Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
File: PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft (raw, json)
Hash identifier: UTsBexkOsVBUWMPGN8OOrqzuTq4iLwPLNVfMkjzPsk4=
Subject key identifier: A5:13:53:75:01:75:31:E4:2B:07:99:BD:64:EF:23:1C:50:A5:60:F6
Authority key identifier: 3D:0B:E4:AE:38:73:55:54:CD:11:81:0A:9C:7D:20:30:19:04:01:98
Certificate issuer: /CN=3d0be4ae38735554cd11810a9c7d203019040198
Certificate serial: 019E1E6C462EE30EBBD6F3AE53DDFF1561D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
Manifest number: 02EB
Signing time: Tue 12 May 2026 23:01:12 +0000
Manifest this update: Tue 12 May 2026 23:01:12 +0000
Manifest next update: Wed 13 May 2026 23:01:12 +0000
Files and hashes: 1: PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl (hash: n3tS8pP93+l0cLyxoDZk2YHQOZLmUsPfwbi92bKbt2o=)
2: xz923TuXOINB3WLY3XLk0pyQs6s.asa (hash: SGmXF+mIU3rmhMsPtkMgk1YdAxdF0xFT+cRVzGK/gGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:46:2e:e3:0e:bb:d6:f3:ae:53:dd:ff:15:61:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0be4ae38735554cd11810a9c7d203019040198
Validity
Not Before: May 12 23:01:12 2026 GMT
Not After : May 13 23:01:12 2026 GMT
Subject: CN=a5135375017531e42b0799bd64ef231c50a560f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ac:39:13:4f:14:9b:7a:8a:5a:b9:9a:63:76:
1a:f7:9d:f4:40:92:bb:d5:db:e0:1b:7d:0c:c5:43:
db:76:33:c6:12:a3:ab:a9:de:dd:eb:6f:aa:1f:61:
15:05:e2:31:02:07:53:a9:7f:ab:70:3b:06:c1:b2:
d9:a3:1d:00:01:91:6f:cc:86:8a:cf:4a:95:45:a1:
fa:d6:5d:e6:8b:84:54:f9:dd:03:29:d4:a2:15:e9:
27:bd:a8:4e:0f:4f:bf:b1:7d:fc:c2:7b:2d:1b:37:
e7:19:3c:b9:fe:68:12:e7:b0:f8:f2:a8:a2:5d:38:
c4:bf:28:e0:db:fe:52:aa:a7:4e:31:8f:3e:59:fa:
16:e0:2a:6a:f7:ee:b5:2a:06:5a:af:e4:4f:60:61:
09:10:1b:cd:3c:27:26:37:ef:7d:70:b2:1b:a5:6d:
1c:a8:33:32:36:ea:c2:8d:5f:14:bd:79:95:4f:b1:
d7:b7:e3:1e:6a:a2:cf:36:e8:a8:1d:e4:db:98:04:
26:a8:6c:64:57:41:bc:79:bb:7f:39:bb:a1:60:e9:
f7:0e:9b:fd:cc:7f:e0:64:9f:f6:a1:33:05:82:8e:
ce:e8:1f:0b:96:27:d4:08:1f:53:e7:77:95:95:43:
55:4b:1d:aa:6b:26:98:b6:68:40:aa:21:7d:f6:60:
d0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:13:53:75:01:75:31:E4:2B:07:99:BD:64:EF:23:1C:50:A5:60:F6
X509v3 Authority Key Identifier:
keyid:3D:0B:E4:AE:38:73:55:54:CD:11:81:0A:9C:7D:20:30:19:04:01:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:b3:9b:99:b0:96:73:b3:f6:a9:f0:76:df:0c:c5:14:46:16:
06:bf:52:00:06:43:ee:e6:ec:86:09:c9:3a:c9:d6:ec:e5:10:
78:d6:93:11:4d:17:95:78:1c:ff:8e:5e:2c:8a:64:7e:90:37:
66:af:0e:16:54:dc:2e:bd:1c:cc:94:1d:bc:6c:d5:a7:7e:ce:
79:3c:a6:67:a1:75:6b:3e:eb:84:f8:cb:d9:75:29:7f:32:70:
88:6b:7a:0f:d9:d1:9b:41:6c:f4:12:a7:b9:01:b3:9b:40:56:
0a:10:6e:1b:c4:6b:45:38:d0:56:36:02:b4:66:1b:4f:2a:3d:
01:78:9c:93:13:7e:f4:85:da:a0:53:94:23:f5:21:a3:26:92:
4b:4f:01:7e:53:0c:fb:1f:8a:e7:8b:02:18:43:88:cc:d7:ce:
4c:f5:ef:0e:aa:29:6c:00:76:9b:93:cc:5f:b1:54:ea:2f:db:
16:2f:17:b7:a8:44:66:5a:3c:84:9b:b6:16:d1:01:e8:cc:35:
a4:92:8e:70:d0:6d:c0:10:98:9f:36:ce:61:9a:4c:cb:00:c9:
dc:5f:bd:0a:67:45:66:8c:9e:84:05:fd:e0:29:90:2e:43:f2:
d3:15:35:35:32:20:80:8c:ec:e9:df:ae:bd:1f:b8:cc:e6:5d:
1c:96:7f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:48:53 2026 by rpki-client