086125a2a41a133fffdc24
Validity
Not Before: Mar 29 16:00:44 2026 GMT
Not After : Mar 30 16:00:44 2026 GMT
Subject: CN=e81ea4ddd9380f57561dfca640efcb85bfdbcf9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d1:62:43:ae:44:b6:0e:13:15:c2:21:84:3c:
79:44:1b:1e:29:37:71:5d:fd:94:ff:86:c0:a1:82:
a9:d9:4c:3d:ff:f4:89:74:53:46:55:4e:5f:ea:49:
46:a9:e4:66:d2:e6:6e:46:d9:35:b8:1f:1b:5a:e1:
b3:1a:e1:94:d0:0f:5f:3a:42:43:6b:d1:b9:b8:cf:
70:80:63:53:1a:8d:be:c1:42:a3:08:a4:67:91:af:
c3:d8:b5:26:0f:09:d2:ce:2a:4a:d5:c9:7d:8f:0f:
79:a9:1f:2a:88:02:12:16:10:e2:ce:aa:1c:8f:e6:
49:ae:f5:f7:82:3a:39:64:c1:cb:fb:49:1d:43:a1:
ef:b6:ae:71:c2:8f:19:e1:f2:99:8d:58:dc:86:d6:
d4:58:86:38:8b:d8:da:33:a4:0f:b9:fe:8b:a7:a5:
e6:48:d8:6b:5d:bb:c6:6a:08:dd:7a:73:c0:94:a1:
7f:8d:9e:52:24:a4:46:55:37:bc:f6:f5:73:0e:7b:
2e:d7:ae:fc:e8:6b:c5:94:01:81:65:7a:93:f2:90:
06:24:45:1b:a7:88:0a:9e:c7:a6:7e:bb:2a:b2:b6:
0f:d9:2e:35:52:48:25:53:2b:4b:ac:6b:82:12:8c:
91:0c:f4:78:b2:c9:f7:73:33:9b:9e:59:56:13:a6:
ad:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1E:A4:DD:D9:38:0F:57:56:1D:FC:A6:40:EF:CB:85:BF:DB:CF:9B
X509v3 Authority Key Identifier:
keyid:A4:17:67:19:91:29:89:97:9E:08:61:25:A2:A4:1A:13:3F:FF:DC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:3f:85:41:9e:ef:a6:83:fe:59:82:4f:fe:fd:88:b6:0b:b5:
a9:23:04:dd:23:84:e9:77:4c:58:c1:03:c3:ca:9a:6a:a5:27:
79:e0:d7:aa:f6:74:f4:57:41:25:f0:eb:ef:27:f4:3d:d4:93:
c0:d7:0b:ae:87:02:45:51:e9:cf:67:4a:cf:82:a9:71:91:de:
cd:7e:35:dd:de:e7:85:14:7e:ed:e6:1d:42:7c:49:36:b4:9a:
2e:3e:a4:2f:cf:ec:de:63:41:9b:b6:4c:69:9d:21:d4:35:ad:
58:fb:c0:d7:b4:66:a2:74:93:82:f1:1a:a2:d1:f3:b2:09:c0:
75:9e:32:a6:31:f2:75:4b:09:15:67:c5:49:dd:06:36:20:21:
ce:97:aa:fb:aa:f2:e5:1f:66:42:ed:ed:b5:4a:96:06:36:0e:
83:0a:b6:50:ba:3d:5a:43:ba:be:f8:3f:3c:ed:f2:62:c9:df:
7a:64:b5:54:04:de:cb:bb:a5:b2:f1:e3:cf:ef:d6:f8:08:6c:
5b:f7:6d:24:98:02:12:bc:f2:42:4e:53:66:9b:e5:28:c3:73:
ee:cc:66:3e:2e:b7:d8:15:63:d5:da:07:e5:cd:ed:96:60:f4:
4e:be:a8:e0:c6:74:a9:75:9a:0a:56:40:87:a8:d8:04:66:a5:
d8:be:a4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:04 2026 by rpki-client