Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
File: PqGMkbK-KKB0uaOHSpC0RgE84b4.mft (raw, json)
Hash identifier: JdynAdR/uLpoWdQyBCmPy+Ujp4Tc/2qx4eRpo2ui+9E=
Subject key identifier: 0D:33:E1:F5:1E:54:69:FC:04:DD:D1:45:86:CB:BB:F8:92:8E:3B:5B
Authority key identifier: 3E:A1:8C:91:B2:BE:28:A0:74:B9:A3:87:4A:90:B4:46:01:3C:E1:BE
Certificate issuer: /CN=3ea18c91b2be28a074b9a3874a90b446013ce1be
Certificate serial: 019DAFB2ED0797A5B981513A7199D56DF715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqGMkbK-KKB0uaOHSpC0RgE84b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
Manifest number: 0663
Signing time: Tue 21 Apr 2026 11:00:32 +0000
Manifest this update: Tue 21 Apr 2026 11:00:32 +0000
Manifest next update: Wed 22 Apr 2026 11:00:32 +0000
Files and hashes: 1: PqGMkbK-KKB0uaOHSpC0RgE84b4.crl (hash: jQ8HQPxILEYXf4Ai0p9kU66buuPNQnS8bNQfFtqKaI4=)
2: gHuLcIKcn2iD6YpXmVRm72KupiQ.roa (hash: FWAOBqOIoer8EKcUh4bDcvJog66L4foyvXVuyT1R4Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqGMkbK-KKB0uaOHSpC0RgE84b4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:b2:ed:07:97:a5:b9:81:51:3a:71:99:d5:6d:f7:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea18c91b2be28a074b9a3874a90b446013ce1be
Validity
Not Before: Apr 21 11:00:32 2026 GMT
Not After : Apr 22 11:00:32 2026 GMT
Subject: CN=0d33e1f51e5469fc04ddd14586cbbbf8928e3b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b2:a7:93:94:e1:c8:89:e8:5d:1c:d6:1a:f6:
cf:f4:97:56:b2:81:ae:62:99:3e:d2:fe:f4:1a:50:
b3:d6:46:bd:4c:40:b1:64:4c:9e:b9:2d:65:05:96:
f5:0b:bb:b0:8d:c8:a7:85:eb:34:99:4a:10:98:68:
78:55:e6:b1:f2:ed:15:74:bd:af:47:e9:03:ad:7d:
28:c1:b8:e3:66:b6:c3:d1:fd:b8:bf:5c:cc:2d:d7:
d5:5d:50:44:30:f8:28:f0:39:87:64:b4:d8:f4:c1:
03:a2:f8:3c:b4:d6:ca:06:d9:33:85:00:73:3b:0a:
12:fd:84:4a:d3:1e:3a:4c:a6:d7:52:a0:d6:88:c9:
21:f2:65:97:2d:a4:ad:73:e3:75:d9:42:9f:10:16:
5f:86:fb:4d:49:3a:dd:4c:aa:16:d0:d0:d5:58:ce:
40:5a:24:55:1a:bd:d7:07:50:df:ff:85:ec:d1:b1:
38:04:7b:f4:83:5e:d4:24:33:27:0d:a3:63:ce:8a:
22:f6:e9:1a:68:78:27:45:47:4f:73:e0:20:1f:66:
12:dd:85:dc:69:e6:9d:ba:eb:15:72:e8:49:75:e6:
64:3d:d2:d0:46:af:78:5e:53:02:1f:fc:0f:f2:bf:
4c:24:b0:89:d1:6c:46:75:79:28:f2:92:7e:49:f9:
9c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:33:E1:F5:1E:54:69:FC:04:DD:D1:45:86:CB:BB:F8:92:8E:3B:5B
X509v3 Authority Key Identifier:
keyid:3E:A1:8C:91:B2:BE:28:A0:74:B9:A3:87:4A:90:B4:46:01:3C:E1:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqGMkbK-KKB0uaOHSpC0RgE84b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:2d:dd:ef:6a:21:06:92:0b:aa:4c:00:0b:2e:90:88:ab:d3:
e1:4d:00:b3:8a:3c:fb:25:b3:48:2d:a8:10:12:17:d1:8b:7e:
10:a4:9e:de:22:0b:a2:7a:92:42:c0:bf:d7:00:8c:c8:d9:58:
8e:0a:29:88:07:82:41:5f:34:7c:cd:d4:73:bb:c8:fe:4f:a4:
89:f3:f1:a2:3a:e4:c4:c9:e2:23:5c:c7:68:69:60:3e:1c:4e:
62:de:37:fb:95:8c:b8:60:c0:20:d3:3d:b4:65:34:c9:ea:60:
24:d6:ca:dc:33:b2:be:2a:77:85:28:ed:b2:a6:22:1a:67:4b:
b1:f6:ae:83:37:a2:ea:5e:40:a3:7c:1b:80:dd:51:73:a8:af:
ee:50:e6:09:27:f1:4c:24:cc:77:86:5d:9f:a4:97:1a:47:0d:
10:cf:2c:f7:c7:35:ba:5f:17:94:9e:44:35:cb:77:74:14:55:
a2:44:30:93:ff:11:0d:2b:e3:12:30:49:e3:19:6e:1e:0e:9e:
74:db:2f:23:5d:ff:6c:f5:8f:d2:d0:04:2b:94:c7:73:ec:f6:
5c:05:cd:e7:d7:41:23:56:0c:82:e3:e8:86:6b:b2:86:7b:e1:
81:b1:4c:ba:94:47:55:aa:ce:7c:c3:6e:7a:df:ca:86:8e:a0:
86:d6:44:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 21:11:01 2026 by rpki-client