Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft
File: PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft (raw, json)
Hash identifier: J7oIcf4FROYXjxSkCh3vIu7XQPr5MS30hPNX1Dwstak=
Subject key identifier: E3:B5:C6:A2:79:95:B7:2C:A2:25:5C:7B:7E:ED:E9:CD:50:FB:46:0A
Authority key identifier: 3C:48:B9:2E:80:94:D7:78:02:17:E3:25:4C:59:72:0B:C2:A9:76:38
Certificate issuer: /CN=3c48b92e8094d7780217e3254c59720bc2a97638
Certificate serial: 019D382DDF4D04E6C46657F1DF79A793CD61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEi5LoCU13gCF-MlTFlyC8Kpdjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft
Manifest number: 01A8
Signing time: Sun 29 Mar 2026 06:00:23 +0000
Manifest this update: Sun 29 Mar 2026 06:00:23 +0000
Manifest next update: Mon 30 Mar 2026 06:00:23 +0000
Files and hashes: 1: PEi5LoCU13gCF-MlTFlyC8Kpdjg.crl (hash: mcSshw6optrGFHYZTJaOMiAudK4MtFQ+47G9fhk6IG8=)
2: Xu6LJ5NwOjulzYk7ThddVSSoUcw.roa (hash: lwbMkRX85sGp49MdbyhTOstP4KWwGOTsiskzrGm1TQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEi5LoCU13gCF-MlTFlyC8Kpdjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:df:4d:04:e6:c4:66:57:f1:df:79:a7:93:cd:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c48b92e8094d7780217e3254c59720bc2a97638
Validity
Not Before: Mar 29 06:00:23 2026 GMT
Not After : Mar 30 06:00:23 2026 GMT
Subject: CN=e3b5c6a27995b72ca2255c7b7eede9cd50fb460a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bb:08:89:b6:42:ca:19:4c:7e:a7:3e:a0:b4:
08:09:6e:36:ca:99:00:79:93:83:e4:c3:3a:78:62:
2c:77:38:59:2d:06:a3:86:c8:01:c2:24:7a:5c:f4:
5b:b4:15:4c:4f:17:6b:aa:db:3e:5b:d4:7c:81:28:
72:34:c4:9f:b4:3b:70:ea:bc:2b:3b:d1:ac:c3:83:
ec:de:56:af:1f:4a:d5:47:ca:67:e7:d5:53:0f:40:
2e:67:33:72:88:01:5d:65:72:5a:91:2f:a7:77:e5:
d4:36:c4:3d:ce:fe:4a:4c:ad:62:38:92:b8:a7:2e:
e0:21:6a:0e:bd:16:8b:fd:a2:f1:dc:b0:5d:56:6a:
00:3e:fd:1d:76:4e:7f:5c:95:9c:71:ce:a7:74:46:
8d:7a:5c:bc:a3:9f:c0:1b:1c:d7:15:b2:02:8a:69:
2b:0b:44:d5:b7:d6:44:78:46:ec:c1:cc:15:33:31:
be:84:dd:26:c1:33:6d:a9:01:e8:52:c3:01:9b:51:
09:ad:03:eb:74:36:1c:0e:f1:14:97:f9:7f:4a:57:
cc:50:01:aa:41:cd:32:6d:ff:9e:1c:ba:8f:e7:55:
f2:5f:49:b5:a3:b1:5f:a4:97:d2:59:ea:13:bb:f9:
d5:ff:f3:2d:fa:c2:99:f9:b1:8e:dc:fb:fd:45:73:
ff:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B5:C6:A2:79:95:B7:2C:A2:25:5C:7B:7E:ED:E9:CD:50:FB:46:0A
X509v3 Authority Key Identifier:
keyid:3C:48:B9:2E:80:94:D7:78:02:17:E3:25:4C:59:72:0B:C2:A9:76:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEi5LoCU13gCF-MlTFlyC8Kpdjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:3d:42:49:6a:2b:69:03:bc:b0:6d:95:42:52:a2:1e:15:54:
73:34:4b:6c:93:ff:7a:0e:38:ce:a6:60:14:9f:cb:11:0b:e8:
09:5b:e8:c8:8b:f6:d1:2c:a4:87:c7:32:bb:10:29:cf:79:0d:
6b:f3:d6:ed:fa:88:ed:59:a1:20:a5:d8:ec:d9:c1:ba:85:7d:
76:5f:bd:f1:c1:f4:54:c7:62:72:fb:64:93:34:f8:71:8e:8b:
8a:87:27:7a:0e:56:30:42:ef:5c:33:49:50:a4:bd:fb:85:a2:
9d:42:6d:d7:81:88:d0:75:95:33:b6:d5:fa:97:6e:f9:6f:87:
2f:17:0f:86:bd:32:dc:db:fd:e2:92:53:37:fc:b7:99:47:a6:
b5:29:cc:b5:0c:84:1b:6b:83:7c:74:c6:06:07:61:8e:7e:5f:
a3:3a:e9:5d:e4:d0:85:1f:d2:2c:b7:5a:14:16:ec:f1:25:36:
aa:09:05:4b:ed:a1:47:3c:38:bc:a2:11:c1:fc:99:dd:85:71:
dd:4e:6a:59:84:76:50:58:44:c4:98:9e:e9:87:77:35:3c:4d:
51:5e:4c:3c:aa:2e:50:12:d7:4e:5e:7d:96:55:c3:78:f6:83:
2a:ee:bb:96:68:e2:a6:79:f8:5e:94:16:94:29:5a:34:be:75:
83:a9:1e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:25:18 2026 by rpki-client