Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
File: PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft (raw, json)
Hash identifier: VTnJGZYzDehYhaeWoEP/Qq2sr4zR3aSsJXnzj9C4eqk=
Subject key identifier: 01:98:1A:4A:F5:04:D9:35:7B:34:07:11:CF:16:56:A1:05:E0:C2:B1
Authority key identifier: 3D:0B:E4:AE:38:73:55:54:CD:11:81:0A:9C:7D:20:30:19:04:01:98
Certificate issuer: /CN=3d0be4ae38735554cd11810a9c7d203019040198
Certificate serial: 019F8F47654259DC8AD00527732B578452F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
Manifest number: 03AA
Signing time: Thu 23 Jul 2026 14:00:48 +0000
Manifest this update: Thu 23 Jul 2026 14:00:48 +0000
Manifest next update: Fri 24 Jul 2026 14:00:48 +0000
Files and hashes: 1: PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl (hash: YPCHb4De+jPxPP6To1hhBc8ZM3e+MejgDG8t6erZEtI=)
2: xz923TuXOINB3WLY3XLk0pyQs6s.asa (hash: SGmXF+mIU3rmhMsPtkMgk1YdAxdF0xFT+cRVzGK/gGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:65:42:59:dc:8a:d0:05:27:73:2b:57:84:52:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0be4ae38735554cd11810a9c7d203019040198
Validity
Not Before: Jul 23 14:00:48 2026 GMT
Not After : Jul 24 14:00:48 2026 GMT
Subject: CN=01981a4af504d9357b340711cf1656a105e0c2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a8:bb:17:3e:36:f5:1b:6a:bb:b3:f9:41:38:
18:de:b1:55:39:ff:af:e1:26:aa:db:12:b5:a7:e9:
b1:76:34:b1:c3:18:83:d7:7f:0b:e0:bd:c0:cc:71:
29:6e:c8:74:fc:a8:4f:86:2a:e0:95:4b:62:64:6e:
fe:30:8e:18:41:55:cb:29:0e:7d:cc:d7:26:80:03:
ac:b4:e7:b1:33:d7:b7:94:b3:1f:3d:68:da:5c:01:
70:e7:5d:8b:eb:d8:71:d5:99:26:b0:2a:62:05:4c:
3d:de:63:c4:d6:58:50:40:e9:5e:6a:0f:0b:fd:1e:
94:de:07:be:d3:a3:03:fd:d0:1a:88:57:2e:19:ce:
52:75:99:cc:19:95:c8:58:d8:de:ff:b6:a7:6e:f9:
a8:dc:6b:ea:14:c4:e3:61:6f:4d:1c:37:16:6c:29:
4c:1d:4f:c6:43:03:d4:68:57:8c:8e:be:a6:4a:f2:
33:57:08:9e:b6:51:30:3c:80:6f:7d:dc:5b:b6:60:
f9:3c:36:70:6b:1b:7d:db:37:60:d4:bc:cd:e3:57:
5a:c1:53:e4:3c:ab:5a:94:47:60:6e:66:9f:89:9d:
af:bc:46:bc:62:67:63:78:ad:14:d3:f1:42:ef:41:
98:f9:d1:6d:40:97:1c:c6:40:f9:d0:23:b1:5c:bc:
72:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:98:1A:4A:F5:04:D9:35:7B:34:07:11:CF:16:56:A1:05:E0:C2:B1
X509v3 Authority Key Identifier:
keyid:3D:0B:E4:AE:38:73:55:54:CD:11:81:0A:9C:7D:20:30:19:04:01:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:32:9d:51:1f:47:21:da:bf:0f:b5:dd:c6:b6:ff:52:96:28:
90:b0:d5:2c:48:d6:ad:c6:97:63:6e:e0:ca:2a:54:e9:5b:8d:
21:52:6e:50:f7:80:b4:e6:78:24:02:9e:6a:1e:d8:68:61:62:
ad:f8:b3:33:89:37:78:e1:7c:26:62:1b:92:49:a9:e4:73:7a:
7f:1d:e7:ee:0a:f9:5c:da:1a:55:29:e9:a0:54:1f:1b:bf:f9:
1e:1d:b6:8f:32:c3:f1:1f:17:13:ae:20:40:ae:53:ee:ed:f4:
9c:06:03:51:30:dd:3e:82:3a:f0:f2:5e:36:f5:2a:bb:5a:4f:
fe:99:a1:18:10:43:bb:ac:82:55:27:22:9f:30:ff:7c:f5:02:
6d:7d:d0:a2:05:67:d3:f7:d3:c1:db:f6:c3:48:d2:51:d6:f1:
8d:84:47:e6:40:67:a6:c1:c1:5b:9b:b8:c9:a2:4e:45:8f:d7:
fe:27:8f:19:09:05:68:93:ea:45:10:ee:f2:68:8d:a1:bd:d9:
c0:e3:70:d6:a8:c7:b5:83:4d:9a:fa:ba:68:84:0f:ee:36:da:
64:68:94:3b:de:e5:dd:73:cb:87:61:91:29:27:da:a7:bf:35:
b9:9f:9d:83:38:e3:3f:8b:62:1d:0b:38:ac:68:d6:c2:77:07:
5e:e7:af:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:01:04 2026 by rpki-client