Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.mft
File: Pv1EVCQT55zFa-mDGjl-eqP1LTk.mft (raw, json)
Hash identifier: 2OpZPojY1xFe6okqMc0JoQhv5Vy+ApUk+pps3pT95GU=
Subject key identifier: F2:54:A6:2B:CA:9E:C8:C5:27:7A:17:F3:15:BF:04:48:2B:33:F5:69
Authority key identifier: 3E:FD:44:54:24:13:E7:9C:C5:6B:E9:83:1A:39:7E:7A:A3:F5:2D:39
Certificate issuer: /CN=3efd44542413e79cc56be9831a397e7aa3f52d39
Certificate serial: 019D326324542E1C765AA018E385C92D4E5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pv1EVCQT55zFa-mDGjl-eqP1LTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.mft
Manifest number: 2A
Signing time: Sat 28 Mar 2026 03:00:51 +0000
Manifest this update: Sat 28 Mar 2026 03:00:51 +0000
Manifest next update: Sun 29 Mar 2026 03:00:51 +0000
Files and hashes: 1: Pv1EVCQT55zFa-mDGjl-eqP1LTk.crl (hash: OM+V+vt8mn9Fym+gAM+cuYLtg+8y9FXVMI8OFGSxErc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pv1EVCQT55zFa-mDGjl-eqP1LTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:24:54:2e:1c:76:5a:a0:18:e3:85:c9:2d:4e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efd44542413e79cc56be9831a397e7aa3f52d39
Validity
Not Before: Mar 28 03:00:51 2026 GMT
Not After : Mar 29 03:00:51 2026 GMT
Subject: CN=f254a62bca9ec8c5277a17f315bf04482b33f569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a2:d6:41:79:c9:06:bb:91:2e:51:e8:bd:f8:
f4:81:80:91:47:1c:5d:60:82:0f:23:a8:fc:68:21:
7f:d5:ad:67:76:1a:99:0a:65:2e:ff:10:c5:8b:69:
37:ee:1a:90:c1:7a:90:39:8d:e9:3a:45:82:48:a6:
a0:35:63:2b:b2:01:65:c4:26:cf:d3:bc:64:12:20:
53:7b:22:76:32:c6:14:91:e9:ac:f0:a7:40:13:81:
b7:e9:ef:f6:0f:ae:6c:d3:9d:f3:da:ff:c7:c6:60:
4c:f1:cf:35:c1:9a:e6:58:7c:4b:23:3a:0d:ee:bf:
cf:d7:ca:e9:2c:bd:37:55:6a:71:7f:0d:5c:18:a1:
3d:ed:fe:78:b0:a1:ae:47:56:06:ae:2a:df:86:22:
36:35:c9:32:57:4f:09:f6:f1:81:ff:ef:d6:39:64:
f6:3a:65:29:f7:51:79:aa:d1:89:48:29:3e:30:f6:
32:4c:cc:5d:a8:4c:bd:09:8f:fc:df:8f:6c:ce:a3:
cf:d9:72:f9:02:19:51:61:77:d4:67:ad:4f:ed:b4:
4f:9d:27:3c:cd:26:ef:a7:2f:20:7f:ef:25:70:d7:
fc:fe:53:34:61:f6:bf:be:89:af:28:b8:2e:c8:0d:
b8:25:d0:10:59:2e:ba:84:46:5a:4c:be:5e:35:46:
0b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:54:A6:2B:CA:9E:C8:C5:27:7A:17:F3:15:BF:04:48:2B:33:F5:69
X509v3 Authority Key Identifier:
keyid:3E:FD:44:54:24:13:E7:9C:C5:6B:E9:83:1A:39:7E:7A:A3:F5:2D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pv1EVCQT55zFa-mDGjl-eqP1LTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:34:7d:98:69:04:47:2f:cf:e1:43:fa:88:67:48:e2:55:89:
de:20:db:e6:6d:50:b1:56:fb:6f:25:29:e7:d9:74:17:c1:71:
09:f8:89:0d:eb:91:58:6c:83:9b:f9:79:aa:bf:f1:1d:4e:a4:
40:cb:9f:8f:a4:05:db:c5:59:1a:1a:9b:10:a8:07:c9:53:07:
61:47:fc:cc:be:8e:b3:a2:17:c1:03:90:8b:dd:c8:60:42:60:
cb:ce:07:98:33:57:d2:cd:43:c0:d9:08:6c:82:9a:53:2f:85:
bf:6b:ff:1e:85:a7:77:9d:0d:02:de:c6:e0:8f:c7:a8:e7:0f:
38:d2:53:55:d2:c5:3c:1d:19:26:12:e1:13:6f:b9:0f:b8:cd:
f8:72:c9:c9:9c:b6:a0:ac:1f:57:93:f2:e3:fd:50:b6:a6:8b:
41:b8:02:68:ca:7a:9b:5b:24:57:ae:02:77:03:fd:3d:f5:81:
8c:bf:2e:8b:c0:e5:8e:3c:40:02:16:41:5e:c7:e4:f0:c8:8f:
48:bf:de:99:a4:f5:59:c5:ed:84:db:ab:fd:32:4d:0e:28:db:
64:81:51:39:6d:a9:1b:95:1d:07:1b:f7:27:47:50:23:c2:5b:
28:77:68:86:8f:c5:f0:73:b0:0f:92:80:5f:52:94:b2:42:30:
7b:58:92:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:38:06 2026 by rpki-client