Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
File: PtQqBIdwVgYBXlow2h5w9Aflnpk.mft (raw, json)
Hash identifier: K0zb9qi2dAupxArUfl/uGZgzjClEo99tKx1dVM8TdJM=
Subject key identifier: 43:9D:A7:95:36:8B:84:F9:74:FB:EF:9D:25:5D:DF:C6:E8:13:99:2C
Authority key identifier: 3E:D4:2A:04:87:70:56:06:01:5E:5A:30:DA:1E:70:F4:07:E5:9E:99
Certificate issuer: /CN=3ed42a0487705606015e5a30da1e70f407e59e99
Certificate serial: 019D37C0B74DDB3C88DCA467B1D2994DB954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 04:01:09 +0000
Manifest this update: Sun 29 Mar 2026 04:01:09 +0000
Manifest next update: Mon 30 Mar 2026 04:01:09 +0000
Files and hashes: 1: PtQqBIdwVgYBXlow2h5w9Aflnpk.crl (hash: TsMZ8y0DgdXGP8vvLDTVlrlwxpmi8pZkPraq6+0aQFs=)
2: odBM4SC03fv9qvg4-_DkLC3ibmA.roa (hash: NMg6E7qAz0hV7HQf0d2bJZ/M9xt0HNBTnuvRtP4cu6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:b7:4d:db:3c:88:dc:a4:67:b1:d2:99:4d:b9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ed42a0487705606015e5a30da1e70f407e59e99
Validity
Not Before: Mar 29 04:01:09 2026 GMT
Not After : Mar 30 04:01:09 2026 GMT
Subject: CN=439da795368b84f974fbef9d255ddfc6e813992c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:32:1e:f5:ea:ff:43:f7:ea:d6:b6:65:9c:e8:
96:8c:91:66:75:0d:53:7a:44:8c:59:12:09:34:c1:
ee:6a:30:93:21:07:92:49:3b:66:19:86:f9:fd:6b:
a9:3b:4e:b3:3a:a9:32:95:d2:2e:a3:6b:4c:71:ac:
6e:4f:59:4a:da:6f:ee:96:af:2a:5f:00:f6:a2:16:
80:31:19:be:0c:ea:ce:b7:d6:78:b5:37:76:bc:1a:
1c:67:a7:17:52:4d:87:41:cb:74:b6:d1:4a:12:be:
e6:5f:3a:4d:27:e0:0e:d8:8b:47:e4:3e:b0:ca:7a:
03:a2:9a:11:f2:a6:11:a1:f9:f9:1e:4b:78:74:89:
36:05:d4:f2:94:c5:89:4a:3a:4d:9e:d8:d6:37:93:
c5:ec:67:7a:1c:32:1a:a0:39:4c:21:ed:80:ac:a6:
d6:b6:1b:03:44:c5:5d:c7:e3:2a:17:f6:b4:7c:17:
98:77:4b:b8:7d:95:e6:58:65:12:f6:aa:bf:94:1e:
da:6b:05:86:25:24:18:49:35:7a:40:55:f3:d0:02:
bb:46:df:ae:e6:5a:fc:04:e2:2b:59:37:40:e0:4f:
22:ea:88:f8:35:89:f5:e7:79:88:ed:b5:f6:d2:a1:
47:1c:3d:0c:94:c5:f9:6b:38:8e:c1:11:8a:09:d0:
ca:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9D:A7:95:36:8B:84:F9:74:FB:EF:9D:25:5D:DF:C6:E8:13:99:2C
X509v3 Authority Key Identifier:
keyid:3E:D4:2A:04:87:70:56:06:01:5E:5A:30:DA:1E:70:F4:07:E5:9E:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:50:9f:93:54:a2:ab:94:4b:7a:16:d7:3a:52:6e:22:33:cf:
2b:87:23:c4:1e:8b:7e:a5:a6:5c:a5:5d:3f:bd:24:f8:bf:35:
32:af:f9:c5:5b:78:5e:2b:23:2d:62:5e:ed:f3:3a:db:3b:58:
69:36:ab:00:d6:e2:4d:62:0d:6d:15:3b:b3:35:de:d6:b3:c4:
55:07:0e:37:59:09:b8:b9:f7:ed:77:59:d3:12:51:e7:fe:c7:
20:83:b9:10:9d:42:34:3f:09:20:91:67:68:de:44:2a:20:1b:
8c:79:2d:ca:0e:2b:62:63:23:b8:46:be:0f:0a:1f:6c:bb:9c:
d8:dd:fc:ee:8c:4b:16:30:df:89:2d:e0:13:3f:80:31:44:3d:
19:08:c5:a9:76:09:a8:a7:fa:4f:14:18:40:31:82:b0:51:a2:
be:68:42:04:1a:0f:bf:a3:54:56:f4:5b:22:7f:8d:1f:ef:ad:
97:8e:92:17:e0:3e:02:d0:31:4a:38:2d:3a:94:14:d1:bf:97:
04:c0:50:18:45:46:28:e9:db:9e:f4:07:fa:70:56:ed:96:1b:
5d:17:fe:9c:90:44:70:e8:41:36:70:65:1e:81:a4:94:d3:ef:
31:53:5c:1b:5e:56:bc:69:ab:dd:c2:88:0e:8d:a3:53:5f:24:
76:24:45:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:41 2026 by rpki-client