Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
File: PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft (raw, json)
Hash identifier: /mhUKCyTKA6BR9ZlVJlUDkHOxDuQdK+O3V78VpSaIeI=
Subject key identifier: 6E:60:B2:7B:F4:C5:93:E6:21:74:77:22:1A:F2:6A:82:C9:EB:79:D5
Authority key identifier: 3D:0B:E4:AE:38:73:55:54:CD:11:81:0A:9C:7D:20:30:19:04:01:98
Certificate issuer: /CN=3d0be4ae38735554cd11810a9c7d203019040198
Certificate serial: 019D254C87C9C29E5D0CDC73418A1BF642AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
Manifest number: 0269
Signing time: Wed 25 Mar 2026 14:01:05 +0000
Manifest this update: Wed 25 Mar 2026 14:01:05 +0000
Manifest next update: Thu 26 Mar 2026 14:01:05 +0000
Files and hashes: 1: PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl (hash: 3f5ZFWdJxUa4XJvGY/p5wTxpul8GxjHQwbEkIJgUUJA=)
2: zT9KHUtxtSzxzIWfNIbM_5YrNkg.asa (hash: eQArodPkL9GT9btZe2O+IRGyIxJmz7mwSCT2keKt/1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:87:c9:c2:9e:5d:0c:dc:73:41:8a:1b:f6:42:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0be4ae38735554cd11810a9c7d203019040198
Validity
Not Before: Mar 25 14:01:05 2026 GMT
Not After : Mar 26 14:01:05 2026 GMT
Subject: CN=6e60b27bf4c593e6217477221af26a82c9eb79d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:96:e1:cf:76:20:66:81:b5:34:d3:c1:a0:b4:
86:c2:38:c7:94:d3:b8:fd:76:7d:ea:11:1e:4d:19:
f4:49:4e:9d:24:65:ef:8a:1c:f5:be:9d:c7:d4:d9:
f0:a0:ec:44:26:68:4e:92:6c:52:8e:15:c2:d6:d7:
fa:c5:52:53:2a:f9:76:cf:ef:23:4e:89:72:f3:49:
63:de:29:73:fd:cc:63:5f:0d:45:18:e7:a0:f2:e2:
9f:89:d8:cc:e0:d2:14:4c:f0:9c:9c:e2:6f:58:c0:
78:44:2b:f6:29:da:65:e7:bd:68:2e:2c:5a:2f:23:
05:ba:bf:5b:6b:a1:ff:fc:d2:cc:4a:2f:ee:e0:65:
ea:ce:73:11:96:a2:50:e7:90:78:d1:24:e3:92:93:
7a:c6:4f:eb:b4:c3:7f:27:cd:7b:95:4d:0e:41:51:
ff:45:ae:4b:b6:74:a3:23:3e:bf:db:91:64:19:77:
9a:51:00:55:ef:42:2e:1c:70:25:22:ed:b1:05:fc:
62:69:ee:d7:c8:18:58:34:f2:2f:6d:8a:8f:64:fc:
57:15:d0:2e:b7:a2:37:9f:97:74:ce:2e:e5:f4:71:
7c:5c:90:7c:4f:a1:60:f2:a6:d5:31:5f:19:df:19:
25:7d:dd:94:9e:d6:c8:d8:1a:5e:86:6d:01:9e:78:
78:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:60:B2:7B:F4:C5:93:E6:21:74:77:22:1A:F2:6A:82:C9:EB:79:D5
X509v3 Authority Key Identifier:
keyid:3D:0B:E4:AE:38:73:55:54:CD:11:81:0A:9C:7D:20:30:19:04:01:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a1:fb:37:b8:7f:a3:22:ad:0d:5e:fb:67:78:8c:ec:4b:e1:
61:6d:8b:a3:ad:fe:7f:d4:b3:fe:80:ec:fc:ec:d9:c9:23:d9:
59:bb:33:4b:e9:a1:1d:eb:74:39:e7:1e:a2:f4:08:4b:bd:ce:
f4:92:cd:14:1a:bf:6d:a7:e0:30:d4:9f:8c:4e:85:76:be:6e:
cc:83:91:88:42:40:d4:87:33:7c:e7:a6:a4:38:63:5f:73:42:
f3:42:43:2a:4b:6b:58:5f:dc:1f:3c:e7:bc:c6:6d:c2:96:8b:
b0:77:98:3f:f0:74:98:ba:d8:c3:d5:f2:78:35:e9:bc:de:c7:
3d:c2:7f:13:d9:a7:81:73:6c:52:61:ae:89:54:92:1d:65:ad:
3c:0f:bb:b6:6f:70:9c:2f:11:f4:31:6b:4e:a4:33:0c:66:0d:
de:ca:7e:ab:8f:b3:bf:ac:d6:9d:cc:aa:a3:9c:f5:35:ed:22:
80:dd:04:4d:63:e9:c6:54:c8:04:4a:75:96:6f:d3:de:d0:84:
d5:96:39:a0:8a:da:c9:11:1c:b9:64:92:6d:50:3f:e3:47:4d:
a4:0e:12:84:ec:a4:71:b5:39:b1:5c:d2:8e:c3:b4:b3:dc:b5:
06:ed:8c:70:12:3b:33:b4:15:ce:4b:cc:a7:b1:6b:5e:3d:47:
d1:1c:75:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:16:25 2026 by rpki-client