Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/04b03d-fc77-42a4-8aae-055e86630227/1/Pnv1sZoATBwX_1zn3MDPyAeH0Lk.mft
File: Pnv1sZoATBwX_1zn3MDPyAeH0Lk.mft (raw, json)
Hash identifier: oju9MKXMYPsQB6tXMAsjY+WvgWBkiPSBB7dlV/RLx5A=
Subject key identifier: 6B:FD:A4:9D:72:C2:52:C6:71:D8:E9:94:8D:6A:A8:ED:F6:23:BD:29
Authority key identifier: 3E:7B:F5:B1:9A:00:4C:1C:17:FF:5C:E7:DC:C0:CF:C8:07:87:D0:B9
Certificate issuer: /CN=3e7bf5b19a004c1c17ff5ce7dcc0cfc80787d0b9
Certificate serial: 019D277241C531CE8FEFAE5764A83FF86471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pnv1sZoATBwX_1zn3MDPyAeH0Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/04b03d-fc77-42a4-8aae-055e86630227/1/Pnv1sZoATBwX_1zn3MDPyAeH0Lk.mft
Manifest number: 01E8
Signing time: Thu 26 Mar 2026 00:01:32 +0000
Manifest this update: Thu 26 Mar 2026 00:01:32 +0000
Manifest next update: Fri 27 Mar 2026 00:01:32 +0000
Files and hashes: 1: Pnv1sZoATBwX_1zn3MDPyAeH0Lk.crl (hash: st4/CWO4QzkLU7hV2zsHPIJPuWYh3Idk7q9ZF2Bikd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/04b03d-fc77-42a4-8aae-055e86630227/1/Pnv1sZoATBwX_1zn3MDPyAeH0Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/04b03d-fc77-42a4-8aae-055e86630227/1/Pnv1sZoATBwX_1zn3MDPyAeH0Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pnv1sZoATBwX_1zn3MDPyAeH0Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:41:c5:31:ce:8f:ef:ae:57:64:a8:3f:f8:64:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e7bf5b19a004c1c17ff5ce7dcc0cfc80787d0b9
Validity
Not Before: Mar 26 00:01:32 2026 GMT
Not After : Mar 27 00:01:32 2026 GMT
Subject: CN=6bfda49d72c252c671d8e9948d6aa8edf623bd29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2b:42:05:7c:18:ce:36:c2:c9:94:0b:50:a4:
19:16:23:7d:69:ff:f2:dd:88:73:f2:91:71:70:f8:
3c:e4:81:51:29:98:8f:b4:70:17:18:04:96:96:40:
67:04:68:0c:3a:58:ea:ed:98:e1:5d:42:98:2e:c6:
79:ce:92:a0:dc:42:0d:94:40:28:e9:c2:a9:2b:ca:
c7:e7:68:da:4e:e9:9c:b5:ff:c0:a2:ad:19:e2:3c:
c1:46:c2:18:ea:be:6b:3e:ef:20:16:f7:34:45:80:
c0:01:c5:93:4f:bc:8d:9a:41:14:06:31:47:6b:6d:
f7:6c:90:69:f9:48:01:5f:0c:ff:c9:91:4e:57:b2:
81:98:7c:ec:a1:7d:f3:51:ea:28:c9:53:2d:4f:cf:
03:04:65:30:bf:6a:7b:66:b4:81:87:6d:c1:03:83:
1d:02:51:ba:f6:26:c9:4f:d8:78:2e:0b:7c:4f:dc:
29:4f:5f:a9:9f:23:34:2a:5e:a4:a3:d1:97:4c:a2:
d0:12:0c:70:95:48:17:7d:b8:09:c5:ca:10:fa:81:
76:d0:6e:b8:b7:ed:de:1d:da:8e:a7:e9:82:1e:b2:
ae:8e:71:be:50:4a:0b:40:7d:99:94:41:a7:00:45:
22:56:62:98:c9:cd:64:3f:ee:06:f1:fa:4c:24:16:
a4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FD:A4:9D:72:C2:52:C6:71:D8:E9:94:8D:6A:A8:ED:F6:23:BD:29
X509v3 Authority Key Identifier:
keyid:3E:7B:F5:B1:9A:00:4C:1C:17:FF:5C:E7:DC:C0:CF:C8:07:87:D0:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pnv1sZoATBwX_1zn3MDPyAeH0Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/04b03d-fc77-42a4-8aae-055e86630227/1/Pnv1sZoATBwX_1zn3MDPyAeH0Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/04b03d-fc77-42a4-8aae-055e86630227/1/Pnv1sZoATBwX_1zn3MDPyAeH0Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:35:20:69:b6:9f:dc:23:10:ad:99:1a:72:f5:b6:61:4d:a5:
3f:57:c9:1a:5a:0a:a8:e6:4a:d3:a8:bc:5c:7e:74:e7:d8:cb:
3e:53:7b:67:85:88:ad:56:a4:90:a9:46:18:73:92:a5:98:8b:
21:c5:01:8b:d6:1f:d9:90:d8:26:96:1e:27:a6:b2:b4:01:b8:
87:51:13:ef:2f:e5:79:59:e3:51:8a:5f:5d:df:33:b7:75:e5:
99:ed:d8:91:c6:c0:00:3c:d3:f9:0b:32:4c:85:6c:e3:8d:01:
dc:06:37:e0:ce:d5:fb:5f:ec:76:f2:a0:1f:b5:d3:a9:de:7f:
c1:e4:2d:3a:8d:a0:dd:d1:0d:a9:74:f1:9f:ff:28:55:b6:3a:
51:27:9a:ba:ae:8a:7b:ea:ed:28:cf:99:16:6f:d0:05:16:be:
14:2d:d9:2b:be:94:f8:0d:ce:e8:0e:61:4b:50:ae:12:77:6a:
40:c9:f3:1f:f2:05:91:e4:51:94:0f:ce:7e:39:9a:49:c7:ac:
63:fb:11:0f:f8:54:f8:a9:da:46:be:13:22:da:ff:e0:3c:f3:
f5:4f:57:5d:6f:64:fd:e6:c4:48:99:b4:67:98:ef:d7:4e:e0:
8b:e0:a1:b8:45:3f:70:93:35:07:41:5f:a7:b8:14:b5:18:bd:
54:4c:06:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:58:40 2026 by rpki-client