Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
File: Pme6gge4HBtHJjsf3o95uZWXA30.mft (raw, json)
Hash identifier: aXMu6Eo3gNo/+DNFcxx8Rl/WwphDYDRi+ASDIzd8HQk=
Subject key identifier: 19:4B:6B:67:BF:21:09:6D:E5:B4:18:49:28:20:64:92:8E:6A:AF:69
Authority key identifier: 3E:67:BA:82:07:B8:1C:1B:47:26:3B:1F:DE:8F:79:B9:95:97:03:7D
Certificate issuer: /CN=3e67ba8207b81c1b47263b1fde8f79b99597037d
Certificate serial: 019D28F25DF8705600724D99039AF9549630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
Manifest number: 1819
Signing time: Thu 26 Mar 2026 07:01:05 +0000
Manifest this update: Thu 26 Mar 2026 07:01:05 +0000
Manifest next update: Fri 27 Mar 2026 07:01:05 +0000
Files and hashes: 1: DJdqiSENKGFZJ1k4CQJ0qhVj-NU.roa (hash: JPyYKilJIGfMtwMBvPqVfl8PNsFxqskM2FqefiGjuEU=)
2: Pme6gge4HBtHJjsf3o95uZWXA30.crl (hash: YsBu9vB/E1Fd6Rehg6lN5VMPaKtWBOhaKQbvnfKCgWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:5d:f8:70:56:00:72:4d:99:03:9a:f9:54:96:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e67ba8207b81c1b47263b1fde8f79b99597037d
Validity
Not Before: Mar 26 07:01:05 2026 GMT
Not After : Mar 27 07:01:05 2026 GMT
Subject: CN=194b6b67bf21096de5b41849282064928e6aaf69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f5:06:1d:60:74:cd:83:17:84:b5:2d:6a:9a:
54:11:ef:20:e1:20:51:69:17:84:fd:92:c4:4b:40:
4d:ea:66:7e:47:60:eb:e5:5e:8f:22:74:97:cb:b0:
ae:c3:c2:ea:41:0e:a9:03:45:3a:c4:ef:4e:b6:3f:
a2:73:67:fc:4b:0a:29:fb:e1:99:ce:ae:0e:99:fa:
26:d3:cb:cb:04:9a:04:e7:78:0b:7f:99:d7:86:ba:
aa:f5:55:a3:77:1f:31:5f:1e:74:82:58:0c:47:08:
b4:2a:74:c7:78:76:bf:96:1d:a9:fc:ce:ac:bb:d3:
df:82:44:89:39:b7:c5:c9:cc:b1:70:a6:1b:8c:33:
17:bd:48:7e:92:58:c8:5a:54:9f:7f:5b:23:92:67:
c2:61:a0:b4:e9:4b:0e:8e:c2:c2:c4:5b:1e:84:27:
ed:1d:c6:ff:a7:c6:c1:58:39:1e:f4:fe:3f:81:23:
46:e7:71:57:a2:61:29:0b:f1:3b:d3:b4:56:ab:f7:
3a:ae:a7:e5:b2:2e:ac:c3:38:60:ac:4a:4d:f4:79:
45:c2:cd:7d:73:25:b4:d2:0e:f1:9a:be:30:52:90:
75:e1:35:37:fb:e8:8d:8c:2e:78:f7:79:81:ac:08:
41:2e:ed:3f:24:16:f4:b9:b4:c8:51:33:16:aa:41:
bc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4B:6B:67:BF:21:09:6D:E5:B4:18:49:28:20:64:92:8E:6A:AF:69
X509v3 Authority Key Identifier:
keyid:3E:67:BA:82:07:B8:1C:1B:47:26:3B:1F:DE:8F:79:B9:95:97:03:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:86:6a:57:3d:04:bd:dc:e1:7a:f3:6e:44:74:15:8b:99:8c:
68:72:4a:8d:4a:15:31:b2:f6:98:7b:c1:50:3a:ec:97:ee:26:
94:d3:e1:c6:3f:eb:ab:99:21:72:d8:fe:95:70:c7:e2:b1:c6:
99:71:50:bd:04:89:d6:a3:04:22:c3:d3:0a:00:fc:28:e5:fc:
f5:1f:76:96:7c:6e:07:4b:d5:ac:05:b3:f1:af:af:8e:6b:58:
2c:1a:de:d5:58:a4:36:87:58:b4:ff:d5:f4:2d:17:16:08:0c:
5b:aa:ed:68:6c:73:a7:b7:64:a2:85:fb:49:53:e8:33:5c:88:
4b:34:08:76:9e:10:26:ee:5e:dc:80:bb:1b:f9:18:a8:68:0a:
60:9b:3a:ad:a3:96:bf:30:99:93:1d:ff:24:45:e3:a7:94:09:
f7:30:85:ca:76:51:19:fc:f6:04:00:21:03:b2:03:09:b9:9c:
33:e3:f8:f1:76:e4:eb:ae:ac:3c:94:8c:3a:b9:12:e9:ba:8f:
6a:af:96:dd:88:46:6d:bc:fe:db:e3:fa:3e:79:2e:e5:9a:8d:
f6:95:c3:13:f5:6e:e6:c0:b8:b6:5a:9c:c6:db:78:ca:8d:b4:
e1:fc:4e:6d:12:71:af:d9:6c:e8:7b:cc:c7:62:d7:d2:53:c4:
f8:9b:95:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:57:22 2026 by rpki-client