Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
File: PesQRGPpILRVQravGifVlQ6G6aA.mft (raw, json)
Hash identifier: 3LYGVfuYvIX7qlZvPbshSWyfpXedG29AV6sIn4mAhPo=
Subject key identifier: 23:30:E7:FE:27:D9:87:55:75:E0:17:C1:EB:2B:84:FC:21:06:4B:1D
Authority key identifier: 3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0
Certificate issuer: /CN=3deb104463e920b45542b6af1a27d5950e86e9a0
Certificate serial: 019D27DFE843B6D8E316E11199C557031D39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
Manifest number: 1658
Signing time: Thu 26 Mar 2026 02:01:18 +0000
Manifest this update: Thu 26 Mar 2026 02:01:18 +0000
Manifest next update: Fri 27 Mar 2026 02:01:18 +0000
Files and hashes: 1: 9JqUzmhn979MzWUxIBT2RPIOS8A.roa (hash: rkzdzZw7cy8e5NHHoY93mCGwkkZGsYaobB+ZGaI78YQ=)
2: K0vidJ7tM2mKOKZRaF9LzxYTcOY.roa (hash: j1Pyv97hL7TS1MOu3SXdm7zFyMsZ0tV3SkgI1mKBoHI=)
3: PesQRGPpILRVQravGifVlQ6G6aA.crl (hash: C+aiQBzW+GOqa2fNGpQnQmfOL9AH9BUsDsrbeZLifPw=)
4: Vh01heQZwiiV-5U2YWUI9ETdNp0.roa (hash: NerAxUNFCszCX2X5F5Gpmh7sivfYufWqTOLrM/cv+gM=)
5: tMuTjVPYB4qy8Lzty-HvMfNIyHg.roa (hash: 2UYLL/RMvv9f6KttdupVfDP+HWvUuHhv7cOVMA+gdLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:e8:43:b6:d8:e3:16:e1:11:99:c5:57:03:1d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3deb104463e920b45542b6af1a27d5950e86e9a0
Validity
Not Before: Mar 26 02:01:18 2026 GMT
Not After : Mar 27 02:01:18 2026 GMT
Subject: CN=2330e7fe27d9875575e017c1eb2b84fc21064b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:46:02:e5:3f:fb:40:9a:39:78:6b:b2:ce:4c:
f8:02:42:f1:95:e8:bb:d4:05:81:2c:a3:63:55:d1:
f6:97:de:53:87:03:e6:32:b2:6f:7f:32:90:c7:1a:
c4:ec:d6:af:1c:e1:36:28:07:88:ce:75:ac:25:dd:
1f:37:24:ae:d1:96:78:89:ac:fb:db:3b:b1:da:fa:
1a:02:f8:10:ab:ca:81:94:5b:f2:d3:e1:d4:d3:34:
9c:96:71:eb:f9:b4:20:49:55:90:80:71:7c:1e:48:
00:a6:ce:18:12:6d:c4:eb:87:e3:00:c6:d7:87:2d:
46:b2:97:51:7c:3c:aa:34:4d:53:43:3a:18:30:c1:
c9:0d:7e:a1:23:37:a9:6e:78:02:31:1e:18:c0:18:
4d:e4:59:84:97:28:fb:72:c6:c6:24:fa:14:08:18:
0d:09:3c:37:da:14:30:d7:b9:6d:79:74:c4:7d:36:
65:b2:32:82:96:e6:94:1c:84:de:86:f3:e8:e3:bd:
31:42:e2:a9:6b:f8:7b:34:c2:3c:17:40:ad:df:49:
23:04:64:c6:8c:12:cb:33:dd:e3:0b:af:59:43:08:
cf:44:ee:44:93:ed:b0:6b:20:da:5a:e0:5a:f2:a9:
de:fe:7c:d7:35:07:6e:18:03:3c:65:34:75:1f:62:
b9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:30:E7:FE:27:D9:87:55:75:E0:17:C1:EB:2B:84:FC:21:06:4B:1D
X509v3 Authority Key Identifier:
keyid:3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:f3:ca:55:72:ed:5a:16:82:be:10:9d:4d:3d:74:12:e6:f6:
2a:3a:51:ea:e0:0c:41:e0:d9:c6:61:9f:a7:c4:03:b0:89:41:
dc:ae:80:f4:3e:f3:44:aa:4e:50:14:35:b1:a3:a1:98:53:0e:
d5:5d:bb:d8:6b:7b:26:b7:cf:d5:b4:9e:6f:a2:1a:ca:a5:2f:
4a:5c:f0:86:96:a3:90:6d:23:d1:08:50:d3:cb:14:7d:65:97:
97:d1:a3:ba:02:89:9c:74:d8:0d:66:62:f0:3b:ea:cd:38:7a:
49:42:9c:f4:8c:dd:82:16:ed:f1:d8:f9:56:0f:98:99:5c:e8:
ab:4f:f5:f9:bd:e2:fb:80:8b:08:7e:1b:61:cd:02:e2:c7:30:
39:9f:95:00:b1:84:33:7b:fe:83:41:8f:64:e8:d8:bf:17:98:
79:d5:b0:3d:b6:c3:5f:8f:79:ef:d1:39:94:0a:0d:e8:10:96:
c6:8e:69:a9:d9:46:6f:4b:68:73:e4:69:4a:89:90:fb:a9:b3:
7b:c2:17:5f:e9:c0:f2:c6:3e:d1:4b:03:22:f7:21:a0:f3:5f:
20:69:04:a4:19:2b:fa:64:93:c7:d4:33:02:22:4d:85:03:08:
63:f3:57:33:24:d0:69:3d:be:ee:96:d5:46:46:72:bc:2a:38:
9e:4e:8f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:53:24 2026 by rpki-client