Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.mft
File: PKE4ItxLDjEIGkhX_QQHDW2svgw.mft (raw, json)
Hash identifier: zJmAC/LCwM9h/HRtunqclejovwQ7eSZhxc0xNkCIQ70=
Subject key identifier: 27:D1:DE:F9:EE:EF:69:66:36:C5:C7:22:6A:42:94:D8:E3:03:45:98
Authority key identifier: 3C:A1:38:22:DC:4B:0E:31:08:1A:48:57:FD:04:07:0D:6D:AC:BE:0C
Certificate issuer: /CN=3ca13822dc4b0e31081a4857fd04070d6dacbe0c
Certificate serial: 019D284DECB5BCA4C8F9A32FD5BE8AD91500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKE4ItxLDjEIGkhX_QQHDW2svgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 04:01:28 +0000
Manifest this update: Thu 26 Mar 2026 04:01:28 +0000
Manifest next update: Fri 27 Mar 2026 04:01:28 +0000
Files and hashes: 1: PKE4ItxLDjEIGkhX_QQHDW2svgw.crl (hash: DWbWjxJSEE2rHZdQCGKD0BuDL1FNGNxSkrpS4AzbISY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PKE4ItxLDjEIGkhX_QQHDW2svgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:ec:b5:bc:a4:c8:f9:a3:2f:d5:be:8a:d9:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca13822dc4b0e31081a4857fd04070d6dacbe0c
Validity
Not Before: Mar 26 04:01:28 2026 GMT
Not After : Mar 27 04:01:28 2026 GMT
Subject: CN=27d1def9eeef696636c5c7226a4294d8e3034598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:51:f3:70:47:fc:1f:97:26:d8:d7:66:ca:b1:
d5:dd:d2:ac:73:0b:1e:80:99:8b:f2:e7:34:5a:3f:
a3:cd:7e:22:a5:1c:5b:a2:2d:0b:d9:46:55:02:7f:
8f:6a:0e:55:c7:55:f1:33:fd:a7:e5:ef:b2:b8:d0:
e1:b5:cd:dc:65:05:b3:b7:40:48:b0:ef:b7:2f:3f:
c0:cb:45:fb:96:07:f4:57:05:b3:8a:84:a6:c0:b5:
1b:8d:2d:c7:69:8e:da:a5:81:3f:48:f1:6f:80:6c:
f9:9f:a3:c8:33:aa:36:50:d2:b7:09:42:67:ca:26:
44:87:98:6f:81:ff:53:7d:53:84:1b:e3:6d:b4:a9:
c6:ff:ba:56:a8:be:21:65:44:d4:28:4e:55:35:28:
62:4c:56:df:33:49:a7:d7:2d:d4:46:51:8a:03:d1:
3a:47:3d:78:e7:53:8e:50:c4:45:67:6b:d0:60:1c:
d9:21:48:5a:69:d4:15:fd:47:3d:e8:b4:cc:61:77:
c0:c3:1b:3b:50:a5:3c:57:01:3b:80:e3:07:eb:32:
72:ca:60:bc:81:64:db:55:f4:82:53:2b:15:df:54:
1d:38:14:0d:8c:f0:93:ba:65:94:8d:65:50:b1:d3:
73:7f:b6:96:de:7d:df:82:57:f0:2f:20:f9:33:08:
80:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D1:DE:F9:EE:EF:69:66:36:C5:C7:22:6A:42:94:D8:E3:03:45:98
X509v3 Authority Key Identifier:
keyid:3C:A1:38:22:DC:4B:0E:31:08:1A:48:57:FD:04:07:0D:6D:AC:BE:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKE4ItxLDjEIGkhX_QQHDW2svgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d6:75:ff:fb:2a:27:38:7f:62:70:30:69:ca:fb:69:ce:fc:
d2:ac:cd:ea:e0:2a:57:73:1c:25:76:b5:23:4d:c4:71:4d:8b:
eb:85:de:ba:63:b5:5f:de:0d:82:8d:65:e4:ac:6f:a1:7d:90:
15:82:54:60:34:70:0c:9e:3d:f1:21:1b:21:86:7b:1b:29:c6:
6d:28:ed:9e:fa:5c:00:7d:29:b9:91:87:43:2b:2f:64:f7:ef:
87:bf:48:e8:69:f2:a1:c9:a6:31:82:7c:8d:88:6c:12:1c:7d:
c5:e5:08:f9:26:47:7e:a4:45:d2:0a:7d:f3:bc:1b:68:ff:87:
91:de:f6:bb:e2:60:63:ca:df:66:a8:2e:f1:3b:e3:be:00:4f:
58:cf:01:d4:cd:e6:f0:27:da:60:a6:72:83:df:db:2c:36:d2:
d2:26:63:38:54:33:22:7d:8c:be:62:ac:92:ac:77:09:ff:37:
d7:55:ab:11:9f:c5:4a:83:65:d2:84:27:94:4b:16:0c:4e:85:
28:01:d0:34:73:d6:0a:d9:ab:30:70:c5:07:7a:9d:8a:a5:9e:
ad:74:09:37:8b:94:5d:6f:a1:fd:41:63:2e:30:a5:5d:51:8a:
2f:44:99:10:47:8d:69:77:bb:a5:43:84:c5:3e:87:bd:1e:58:
2a:e8:70:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:37:10 2026 by rpki-client