Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.mft
File: Pv1EVCQT55zFa-mDGjl-eqP1LTk.mft (raw, json)
Hash identifier: 3HQbK32gD7f8+S/Dg87++0/i9OBkMr+ThA+mENEHce0=
Subject key identifier: 6C:A4:9F:E3:F8:FF:BA:00:B8:43:29:C3:00:3C:CC:F0:86:38:27:1D
Authority key identifier: 3E:FD:44:54:24:13:E7:9C:C5:6B:E9:83:1A:39:7E:7A:A3:F5:2D:39
Certificate issuer: /CN=3efd44542413e79cc56be9831a397e7aa3f52d39
Certificate serial: 01A0D501E0C2DC35D96479EA4E453F79D7A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pv1EVCQT55zFa-mDGjl-eqP1LTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.mft
Manifest number: 020D
Signing time: Thu 24 Sep 2026 20:01:04 +0000
Manifest this update: Thu 24 Sep 2026 20:01:04 +0000
Manifest next update: Fri 25 Sep 2026 20:01:04 +0000
Files and hashes: 1: Pv1EVCQT55zFa-mDGjl-eqP1LTk.crl (hash: ioAwHBS23/v1FYzjHuzxKvVcYhbX99L22lazniGwU7E=)
2: mcJm8HeYM8tAaxj_DbPV_ZHMr0U.asa (hash: fdM8B4LFVNA1rExhWmALS3M97yC0S/Herj8AXOIShkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pv1EVCQT55zFa-mDGjl-eqP1LTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:01:e0:c2:dc:35:d9:64:79:ea:4e:45:3f:79:d7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efd44542413e79cc56be9831a397e7aa3f52d39
Validity
Not Before: Sep 24 20:01:04 2026 GMT
Not After : Sep 25 20:01:04 2026 GMT
Subject: CN=6ca49fe3f8ffba00b84329c3003cccf08638271d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c1:42:8d:f9:8e:95:81:06:f3:7b:22:98:a6:
4a:67:2f:2c:71:6f:6a:5b:23:89:3d:e4:2e:e9:b6:
b9:b7:49:b4:07:08:1d:29:4a:c4:0a:65:95:74:bc:
78:41:11:c2:3c:bd:0a:54:9b:77:9f:3a:bf:ad:c7:
37:35:f9:a6:c6:18:84:ae:eb:0a:56:5a:b2:21:66:
90:4a:36:eb:85:23:88:0a:7d:3b:75:fb:d8:14:d1:
c1:6b:e9:e5:68:96:c8:30:9d:8f:d7:8d:52:18:31:
b4:80:dc:88:d1:8b:87:95:8a:7c:60:2d:08:4a:40:
94:d3:49:fc:8a:cf:75:e1:34:2f:e8:f9:1c:59:be:
85:5c:29:84:5a:2b:c4:e5:57:03:bb:c0:82:d8:5f:
db:42:c1:c0:68:d1:8d:ec:8d:ad:67:20:a7:ad:d9:
9b:a6:7c:81:7b:a3:96:01:60:4e:e4:42:49:7a:57:
b0:e3:90:21:e5:56:63:67:de:22:8e:ba:6d:c6:6a:
94:8b:8b:73:ee:6d:6b:64:fb:0f:6f:04:0e:3b:46:
04:51:a7:8d:00:d9:6e:f8:03:b1:76:28:69:0b:b7:
88:9e:33:42:47:6f:5e:8d:31:df:3a:5c:8d:d4:0f:
bf:52:e4:6e:c4:4e:52:43:59:5d:b7:9f:a2:f6:02:
21:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A4:9F:E3:F8:FF:BA:00:B8:43:29:C3:00:3C:CC:F0:86:38:27:1D
X509v3 Authority Key Identifier:
keyid:3E:FD:44:54:24:13:E7:9C:C5:6B:E9:83:1A:39:7E:7A:A3:F5:2D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pv1EVCQT55zFa-mDGjl-eqP1LTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:1b:24:e4:7a:53:b9:92:fa:b2:14:ae:7e:90:7c:0e:51:2b:
d7:27:be:1f:4c:b4:f5:ea:90:89:b4:13:7c:06:39:d4:a7:ef:
9e:ce:a2:0b:fd:8d:48:df:64:87:d9:13:49:2c:7e:c6:d5:69:
8c:49:79:d0:2e:73:5f:6c:95:67:c2:79:8f:1e:3e:08:bc:7a:
2e:e3:9e:20:ee:f0:c5:91:2f:78:1d:cc:56:e4:5d:cb:87:3d:
76:65:09:7a:0f:73:1e:96:18:2d:57:d8:0e:68:e5:7c:ff:c9:
1f:55:cf:64:eb:3d:7c:ca:b0:ef:46:fc:5f:4e:12:27:d6:e2:
6a:bf:9a:78:ff:95:0e:09:c9:b0:06:3e:60:32:96:7e:f5:ae:
65:c2:bf:7f:51:61:07:43:cb:21:f6:79:a3:cc:d6:df:f1:1b:
f2:af:7d:ba:16:7d:9a:dd:7b:24:d6:fa:41:33:2a:d6:69:b0:
65:90:5e:1d:16:c5:67:43:bf:ec:86:38:23:5e:6e:55:21:73:
a1:94:7e:76:45:6b:57:ab:c8:55:99:b6:57:26:b5:04:e1:18:
1a:83:49:4f:f9:89:17:e8:d7:16:97:f4:ca:12:03:9d:d1:47:
1d:2c:34:c3:c6:25:d4:06:c9:90:27:2c:23:ac:68:58:d1:06:
4b:ec:da:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:09:47 2026 by rpki-client