Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
File: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft (raw, json)
Hash identifier: LlpGYIn83JXdCwv6tjwP2M7xfppgBYUrkkGZFTON+zo=
Subject key identifier: BD:00:6D:CD:EC:8C:68:8B:00:40:BC:1C:12:80:91:E5:B1:0C:9B:15
Authority key identifier: 3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
Certificate issuer: /CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Certificate serial: 01A12D69F895D4BDA51003F86A209596A2BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
Manifest number: 1438
Signing time: Mon 12 Oct 2026 00:01:21 +0000
Manifest this update: Mon 12 Oct 2026 00:01:21 +0000
Manifest next update: Tue 13 Oct 2026 00:01:21 +0000
Files and hashes: 1: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl (hash: cAEMB8fNBsg3Dkgfhjfwa7N1VY7OhdZuB6OhxbN5Pes=)
2: Rc1JKlzBWJzMspxz5Sz8_wKGjSQ.roa (hash: YXV2SDD7Lq/HvpspFTkxAD7KLYHXbsXZfXUiY1m7rzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:69:f8:95:d4:bd:a5:10:03:f8:6a:20:95:96:a2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Validity
Not Before: Oct 12 00:01:21 2026 GMT
Not After : Oct 13 00:01:21 2026 GMT
Subject: CN=bd006dcdec8c688b0040bc1c128091e5b10c9b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:79:bc:12:c0:ca:74:63:8e:7f:ab:92:e7:c1:
da:c8:10:4b:7e:0d:7a:5f:56:eb:b2:88:5d:3f:3d:
76:b3:0a:52:56:09:27:cc:4e:a1:ee:7a:d8:5d:42:
2e:6e:13:78:b8:9c:47:b3:c2:2e:eb:00:fa:f8:60:
8d:c3:0a:9a:5f:f8:d8:02:ce:b1:01:cf:1d:36:b6:
73:67:18:dd:37:39:8f:e0:b5:9c:98:25:97:47:5f:
d3:63:54:59:7d:49:f8:ed:81:49:68:a9:15:69:e3:
59:e2:ed:eb:5e:4f:36:3c:eb:ca:80:8c:7c:1a:51:
39:da:a0:64:6e:80:5a:fb:17:d2:93:38:47:8a:ed:
c2:2e:26:9b:eb:72:35:6d:61:a1:54:66:03:73:31:
38:d5:0f:cb:78:d2:e8:e5:01:40:31:51:2a:0a:29:
99:df:b4:53:a5:7b:6b:df:34:da:bd:45:57:89:39:
1f:b6:75:47:81:d3:5c:40:92:ec:34:03:30:e9:f8:
f1:e6:33:44:b1:c6:58:c9:a0:f4:5d:1b:cc:10:1f:
1f:59:c7:f8:c5:7d:f1:45:85:f8:b9:10:6f:84:de:
1b:04:20:b2:d8:94:cc:e9:5a:97:62:52:3c:8b:6b:
7a:d6:9b:1d:13:af:64:6f:71:50:0e:71:4b:05:0f:
68:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:00:6D:CD:EC:8C:68:8B:00:40:BC:1C:12:80:91:E5:B1:0C:9B:15
X509v3 Authority Key Identifier:
keyid:3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:7e:af:e6:32:66:e8:5d:03:73:28:4d:50:c6:49:74:33:0d:
b1:b1:3f:e4:54:6e:2e:fe:53:1c:41:ad:2d:d3:6f:fb:2b:b6:
c2:4a:9c:f5:cc:c3:d3:f2:f7:8d:e3:84:77:f8:f1:0f:82:81:
08:f2:c0:af:d8:06:90:9e:c9:ba:43:e1:de:9a:4f:44:f8:0b:
9b:f1:86:a7:d0:88:77:65:f8:7f:21:04:ee:41:ec:2a:3e:5e:
c6:9c:c1:7f:28:ea:44:76:27:52:98:a1:b7:3e:f4:de:9a:9f:
83:77:0b:34:0b:a7:db:da:2e:cc:06:27:a9:9c:c8:17:cc:08:
57:8c:b8:69:9e:ad:6e:b2:ef:1e:70:a9:9d:bd:65:59:6d:ca:
7a:b3:08:02:d7:a2:bf:72:74:84:37:9d:53:f1:46:89:a2:9e:
83:72:78:92:4d:6e:ee:4f:8e:4c:24:63:b9:1d:56:46:ee:78:
c6:e1:8e:77:3e:f3:9a:a4:b7:ad:7b:b5:74:bd:8e:f7:27:42:
c0:50:95:8e:ed:21:b6:f9:bd:e1:f0:79:d4:e3:ae:a1:0f:91:
b4:91:44:23:d7:de:5d:a9:ba:23:bf:11:46:e1:c7:f9:d6:25:
f1:44:da:02:fa:92:25:ae:87:84:bb:10:7f:3f:0d:88:f8:3f:
b5:12:f3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:03:59 2026 by rpki-client