Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
File: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft (raw, json)
Hash identifier: mOOk+sccdlIlkogaKn4jtXaLkRMSkW3vjXEvz2kH+1M=
Subject key identifier: 33:BD:96:7C:F1:A2:B9:ED:E6:C1:DA:3E:45:2A:45:04:99:0F:9D:95
Authority key identifier: 3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
Certificate issuer: /CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Certificate serial: 019D281684DA78AE55527F8B43050D42049B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
Manifest number: 1223
Signing time: Thu 26 Mar 2026 03:00:57 +0000
Manifest this update: Thu 26 Mar 2026 03:00:57 +0000
Manifest next update: Fri 27 Mar 2026 03:00:57 +0000
Files and hashes: 1: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl (hash: AYpZcoyi7niuOoZM70OOPGNYj6NbTQUkG13XCajDjHs=)
2: Rc1JKlzBWJzMspxz5Sz8_wKGjSQ.roa (hash: YXV2SDD7Lq/HvpspFTkxAD7KLYHXbsXZfXUiY1m7rzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:84:da:78:ae:55:52:7f:8b:43:05:0d:42:04:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Validity
Not Before: Mar 26 03:00:57 2026 GMT
Not After : Mar 27 03:00:57 2026 GMT
Subject: CN=33bd967cf1a2b9ede6c1da3e452a4504990f9d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d1:16:6f:27:29:27:98:da:26:81:3d:5a:5c:
13:1e:12:c8:f2:ae:7f:c4:3d:5d:bf:74:f5:40:fd:
26:a4:23:42:db:aa:45:eb:3d:62:60:0e:fd:a5:af:
e1:60:f7:da:35:2c:60:1d:40:31:56:91:0e:ba:a9:
46:00:56:ac:3e:0c:1f:4c:49:fe:0a:dd:57:d9:63:
09:39:36:f8:60:80:40:fb:bb:29:e5:a5:18:ae:fe:
f0:46:0e:47:fc:b9:b8:6c:8c:5c:96:30:d3:33:78:
8c:c0:20:53:3b:2d:1a:9c:6e:a8:be:82:44:f0:0c:
04:78:ef:94:db:dc:57:61:14:ec:6f:5f:e9:5c:61:
67:42:e7:ed:20:d3:d4:e1:6d:8a:fd:22:43:94:af:
ef:70:79:fa:08:4e:53:11:0a:f9:38:12:06:cf:b3:
f0:7c:51:80:af:16:85:57:c2:1d:43:3b:8b:bb:81:
11:f6:96:ca:73:7b:3e:42:07:10:2b:19:5c:ed:46:
41:10:72:46:16:e8:09:a5:7c:36:ec:ae:93:d3:f4:
7e:97:8d:8f:55:ce:19:b7:35:ec:5f:cb:47:67:ec:
e7:de:d5:f3:77:4e:0a:db:68:7e:d1:81:6d:1e:92:
02:bb:b8:aa:33:f2:d1:f1:48:b2:6b:4c:ba:29:9e:
d0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BD:96:7C:F1:A2:B9:ED:E6:C1:DA:3E:45:2A:45:04:99:0F:9D:95
X509v3 Authority Key Identifier:
keyid:3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:66:63:7b:fc:4d:91:13:88:29:a7:04:12:9b:fc:d6:a5:5a:
ea:34:05:d7:f4:a8:b1:6b:b2:8a:65:d4:3d:87:78:64:c2:22:
