Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
File: PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft (raw, json)
Hash identifier: RQ2SQ+1tyYIzVuz+ic0j0Dwx1wzei/49EM9tSMMFVMU=
Subject key identifier: C4:9F:99:6E:39:5A:F7:74:E1:47:9C:79:6C:95:74:BE:DD:8B:C0:25
Authority key identifier: 3C:CA:84:9B:37:50:15:F4:33:E9:A2:40:EC:AB:F0:3C:F1:52:C7:81
Certificate issuer: /CN=3cca849b375015f433e9a240ecabf03cf152c781
Certificate serial: 019D3A8A9A7ACD6871E1B77DE13B654D0468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 17:00:55 +0000
Manifest this update: Sun 29 Mar 2026 17:00:55 +0000
Manifest next update: Mon 30 Mar 2026 17:00:55 +0000
Files and hashes: 1: PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl (hash: d2RzSHjbgazOR5VeZ+8fa6Uz9eC7gGpdvorHoMwURoU=)
2: ZF9EAOYUL63fX_K72Oa83qsiY90.roa (hash: qJmN8WRTqe/THyiR/N1Q9A4OK8XBEhImcFksk6kb4Ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:9a:7a:cd:68:71:e1:b7:7d:e1:3b:65:4d:04:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cca849b375015f433e9a240ecabf03cf152c781
Validity
Not Before: Mar 29 17:00:55 2026 GMT
Not After : Mar 30 17:00:55 2026 GMT
Subject: CN=c49f996e395af774e1479c796c9574bedd8bc025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2c:aa:26:21:de:24:ae:05:4c:25:4a:fb:9f:
d9:46:cc:d1:6d:09:ae:44:d7:6d:c3:59:2d:e5:07:
ae:0d:11:a2:8d:0b:3a:ca:38:ce:c5:9b:f4:85:26:
41:25:b6:21:0a:30:d8:d7:d0:7a:4e:4f:8e:16:b7:
3e:0a:37:0b:2f:7d:a7:9c:b7:58:08:89:ad:6d:06:
b9:10:7c:57:13:3f:a3:d5:d0:d5:6c:e4:54:4f:78:
ed:72:c4:bc:25:5a:f5:44:74:75:5f:81:83:4b:d4:
ab:2b:4c:0d:e6:2e:a9:9a:ad:25:60:f7:3a:8e:46:
ff:37:a6:0c:8a:7c:b7:a1:b0:fb:8b:cc:2f:32:5f:
de:bc:ce:63:80:60:3c:f9:5e:c4:a5:46:f9:da:ca:
e8:19:ec:dc:f3:7c:69:df:3c:a5:74:a4:ff:4c:69:
84:9f:4c:53:b2:e6:d3:85:b0:d7:1f:a7:69:d9:c4:
69:6f:c5:4d:10:11:89:10:7b:0b:61:5b:01:fe:2b:
2b:24:cc:4d:60:98:e4:7a:5a:fe:04:db:3d:58:9f:
f8:26:78:0b:a6:cb:78:26:17:53:5d:4a:db:2b:5e:
54:09:06:70:35:32:3a:5a:1e:30:41:96:78:d9:a7:
71:e2:05:bc:00:32:c8:13:ec:e0:18:55:f0:14:56:
66:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9F:99:6E:39:5A:F7:74:E1:47:9C:79:6C:95:74:BE:DD:8B:C0:25
X509v3 Authority Key Identifier:
keyid:3C:CA:84:9B:37:50:15:F4:33:E9:A2:40:EC:AB:F0:3C:F1:52:C7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e9:75:c8:37:55:e9:14:0e:5e:02:57:64:f4:f1:47:52:d5:
87:11:1b:2a:d6:95:52:5c:b6:37:ea:ce:c7:dd:06:93:32:4d:
62:7d:3b:13:bb:1b:2d:2e:99:a4:99:f9:3c:bc:48:91:30:c8:
3e:f6:0c:0e:9b:01:5b:f4:a3:37:bc:4b:81:11:85:72:5a:eb:
b3:34:d3:46:6d:dd:fd:a5:1b:d0:90:03:f7:52:13:d0:0a:ac:
43:ed:4e:16:34:4f:f0:f0:f6:69:0d:c6:1b:62:58:b6:99:2a:
89:bc:42:22:68:86:43:31:0d:5f:b2:d9:c0:56:b0:87:46:3c:
d8:50:c5:a2:ed:37:c9:58:3f:b0:3c:6e:ba:cf:82:05:d7:45:
8c:02:13:8b:ba:cc:65:1b:2e:73:8c:c8:f9:53:79:ea:c6:54:
00:a9:e2:7a:3d:6a:6a:58:d2:84:5f:09:9a:9b:4d:e7:ed:56:
90:01:1a:ca:58:2a:16:da:6e:35:4a:e3:56:cc:0d:98:ab:21:
9a:1a:ac:95:b2:ea:ee:ac:09:03:c3:9f:b3:c5:3c:c8:e8:10:
eb:ce:f9:15:39:87:e7:99:25:f4:d2:24:2d:a3:ed:ba:e7:14:
b6:74:d1:be:71:ba:5d:8c:38:c5:20:ef:71:44:76:79:91:c1:
0d:cc:9b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:48 2026 by rpki-client