Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.mft
File: Pv1EVCQT55zFa-mDGjl-eqP1LTk.mft (raw, json)
Hash identifier: ICmBbfd8n4v+6xcvCG6GkfZ3JOSMMPP7A1JI4D1xcGI=
Subject key identifier: 2B:AE:06:1F:8B:37:83:60:90:87:C6:1C:E7:2B:D6:63:B1:16:DB:94
Authority key identifier: 3E:FD:44:54:24:13:E7:9C:C5:6B:E9:83:1A:39:7E:7A:A3:F5:2D:39
Certificate issuer: /CN=3efd44542413e79cc56be9831a397e7aa3f52d39
Certificate serial: 01A0D315076346A09D67971FDAD5A94F0952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pv1EVCQT55zFa-mDGjl-eqP1LTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.mft
Manifest number: 020C
Signing time: Thu 24 Sep 2026 11:02:45 +0000
Manifest this update: Thu 24 Sep 2026 11:02:45 +0000
Manifest next update: Fri 25 Sep 2026 11:02:45 +0000
Files and hashes: 1: Pv1EVCQT55zFa-mDGjl-eqP1LTk.crl (hash: ZFXHOCYF5SJxUZ2VzXlizvxXCL+t3+xijtA912MMCsA=)
2: mcJm8HeYM8tAaxj_DbPV_ZHMr0U.asa (hash: fdM8B4LFVNA1rExhWmALS3M97yC0S/Herj8AXOIShkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pv1EVCQT55zFa-mDGjl-eqP1LTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:07:63:46:a0:9d:67:97:1f:da:d5:a9:4f:09:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efd44542413e79cc56be9831a397e7aa3f52d39
Validity
Not Before: Sep 24 11:02:45 2026 GMT
Not After : Sep 25 11:02:45 2026 GMT
Subject: CN=2bae061f8b3783609087c61ce72bd663b116db94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5f:7e:30:25:9d:57:13:89:cb:e5:b5:6e:06:
5f:9e:34:22:7e:ec:08:1c:b5:bf:14:5a:ef:19:df:
ee:0b:0d:3c:4d:49:26:68:4b:52:f2:19:44:8c:3d:
14:56:8a:91:a9:a0:27:8b:0a:de:b3:46:aa:9e:86:
df:82:4f:89:7f:48:76:ce:da:c5:6e:ab:18:67:bc:
7f:4e:d3:32:4b:0c:73:28:03:66:1e:4d:5b:fb:e0:
fa:9b:be:96:58:fb:6f:a1:fc:d0:18:c9:f7:32:b4:
6f:d1:c8:21:1d:18:ac:7c:40:24:6d:8e:02:46:11:
7f:39:d5:b0:4f:2a:04:09:23:10:d8:7f:ab:53:7d:
0b:e7:2f:c5:81:57:44:d9:73:e2:cc:b5:81:74:62:
3a:1b:31:53:22:c4:be:b0:ea:01:f7:e3:ed:0d:6d:
a5:bc:e9:32:53:df:fb:af:cf:98:80:29:ef:3e:5c:
03:a2:b7:11:c5:fd:b4:0f:26:78:d8:c4:82:ed:ef:
79:14:c9:ab:06:57:16:68:a9:69:f5:17:23:3d:b3:
79:a7:4f:19:3e:0b:09:fa:f8:ce:cb:3a:ca:f3:14:
13:5e:5b:71:8f:99:b3:50:20:a8:47:78:73:d2:f0:
05:f7:70:eb:a9:0f:eb:7d:a2:fb:fb:70:7b:60:af:
29:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AE:06:1F:8B:37:83:60:90:87:C6:1C:E7:2B:D6:63:B1:16:DB:94
X509v3 Authority Key Identifier:
keyid:3E:FD:44:54:24:13:E7:9C:C5:6B:E9:83:1A:39:7E:7A:A3:F5:2D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pv1EVCQT55zFa-mDGjl-eqP1LTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:5b:ac:7f:5c:68:aa:4b:67:7a:1e:2f:c1:c0:2e:1c:a1:33:
36:e9:58:77:46:c9:ad:09:ad:fd:10:6e:8d:40:a7:6d:9c:e3:
75:b1:ac:49:ea:ff:ea:e1:85:ab:a4:eb:01:b7:e1:f0:c0:83:
6b:03:a7:1e:c5:39:2a:04:48:f9:fa:1c:54:f6:6c:44:83:2b:
aa:9c:f5:40:7e:25:81:bd:ab:ad:8c:aa:26:01:c9:ab:b0:8c:
75:45:88:a3:2b:30:e3:0b:f9:d4:58:52:bb:07:f0:d3:43:0b:
ef:ea:c7:50:45:92:f1:4d:a1:63:f2:91:f0:04:67:bc:7b:d4:
27:8e:3e:0d:73:d6:45:19:f1:fa:af:b9:4d:88:0f:d0:af:5b:
01:71:65:7c:b7:9f:e5:7a:eb:57:a9:d7:8d:c3:24:c2:2b:0c:
f9:a5:c3:c0:52:d9:44:bd:96:e6:5d:25:f7:ad:8c:c6:45:86:
65:59:fb:d9:be:87:74:f9:a4:e3:cd:f5:ab:3f:8c:77:6b:1b:
01:c2:a5:23:c8:ac:c5:04:51:8c:04:23:9b:a3:8b:ad:ec:75:
6a:cd:c9:12:96:0e:b4:1c:e1:4e:17:e1:3d:72:f3:ac:15:97:
90:bc:a1:9f:ac:1a:f3:23:22:3d:b9:cc:03:d5:13:db:3b:7f:
bb:7c:02:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:55:38 2026 by rpki-client