Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
File: PqlK-DEYyT_-izYnXtU0mU1not0.mft (raw, json)
Hash identifier: Nc8Q4XyetyXzmvwYxK1zzHp5MSQUOGnpj62hbkwqmxE=
Subject key identifier: 92:81:33:A8:21:79:B5:D8:C0:6B:70:CA:94:F6:E1:43:7E:BC:3C:0A
Authority key identifier: 3E:A9:4A:F8:31:18:C9:3F:FE:8B:36:27:5E:D5:34:99:4D:67:A2:DD
Certificate issuer: /CN=3ea94af83118c93ffe8b36275ed534994d67a2dd
Certificate serial: 019D378930749036A4F1861F287BBE852DB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqlK-DEYyT_-izYnXtU0mU1not0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
Manifest number: 147F
Signing time: Sun 29 Mar 2026 03:00:30 +0000
Manifest this update: Sun 29 Mar 2026 03:00:30 +0000
Manifest next update: Mon 30 Mar 2026 03:00:30 +0000
Files and hashes: 1: PqlK-DEYyT_-izYnXtU0mU1not0.crl (hash: tJm62+3kum+xAc5WW+fH9v3LpShCIg2LlkrPHoYeGzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqlK-DEYyT_-izYnXtU0mU1not0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:30:74:90:36:a4:f1:86:1f:28:7b:be:85:2d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea94af83118c93ffe8b36275ed534994d67a2dd
Validity
Not Before: Mar 29 03:00:30 2026 GMT
Not After : Mar 30 03:00:30 2026 GMT
Subject: CN=928133a82179b5d8c06b70ca94f6e1437ebc3c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ca:5d:67:e1:8a:c2:5b:f5:24:78:0f:4c:18:
38:43:bc:8e:80:d8:d2:91:8c:74:02:f6:57:0f:a8:
ea:1c:31:dc:79:e1:f0:d7:5c:98:5c:5a:91:88:fe:
5d:36:5f:86:cb:c5:40:9b:b4:ba:c0:1c:ff:d6:79:
48:d2:0f:f7:48:49:1c:95:d9:f3:85:2a:6a:6e:fb:
18:25:35:93:70:95:cd:79:3a:80:e6:ee:38:3d:ff:
b5:90:c7:28:0b:25:f1:b0:20:2f:ad:7a:17:3e:90:
c2:fa:6a:d0:35:0a:b2:f6:e0:b1:3b:1d:8d:5a:cb:
e7:91:6d:9a:bf:60:b4:8b:75:4b:38:22:b2:a2:1e:
2e:53:b1:4c:c2:ab:7e:8b:f6:cd:ca:1f:0a:9b:65:
18:0a:e0:bb:0b:37:a8:d4:42:ed:74:06:2a:61:07:
5e:6e:be:36:d5:de:13:cc:55:2e:04:ad:de:36:1a:
fb:89:fd:e8:ce:d5:c4:ba:4d:6e:92:73:dd:eb:fa:
e2:40:c4:6d:12:a1:28:d0:47:55:02:0f:96:a1:b1:
2b:47:62:22:49:4f:a0:ed:9e:00:3e:6b:ca:2c:b2:
28:d8:45:7f:f0:7a:3d:e8:26:6c:78:3c:47:f5:f9:
d3:49:bc:8c:cb:4c:2f:64:af:c1:f9:57:ba:68:47:
90:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:81:33:A8:21:79:B5:D8:C0:6B:70:CA:94:F6:E1:43:7E:BC:3C:0A
X509v3 Authority Key Identifier:
keyid:3E:A9:4A:F8:31:18:C9:3F:FE:8B:36:27:5E:D5:34:99:4D:67:A2:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqlK-DEYyT_-izYnXtU0mU1not0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:ea:9e:d6:73:cf:c3:6b:b1:30:53:5d:f1:15:18:c8:e4:74:
9b:01:e1:72:fe:72:2e:e5:85:a6:62:e2:0b:87:fe:93:8a:e7:
5c:1a:cc:97:fe:3e:58:54:37:d5:54:bb:ce:48:31:2a:bf:7c:
bd:24:b0:b8:d4:8d:09:6e:e3:96:16:73:d0:a5:3c:f2:f6:49:
03:71:df:df:ac:6e:50:a0:24:9a:5a:d0:a6:7c:0f:9f:71:65:
25:56:71:27:08:15:0c:5f:e7:27:c0:17:c8:0f:65:9f:3b:0f:
2f:bd:0f:64:1e:23:fa:d6:96:aa:da:af:a9:29:58:5c:b8:c3:
9e:31:71:f3:f1:55:67:c4:8a:6f:62:e6:40:c7:7a:4b:33:b6:
62:03:c1:e4:42:c7:6c:e2:89:43:6a:71:79:b0:bc:aa:22:29:
56:a6:ba:31:a0:90:10:21:1c:2a:b7:4d:2e:63:50:a2:62:9d:
51:56:c5:ab:3e:10:74:ca:3c:51:7f:5f:3c:9a:fb:c1:f6:6d:
54:25:dd:0f:b6:99:b4:d0:5d:dc:ac:67:5b:f7:c4:7a:a5:b5:
47:e1:7f:2b:4d:db:c6:39:d0:8c:c3:1e:c7:df:1c:e1:41:a4:
df:89:4a:e8:5c:c3:1b:8c:7a:bc:b9:1a:23:fd:67:61:af:56:
29:1c:62:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:55 2026 by rpki-client