Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
File: PGu5kW2QqkR3ctA_Ce37or3PN5I.mft (raw, json)
Hash identifier: 1LRxeziphEEAWbnMZPlbhz2aaUp36vf+/BPo97CSSXE=
Subject key identifier: 2A:5D:D9:6A:F0:F8:F3:1B:2C:8C:E3:B3:33:BB:B1:96:2F:49:23:F5
Authority key identifier: 3C:6B:B9:91:6D:90:AA:44:77:72:D0:3F:09:ED:FB:A2:BD:CF:37:92
Certificate issuer: /CN=3c6bb9916d90aa447772d03f09edfba2bdcf3792
Certificate serial: 019D39415F2B236B306DDB9A30BAC5A9B315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
Manifest number: 0974
Signing time: Sun 29 Mar 2026 11:01:18 +0000
Manifest this update: Sun 29 Mar 2026 11:01:18 +0000
Manifest next update: Mon 30 Mar 2026 11:01:18 +0000
Files and hashes: 1: PGu5kW2QqkR3ctA_Ce37or3PN5I.crl (hash: Vrsl5oJAI2hHrdtB3d1bh00MwA2vepx2w2sh53SCSKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:5f:2b:23:6b:30:6d:db:9a:30:ba:c5:a9:b3:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c6bb9916d90aa447772d03f09edfba2bdcf3792
Validity
Not Before: Mar 29 11:01:18 2026 GMT
Not After : Mar 30 11:01:18 2026 GMT
Subject: CN=2a5dd96af0f8f31b2c8ce3b333bbb1962f4923f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f9:03:13:5f:d8:12:42:23:9b:f3:ab:0c:c5:
ad:f3:85:cb:49:af:c2:e9:f8:95:f7:3e:5c:57:c5:
13:b5:6d:7d:87:76:db:41:b8:0a:3e:d6:13:d4:05:
09:07:dc:d9:53:06:8a:9d:1a:94:44:5c:5a:30:13:
de:20:b1:56:5b:fa:55:eb:43:39:eb:22:c0:b5:f3:
a9:69:60:31:2d:db:b5:91:7b:ee:9a:ad:de:65:6a:
b6:43:7e:3f:b5:bf:a6:2d:39:f9:f0:92:00:63:e5:
be:7f:cc:26:b6:db:3d:7c:69:75:7c:4e:bc:9e:e0:
bd:3e:67:bb:7c:3e:8d:d2:f6:67:94:12:57:a9:c2:
a4:da:5f:4e:64:49:b8:61:e7:8e:94:21:fa:45:54:
02:84:8d:a0:a8:b1:29:99:23:cc:dd:98:72:00:20:
a7:f0:61:80:64:33:d6:5b:a4:cc:0d:6e:00:52:97:
56:4a:59:ea:6d:fa:d9:6e:87:62:cd:84:97:ca:c4:
1a:8f:89:fa:d3:36:62:0f:c6:ff:05:a3:39:f4:ff:
97:50:48:60:2a:29:43:cb:c2:f2:6a:10:0c:dd:bd:
d1:9a:7c:28:21:92:ed:bb:8d:ab:09:bc:88:c2:e3:
45:35:55:6c:db:40:12:f6:0a:47:c0:18:c9:0c:ba:
9c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5D:D9:6A:F0:F8:F3:1B:2C:8C:E3:B3:33:BB:B1:96:2F:49:23:F5
X509v3 Authority Key Identifier:
keyid:3C:6B:B9:91:6D:90:AA:44:77:72:D0:3F:09:ED:FB:A2:BD:CF:37:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ac:12:de:a7:67:b0:72:b7:8f:c6:60:d8:9a:ac:27:65:da:
d9:31:35:88:9d:0c:7a:b6:c1:48:b2:c9:14:82:ed:7e:7d:d4:
59:f2:75:53:e2:03:64:0d:4c:1d:b6:0b:14:95:9f:4d:6d:6c:
15:7a:0a:0b:a3:34:d8:36:73:ab:97:c8:3a:b7:3b:24:b3:42:
25:e7:6e:69:06:1d:59:51:47:f5:a3:4b:32:7c:42:88:a1:5a:
ce:0f:89:91:24:bd:d7:b9:30:bf:89:4a:e8:a5:53:cb:1e:9a:
56:95:70:0f:1c:47:ea:2e:63:fa:9f:ea:c7:69:6e:2f:49:2b:
88:df:5a:d8:41:89:5f:48:0d:ff:1f:3d:10:0f:24:45:83:5e:
0d:cf:2e:b1:f8:b7:72:ed:bc:0c:c2:0d:11:6a:30:ff:68:c0:
3e:b9:13:bf:a5:d8:6b:b3:e0:dc:9d:72:9f:3a:7a:48:e5:d1:
cf:9e:65:38:55:1b:c5:be:01:c6:71:30:4b:3f:96:34:a8:19:
44:72:0e:2c:f5:ef:ed:a8:70:02:5c:1b:b2:7d:ea:7a:fa:74:
0b:5f:11:0a:b0:25:f3:69:03:dd:74:d7:39:ec:1b:ea:1f:82:
bc:61:b6:64:86:92:4c:06:e3:74:f1:70:72:e6:5b:b7:54:bc:
74:6b:24:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:18 2026 by rpki-client