Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
File: PqGMkbK-KKB0uaOHSpC0RgE84b4.mft (raw, json)
Hash identifier: eHxReoIei7jSNGxHrNPsa5NtZt71D1IWiO8ZLupg0aI=
Subject key identifier: 3C:86:73:97:77:01:DF:46:4C:5E:7B:9C:74:CF:94:90:EF:A1:D1:91
Authority key identifier: 3E:A1:8C:91:B2:BE:28:A0:74:B9:A3:87:4A:90:B4:46:01:3C:E1:BE
Certificate issuer: /CN=3ea18c91b2be28a074b9a3874a90b446013ce1be
Certificate serial: 019E995F3C9C438FCD0FAFEF581B6172971E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqGMkbK-KKB0uaOHSpC0RgE84b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
Manifest number: 06DC
Signing time: Fri 05 Jun 2026 20:00:15 +0000
Manifest this update: Fri 05 Jun 2026 20:00:15 +0000
Manifest next update: Sat 06 Jun 2026 20:00:15 +0000
Files and hashes: 1: PqGMkbK-KKB0uaOHSpC0RgE84b4.crl (hash: +vEAlZ1ePF031naGV6Q9q5o23iPK24J4y4V2qDQCn1Q=)
2: gHuLcIKcn2iD6YpXmVRm72KupiQ.roa (hash: FWAOBqOIoer8EKcUh4bDcvJog66L4foyvXVuyT1R4Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqGMkbK-KKB0uaOHSpC0RgE84b4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:99:5f:3c:9c:43:8f:cd:0f:af:ef:58:1b:61:72:97:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea18c91b2be28a074b9a3874a90b446013ce1be
Validity
Not Before: Jun 5 20:00:15 2026 GMT
Not After : Jun 6 20:00:15 2026 GMT
Subject: CN=3c8673977701df464c5e7b9c74cf9490efa1d191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6c:38:3f:bf:5a:46:c8:fc:aa:19:36:60:c0:
c4:8a:be:91:a0:a0:93:64:c1:7f:b1:4f:f2:24:9e:
99:df:73:29:18:9e:a3:7e:30:47:99:e5:0f:e5:d6:
4e:c0:01:63:8e:55:62:f6:9f:df:d9:c1:b4:7c:51:
e4:a8:37:12:60:d8:17:77:17:4b:0f:72:57:de:c7:
0b:21:72:b2:d2:ec:fa:6b:2d:62:27:31:3b:3f:19:
a5:7b:82:bf:7e:eb:53:82:13:b7:48:87:79:92:61:
4c:6b:d1:63:ad:c5:d8:18:b7:1c:ab:be:fe:ec:e8:
ed:7b:0a:f9:a1:e7:56:c4:64:19:aa:d9:1e:c8:5f:
3b:0c:57:84:dd:0f:e2:ad:dd:3c:c6:cd:fa:f4:5e:
c7:c4:f5:3b:2e:27:9e:6d:5a:6a:c4:f7:5e:2b:a2:
a7:9b:21:98:98:4a:19:51:27:51:15:b0:48:0c:8c:
7e:26:5c:fe:ea:00:4e:11:73:cb:8e:70:01:6a:bb:
4d:ff:2a:51:30:d4:11:85:6c:51:aa:00:1d:a5:22:
dd:7a:f0:1a:c0:45:02:7a:5e:61:88:3c:d7:6c:d7:
cb:dc:a5:64:59:f3:97:21:f7:87:ad:22:cb:30:2b:
75:07:26:ee:e0:ad:fb:4e:0d:cc:55:c9:62:84:46:
73:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:86:73:97:77:01:DF:46:4C:5E:7B:9C:74:CF:94:90:EF:A1:D1:91
X509v3 Authority Key Identifier:
keyid:3E:A1:8C:91:B2:BE:28:A0:74:B9:A3:87:4A:90:B4:46:01:3C:E1:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqGMkbK-KKB0uaOHSpC0RgE84b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:02:1e:f9:e6:5e:a3:1c:f7:36:cb:48:58:5d:93:85:6c:91:
95:b1:c5:02:00:de:0c:a9:aa:dc:4a:c9:42:59:10:74:ae:eb:
34:0a:ec:f8:d0:7e:49:88:b5:9d:12:7c:6f:2d:a1:d0:80:df:
26:88:8a:37:cc:0f:85:ee:fd:56:47:82:fe:2d:bd:b1:c3:20:
a7:ef:93:3b:16:f7:4d:67:b1:98:59:f6:50:7d:fb:34:80:09:
50:e8:39:bb:ce:85:35:8f:8c:6f:a4:2d:f5:e1:bc:9e:e1:0b:
d3:7f:96:75:52:a8:3a:1e:5a:9e:24:50:4c:5c:cf:5c:58:79:
b2:e2:60:88:44:c7:0c:a1:dc:4c:86:bc:85:54:5e:2a:47:b7:
6a:87:9e:52:d0:b8:a5:37:a4:df:af:3b:b0:db:43:7e:d5:6b:
da:3f:a1:3c:24:7a:cd:1a:a9:82:94:75:42:65:12:1b:10:0c:
a6:31:d6:ab:71:5e:04:f8:59:17:26:85:04:19:97:a2:8a:22:
6c:ce:f0:ca:85:a9:f3:25:45:43:e1:54:90:72:a3:91:9e:94:
f3:1c:28:0a:6f:c0:2f:db:06:1a:3b:31:95:bf:0c:55:cc:b9:
06:cf:74:12:56:a4:1a:9b:ad:32:d3:2e:24:10:06:c1:c1:d8:
27:a7:58:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 07:00:16 2026 by rpki-client