Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
File: PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft (raw, json)
Hash identifier: dT0qJz3ZRTdGNnIBxVXwNJMCbU+LaDQlJeAjms7w3ng=
Subject key identifier: CD:34:D4:50:DB:93:5F:55:15:98:D0:99:87:DF:D3:2C:D9:1B:AA:11
Authority key identifier: 3C:CA:84:9B:37:50:15:F4:33:E9:A2:40:EC:AB:F0:3C:F1:52:C7:81
Certificate issuer: /CN=3cca849b375015f433e9a240ecabf03cf152c781
Certificate serial: 019D389BEC7EF1951EEDF25047EDEBD75D49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 08:00:35 +0000
Manifest this update: Sun 29 Mar 2026 08:00:35 +0000
Manifest next update: Mon 30 Mar 2026 08:00:35 +0000
Files and hashes: 1: PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl (hash: T7Jevr663CnwdQA/qdOHHu35HO3o6HukVOe387LeZtU=)
2: ZF9EAOYUL63fX_K72Oa83qsiY90.roa (hash: qJmN8WRTqe/THyiR/N1Q9A4OK8XBEhImcFksk6kb4Ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ec:7e:f1:95:1e:ed:f2:50:47:ed:eb:d7:5d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cca849b375015f433e9a240ecabf03cf152c781
Validity
Not Before: Mar 29 08:00:35 2026 GMT
Not After : Mar 30 08:00:35 2026 GMT
Subject: CN=cd34d450db935f551598d09987dfd32cd91baa11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:d3:a7:cc:9b:29:4d:13:9b:4d:f5:5c:66:
23:4d:2f:6d:c9:0f:9d:0c:f1:1b:06:a1:21:82:9c:
ab:35:d7:e0:cf:a1:e2:5f:a9:32:48:06:91:f0:44:
60:7d:60:43:4c:c8:6d:1f:3f:77:aa:c3:0f:0b:11:
93:e0:b4:e3:2d:4e:9b:d6:4a:a2:f7:ff:d9:5e:82:
cc:d5:05:14:0c:ed:50:ac:47:53:c3:4c:44:8d:3f:
e7:75:9b:ca:ce:0d:57:be:9d:d5:eb:9a:eb:d7:57:
ef:ab:a4:b6:da:9b:cf:f6:a5:ed:f0:8a:d1:42:cc:
bd:24:44:27:6d:06:5d:82:17:65:41:1c:0e:d7:27:
0a:db:c0:e2:38:b6:11:49:57:06:ae:78:f8:c2:0f:
73:fc:b6:85:54:0d:f1:f8:b2:69:f0:dc:ab:fb:af:
21:1f:ae:99:fd:9c:bc:de:63:0c:0d:3f:79:19:2b:
bd:50:09:72:3e:e1:e9:e9:dc:9c:07:f5:38:83:55:
b3:d7:4e:75:d2:9a:37:c6:6c:79:8f:68:36:3b:b2:
67:e5:f7:0e:44:cc:55:b0:96:7f:6f:21:c7:63:82:
41:5a:87:3e:ce:7f:bd:dc:0f:64:25:a9:65:d4:bd:
ca:fc:35:5b:dd:e7:8b:2b:b6:ee:7b:3b:e2:63:09:
44:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:34:D4:50:DB:93:5F:55:15:98:D0:99:87:DF:D3:2C:D9:1B:AA:11
X509v3 Authority Key Identifier:
keyid:3C:CA:84:9B:37:50:15:F4:33:E9:A2:40:EC:AB:F0:3C:F1:52:C7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f9:22:fd:a4:e8:b4:ea:4b:ec:73:c7:2d:cc:3d:20:62:6b:
98:15:19:51:d8:4d:87:95:48:a5:8a:e8:34:67:eb:d4:93:fd:
87:1a:6e:b4:fb:c7:7e:47:9d:22:38:7e:46:ab:fa:31:c0:e8:
d8:fb:0e:db:b0:38:7a:2e:2a:8e:4f:8c:ae:85:2f:c1:6b:1c:
05:98:56:05:1a:4e:55:86:9a:9e:e2:a8:7f:32:ba:f5:5d:48:
7e:0c:9f:78:d0:24:56:bf:7f:1f:68:5e:7e:a6:fb:c9:de:63:
3b:93:7b:51:30:48:53:bb:5e:a5:33:be:91:cb:1f:93:4a:e3:
37:55:1c:74:78:56:34:a2:ee:e9:44:cb:4d:79:92:58:c9:67:
3b:98:74:22:dc:8d:f2:71:bb:ff:95:49:a6:bd:a3:26:d2:56:
2b:a3:6c:48:76:9d:5c:b0:d9:82:de:09:d7:68:a8:2c:d4:0c:
f9:6b:b2:81:15:05:c6:9c:50:bb:d5:b0:fd:5c:b1:fe:ca:2b:
02:d8:7b:4d:e6:f0:e8:5b:b2:0b:b3:d8:61:be:c0:70:17:1b:
10:c0:5d:99:c2:1e:9d:77:f1:d8:9c:0f:62:f1:6c:9e:fe:59:
6d:9e:1d:2a:3f:57:bc:49:32:d6:d4:96:6c:77:e5:0a:5c:c9:
68:74:4d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:39:06 2026 by rpki-client