Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
File: pBdnGZEpiZeeCGEloqQaEz__3CQ.mft (raw, json)
Hash identifier: jujtDfQ2ARhLEA73zsqz9HB/kMOjwE+ExLV8kvE5wTc=
Subject key identifier: 90:5B:28:5C:09:D6:A5:89:30:4F:D8:03:FF:E6:5C:E5:2A:C2:71:88
Authority key identifier: A4:17:67:19:91:29:89:97:9E:08:61:25:A2:A4:1A:13:3F:FF:DC:24
Certificate issuer: /CN=a4176719912989979e086125a2a41a133fffdc24
Certificate serial: 01A11906AF6B146D287C9909A6F594B8713B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
Manifest number: 067C
Signing time: Thu 08 Oct 2026 01:00:30 +0000
Manifest this update: Thu 08 Oct 2026 01:00:30 +0000
Manifest next update: Fri 09 Oct 2026 01:00:30 +0000
Files and hashes: 1: pBdnGZEpiZeeCGEloqQaEz__3CQ.crl (hash: 3ibuJFjUzKloXZF5A4RdbmfP2MLjScnniZkGOzbY8w4=)
2: rARCZBQx81Clx2YkjkNrgwNwwGw.roa (hash: m/bTzb/MHtintyTMzTN6NuL6tPs6yNlDmOaQ8Q4iw1s=)
3: z4Ea-_smfK8pY-O7TeNPgzC6Xm0.roa (hash: 1vptVTLhkufvE9Ios5V+HLnfGDLY4lc0acUg7cG/MQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:06:af:6b:14:6d:28:7c:99:09:a6:f5:94:b8:71:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4176719912989979e086125a2a41a133fffdc24
Validity
Not Before: Oct 8 01:00:30 2026 GMT
Not After : Oct 9 01:00:30 2026 GMT
Subject: CN=905b285c09d6a589304fd803ffe65ce52ac27188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e7:9a:4b:a9:41:08:40:a3:65:21:62:66:74:
be:6b:43:cd:c2:81:b5:63:5b:1d:b6:73:c0:a3:56:
68:1f:fd:20:a7:64:d1:dc:78:62:c9:63:14:77:c9:
6c:1d:1d:0c:eb:96:84:ee:48:95:4c:db:ed:31:a6:
ed:4f:5f:15:21:d5:ac:3e:fd:ed:34:21:a6:ff:07:
d6:b9:f7:82:c1:b4:aa:72:2d:93:03:20:16:4c:7c:
3f:59:2d:81:5b:b1:c7:f5:4e:cc:53:5c:9a:5f:04:
07:c3:4f:6a:f2:29:99:31:4f:66:26:34:4d:c9:78:
6a:2a:5d:59:c6:0b:39:f8:47:5c:3b:d4:b6:98:54:
a6:69:37:ce:6e:bc:77:a5:ed:18:60:16:54:f0:f3:
c9:d7:67:a1:cc:f3:94:3a:d6:09:03:ee:f7:f7:bd:
77:c9:bf:b3:76:7f:93:6a:a8:40:a3:b0:14:f7:59:
8c:a1:a5:23:78:16:6d:36:6a:23:f7:c3:44:58:e2:
ff:88:29:04:13:2e:5b:1e:45:8f:a9:44:6b:19:2f:
57:14:b2:a2:11:77:a8:ae:f3:1a:e7:55:e1:c5:8d:
54:db:da:a5:5f:c3:95:0d:b8:47:f9:07:90:27:97:
33:84:f0:16:c3:f5:5b:22:e0:c5:d3:63:94:ef:16:
49:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5B:28:5C:09:D6:A5:89:30:4F:D8:03:FF:E6:5C:E5:2A:C2:71:88
X509v3 Authority Key Identifier:
keyid:A4:17:67:19:91:29:89:97:9E:08:61:25:A2:A4:1A:13:3F:FF:DC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:df:9f:0f:94:8c:bf:4d:1f:91:b5:52:60:1b:56:37:99:5d:
c1:00:dc:fb:3c:b7:62:c5:f4:d9:fb:9b:48:0d:c5:9b:4d:e3:
e4:f9:38:ee:71:e2:9b:24:a2:90:d7:c3:90:a4:5c:82:87:c6:
e4:8d:e0:7b:55:06:82:5c:1d:20:86:c2:c7:28:21:f9:7f:74:
47:b7:68:ee:0c:bc:55:98:81:6b:f9:15:48:ca:58:a5:a3:de:
f3:d4:63:e7:f6:65:47:61:ae:29:da:c3:29:d2:ff:d5:78:b2:
8e:dd:db:4c:3e:6d:8a:b8:d4:12:73:e4:4f:42:5b:91:7c:56:
7b:22:72:bd:ed:f4:40:20:b4:ce:ef:40:91:70:67:f5:7b:3c:
c9:7d:7c:a2:db:28:fc:e4:59:7d:79:9e:d6:46:dd:da:a0:34:
f7:2f:54:0e:f4:be:54:93:6d:6a:7a:6b:26:3b:c0:ac:17:67:
c2:69:18:5f:d2:95:d4:44:28:15:dd:bb:a3:91:bc:18:39:f7:
3f:5c:e9:6a:d9:a2:c9:7d:d2:33:07:75:17:db:01:22:92:17:
c1:4e:26:cd:59:9c:d4:ce:f6:5b:ae:57:b6:fc:2a:af:9f:ce:
42:6c:02:36:14:1c:a1:43:f4:27:93:2c:d4:22:48:0f:19:f9:
42:2e:1e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 03:54:40 2026 by rpki-client