Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/734582-8bdf-4638-b56c-b4b654d31b04/1/PI1Erzdb-3RWTJuqzl-RdQGZBBs.mft
File: PI1Erzdb-3RWTJuqzl-RdQGZBBs.mft (raw, json)
Hash identifier: dKd7OX+frKpNWxT2X7VTMFSwaiQ+RPGb84plCdKGpp4=
Subject key identifier: 5E:7E:BD:E1:BF:0A:12:1F:76:11:04:C1:95:58:34:66:C4:6A:75:1E
Authority key identifier: 3C:8D:44:AF:37:5B:FB:74:56:4C:9B:AA:CE:5F:91:75:01:99:04:1B
Certificate issuer: /CN=3c8d44af375bfb74564c9baace5f91750199041b
Certificate serial: 01A0DA9653A8813191E89B01521B3107B428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI1Erzdb-3RWTJuqzl-RdQGZBBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/734582-8bdf-4638-b56c-b4b654d31b04/1/PI1Erzdb-3RWTJuqzl-RdQGZBBs.mft
Manifest number: 3B
Signing time: Fri 25 Sep 2026 22:01:19 +0000
Manifest this update: Fri 25 Sep 2026 22:01:19 +0000
Manifest next update: Sat 26 Sep 2026 22:01:19 +0000
Files and hashes: 1: PI1Erzdb-3RWTJuqzl-RdQGZBBs.crl (hash: A7r09QIKhDybYhjV6Dj/spJ9pKMs7RPRZlaaDKtkXRE=)
2: eaCukJJZFii2h7nVrxz-QMFgcTo.roa (hash: jXq8aOBPegyJEjjGurNaeAk4Ud88af4txxAxceTP2AI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/734582-8bdf-4638-b56c-b4b654d31b04/1/PI1Erzdb-3RWTJuqzl-RdQGZBBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/734582-8bdf-4638-b56c-b4b654d31b04/1/PI1Erzdb-3RWTJuqzl-RdQGZBBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PI1Erzdb-3RWTJuqzl-RdQGZBBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 22:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:53:a8:81:31:91:e8:9b:01:52:1b:31:07:b4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8d44af375bfb74564c9baace5f91750199041b
Validity
Not Before: Sep 25 22:01:19 2026 GMT
Not After : Sep 26 22:01:19 2026 GMT
Subject: CN=5e7ebde1bf0a121f761104c195583466c46a751e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c2:e8:62:0a:a7:30:ff:39:1a:42:1f:20:38:
67:71:fe:10:13:ac:60:ca:73:6f:9e:96:2b:c3:a4:
b5:dd:9f:04:cb:cd:b4:9e:cb:bb:34:70:7c:f1:61:
38:e8:83:d9:4f:a7:63:36:a6:de:6e:a7:45:76:61:
c2:45:d6:0a:1b:05:2e:f4:22:db:6b:e3:c1:65:f1:
7e:16:02:5e:9d:5e:27:f4:d1:a1:65:b5:19:0c:d8:
f9:2b:18:3f:62:6d:6c:ca:b8:3a:d8:ea:16:9e:39:
41:88:ec:3f:57:ea:3f:dd:05:2b:de:d2:3d:5f:60:
b5:7e:03:7b:3b:01:ac:d8:55:cb:97:b9:a1:7b:25:
e8:df:f7:6d:ec:00:e9:dc:cf:12:79:f6:63:31:db:
d5:ad:85:8f:e1:e4:5b:c9:ca:88:dc:19:23:c9:f8:
a3:b5:a7:14:19:a2:37:5c:9f:ab:93:40:d8:f4:f2:
bd:e9:1a:ed:bf:0b:a1:c3:92:86:10:24:0b:bd:82:
07:ba:83:0d:33:0d:b5:5e:c3:8d:c8:df:4e:5d:41:
5f:b7:4f:66:7d:ec:5c:1c:44:89:dc:ab:dc:78:0d:
8d:25:5f:a9:4b:e5:e9:d8:32:8d:0a:ec:9c:80:20:
49:0f:d4:4c:c0:9b:83:6b:e1:27:6b:f8:d5:63:6d:
56:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:7E:BD:E1:BF:0A:12:1F:76:11:04:C1:95:58:34:66:C4:6A:75:1E
X509v3 Authority Key Identifier:
keyid:3C:8D:44:AF:37:5B:FB:74:56:4C:9B:AA:CE:5F:91:75:01:99:04:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI1Erzdb-3RWTJuqzl-RdQGZBBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/734582-8bdf-4638-b56c-b4b654d31b04/1/PI1Erzdb-3RWTJuqzl-RdQGZBBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/734582-8bdf-4638-b56c-b4b654d31b04/1/PI1Erzdb-3RWTJuqzl-RdQGZBBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:52:a4:50:c6:a3:21:1a:ba:a2:5c:8d:f2:08:9e:42:07:4e:
33:f8:23:b6:3f:b5:24:c4:d2:a0:4a:9f:01:4e:9b:29:52:5f:
dc:8f:61:f6:b9:d9:44:88:d8:ac:7b:29:af:22:f0:5a:dc:10:
57:49:6c:08:74:c8:82:c4:a2:a8:44:1b:ab:fb:a9:cd:2d:85:
c5:27:43:e1:8f:4e:1d:8d:91:c4:33:41:2d:f3:d8:c4:62:04:
6b:0b:dd:07:5b:05:1a:e1:c8:ff:68:8b:2c:8a:44:c2:65:51:
0e:17:9f:a3:9a:ca:84:a6:ed:17:6e:83:1e:da:1a:60:e5:b8:
1c:e6:c3:45:68:01:85:82:e5:ea:6b:d2:df:21:67:a4:b8:3f:
ca:e4:a6:53:27:3b:b2:97:53:18:73:b4:5c:00:ae:a3:1d:f5:
ab:e4:8a:5d:59:4a:91:86:3e:a0:70:86:46:ed:01:3b:4e:03:
f8:4e:9b:de:c2:60:ba:81:df:92:a8:9a:5c:0e:70:4c:ad:f4:
14:e9:4d:e4:84:fa:31:f0:34:4a:aa:29:44:f7:e2:78:66:9f:
27:ba:ad:ea:85:7a:cc:7f:d8:ea:b3:14:1e:25:7a:3a:1b:30:
fa:cb:0d:fc:b5:98:42:ed:88:98:0d:3b:2e:1d:a9:ef:17:5c:
a7:cd:7a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:35:54 2026 by rpki-client