Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft
File: PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft (raw, json)
Hash identifier: 0OGhfUKJgAGqImLMD51XXvRbWBRsRY57sNhM2cNGrno=
Subject key identifier: B2:42:35:45:F9:75:AA:FF:2C:A2:9F:FA:13:88:DE:1B:F6:34:9F:0E
Authority key identifier: 3C:48:B9:2E:80:94:D7:78:02:17:E3:25:4C:59:72:0B:C2:A9:76:38
Certificate issuer: /CN=3c48b92e8094d7780217e3254c59720bc2a97638
Certificate serial: 019F1152BFFC6F6FC075B81675CC70ADE0E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEi5LoCU13gCF-MlTFlyC8Kpdjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft
Manifest number: 029D
Signing time: Mon 29 Jun 2026 03:01:03 +0000
Manifest this update: Mon 29 Jun 2026 03:01:03 +0000
Manifest next update: Tue 30 Jun 2026 03:01:03 +0000
Files and hashes: 1: PEi5LoCU13gCF-MlTFlyC8Kpdjg.crl (hash: tYXuiDcDW0/O9Rp+azja7g9Tp0ZGH+QsV7QZHRx0veo=)
2: Xu6LJ5NwOjulzYk7ThddVSSoUcw.roa (hash: lwbMkRX85sGp49MdbyhTOstP4KWwGOTsiskzrGm1TQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEi5LoCU13gCF-MlTFlyC8Kpdjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:52:bf:fc:6f:6f:c0:75:b8:16:75:cc:70:ad:e0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c48b92e8094d7780217e3254c59720bc2a97638
Validity
Not Before: Jun 29 03:01:03 2026 GMT
Not After : Jun 30 03:01:03 2026 GMT
Subject: CN=b2423545f975aaff2ca29ffa1388de1bf6349f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3f:40:17:e8:1d:d9:08:d2:14:d8:96:ad:73:
59:10:a5:99:96:c5:5d:7d:2b:d2:ed:18:75:80:d0:
d0:da:ed:e0:95:0e:0a:19:df:73:29:41:2b:1f:32:
dd:d7:2c:2f:e0:b7:de:55:01:1d:6b:57:91:31:68:
0e:bb:9d:8a:77:13:00:12:a4:be:9f:da:0e:e6:8a:
b7:d4:cd:2e:14:d1:ad:6f:cd:e2:8b:8d:01:60:b8:
56:cf:82:a3:d0:7d:c5:6a:b4:1c:c0:51:d5:88:9e:
ca:cb:47:37:95:5f:5e:4b:87:b6:20:0e:fa:b3:07:
f7:e1:02:9b:64:1d:d6:5b:49:35:84:6b:c2:9b:84:
1f:a6:93:d8:86:1e:07:b9:64:a7:13:46:8c:62:a0:
0c:be:53:21:fb:0e:b5:a1:b3:44:c0:af:7d:d2:5e:
36:cc:96:73:35:49:6f:6b:75:bf:73:85:cd:07:cc:
5d:23:e1:3f:3c:c9:2d:c1:2a:57:2d:51:df:d5:39:
0e:49:d6:70:ea:65:d0:8d:84:bf:52:33:65:df:4a:
15:6d:6e:5b:98:53:36:6f:d9:e5:68:ec:2d:05:c4:
18:f4:0e:75:a4:4d:b9:97:f7:55:0a:c9:47:c1:b3:
e8:ff:d7:f6:72:02:d7:e6:45:db:91:9c:2d:06:30:
02:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:42:35:45:F9:75:AA:FF:2C:A2:9F:FA:13:88:DE:1B:F6:34:9F:0E
X509v3 Authority Key Identifier:
keyid:3C:48:B9:2E:80:94:D7:78:02:17:E3:25:4C:59:72:0B:C2:A9:76:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEi5LoCU13gCF-MlTFlyC8Kpdjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:1f:50:ee:81:43:a4:e4:d7:08:78:9c:18:72:eb:55:1f:09:
93:1c:38:b4:0c:12:d3:a8:b3:21:b3:48:d0:f1:65:5d:5c:87:
2e:61:e9:24:43:c7:a0:98:8a:e9:8f:8a:f8:d0:16:14:49:7f:
e6:12:bc:f4:48:77:e3:2c:bc:9a:62:f1:15:87:0d:39:d9:2d:
db:09:86:3a:79:fb:b2:ed:b5:f5:55:2f:d7:e7:29:d1:07:d8:
96:44:1f:a3:8e:ad:a3:5e:01:87:e8:af:ab:a5:ae:99:46:ca:
12:d4:d9:b2:25:44:1f:80:b6:bd:af:93:00:ab:d6:d7:44:ce:
fa:4a:cd:cd:a1:f3:c6:b2:fc:56:39:40:ed:9f:78:f3:4f:f1:
d6:84:ff:2d:50:4e:41:69:4d:10:a4:29:17:60:b5:60:92:1c:
1e:ec:ad:dc:96:83:3e:5e:3c:34:97:75:2f:3c:35:f1:b1:5c:
57:8a:f8:fe:9c:b2:fa:f2:38:1e:42:97:30:d1:7f:fa:a1:2d:
a7:b5:dc:6e:30:93:84:77:1a:9d:a1:99:60:be:dd:a6:ab:1b:
9b:23:1b:d7:88:1f:76:20:33:03:55:51:c8:76:24:d0:12:87:
e4:77:e7:d2:7b:cb:42:df:ef:84:e9:e1:c9:11:c7:a5:a2:b8:
ab:ee:56:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:10 2026 by rpki-client