57:c0:9f:74:cc:7e:6c:58:4f:54:b0:7d:43:70:f2:3e:07:36:
ce:64:2e:ec:2f:7a:b6:b8:49:55:85:29:2e:b0:da:c1:a9:74:
8b:63:c9:c8:dd:b5:34:21:bc:9c:18:60:9b:29:32:14:dd:67:
72:cd:ce:9e:fe:2d:5c:90:e3:dd:fd:40:1d:6e:5b:0f:b0:bd:
00:ac:d0:f8:ac:06:31:55:2f:4b:f3:5b:2d:42:0d:1a:cb:be:
b6:de:79:fb:a7:72:eb:d3:6e:21:b1:1c:44:55:83:e1:94:64:
46:47:b2:5a:75:ec:db:11:5d:07:24:1e:d6:e0:ba:6e:00:1f:
33:57:81:df:a3:95:f4:c8:8b:0c:6b:96:e4:b7:94:e9:5b:36:
67:f6:17:58:35:2e:b9:5e:2d:3a:e4:3f:00:58:ce:5f:71:c0:
2f:ee:58:63:c2:53:3f:5c:e2:77:1c:a1:c6:8b:cd:a9:66:c5:
3d:c4:31:79:9b:8d:2e:c1:2d:de:e6:f0:42:14:04:43:64:5e:
39:14:0b:de:a8:6b:ea:8a:69:5b:9c:d6:b5:a8:33:f6:f9:a0:
28:c1:90:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFoTaeK5VUn+LQwUNQgSbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYTU1NDA5OGM3YTg4YWEzNDI2NGI5MmQ4YmYyMjU3ZWMw
YmNkYTQwHhcNMjYwMzI2MDMwMDU3WhcNMjYwMzI3MDMwMDU3WjAzMTEwLwYDVQQD
EygzM2JkOTY3Y2YxYTJiOWVkZTZjMWRhM2U0NTJhNDUwNDk5MGY5ZDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytEWbycpJ5jaJoE9WlwTHhLI8q5/
xD1dv3T1QP0mpCNC26pF6z1iYA79pa/hYPfaNSxgHUAxVpEOuqlGAFasPgwfTEn+
Ct1X2WMJOTb4YIBA+7sp5aUYrv7wRg5H/Lm4bIxcljDTM3iMwCBTOy0anG6ovoJE
8AwEeO+U29xXYRTsb1/pXGFnQuftINPU4W2K/SJDlK/vcHn6CE5TEQr5OBIGz7Pw
fFGArxaFV8IdQzuLu4ER9pbKc3s+QgcQKxlc7UZBEHJGFugJpXw27K6T0/R+l42P
Vc4ZtzXsX8tHZ+zn3tXzd04K22h+0YFtHpICu7iqM/LR8Uiya0y6KZ7Q3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDO9lnzxornt5sHaPkUqRQSZD52VMB8GA1UdIwQY
MBaAFD6lVAmMeoiqNCZLkti/IlfsC82kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHFWVUNZeDZpS28wSmt1UzJMOGlWLXdMemFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80NzY3Y2UtNDQ0OC00MzZiLWE5MTAt
NjZkZTk4NjVkYmFjLzEvUHFWVUNZeDZpS28wSmt1UzJMOGlWLXdMemFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy80NzY3Y2UtNDQ0OC00MzZiLWE5MTAtNjZkZTk4NjVkYmFj
LzEvUHFWVUNZeDZpS28wSmt1UzJMOGlWLXdMemFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkGZje/xN
kROIKacEEpv81qVa6jQF1/SosWuyimXUPYd4ZMIiV8CfdMx+bFhPVLB9Q3DyPgc2
zmQu7C96trhJVYUpLrDawal0i2PJyN21NCG8nBhgmykyFN1ncs3Onv4tXJDj3f1A
HW5bD7C9AKzQ+KwGMVUvS/NbLUINGsu+tt55+6dy69NuIbEcRFWD4ZRkRkeyWnXs
2xFdByQe1uC6bgAfM1eB36OV9MiLDGuW5LeU6Vs2Z/YXWDUuuV4tOuQ/AFjOX3HA
L+5YY8JTP1zidxyhxovNqWbFPcQxeZuNLsEt3ubwQhQEQ2ReORQL3qhr6oppW5zW
tagz9vmgKMGQoA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:59:08 2026 by rpki-client