Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft
File: Pr6uqg8H3D1UvBFcziAq2pggsdU.mft (raw, json)
Hash identifier: Yonf55CB+g443XWU3QSzKXVog5uWk6a0edLfVYoniJw=
Subject key identifier: 0F:64:E5:AB:71:BE:1C:A6:4F:E0:7E:8D:D8:98:86:FF:C1:DC:9F:EF
Authority key identifier: 3E:BE:AE:AA:0F:07:DC:3D:54:BC:11:5C:CE:20:2A:DA:98:20:B1:D5
Certificate issuer: /CN=3ebeaeaa0f07dc3d54bc115cce202ada9820b1d5
Certificate serial: 019D28BB0EB7F609EA8CD920BA34601D1ACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pr6uqg8H3D1UvBFcziAq2pggsdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft
Manifest number: 0A1A
Signing time: Thu 26 Mar 2026 06:00:40 +0000
Manifest this update: Thu 26 Mar 2026 06:00:40 +0000
Manifest next update: Fri 27 Mar 2026 06:00:40 +0000
Files and hashes: 1: Pr6uqg8H3D1UvBFcziAq2pggsdU.crl (hash: /hJmG/3+ifDMSXfOdZWhO6wRM3jwgK9ePd+twoldqvM=)
2: ralErmH8EJ-9ydnhnrCvDlZV9ys.roa (hash: sDfjqe7LCY2kx4pVv1vmwGHXaRFhYudsoSBTeUiDShY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pr6uqg8H3D1UvBFcziAq2pggsdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:0e:b7:f6:09:ea:8c:d9:20:ba:34:60:1d:1a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebeaeaa0f07dc3d54bc115cce202ada9820b1d5
Validity
Not Before: Mar 26 06:00:40 2026 GMT
Not After : Mar 27 06:00:40 2026 GMT
Subject: CN=0f64e5ab71be1ca64fe07e8dd89886ffc1dc9fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:aa:34:33:14:45:f0:0f:3c:d9:a3:b5:32:d5:
4c:e0:c8:15:91:9f:71:90:9a:f8:40:22:d6:34:06:
f9:e2:d4:be:d5:a3:5c:96:6f:bf:c2:b6:32:40:3e:
f4:75:a6:75:ea:24:42:b2:1c:91:f2:ce:ab:a6:f2:
7c:61:e0:3a:a0:55:61:21:e1:b8:76:7c:9c:09:10:
5b:d0:f2:91:35:dd:1d:f0:d9:0c:ff:bc:ac:4b:e9:
72:30:b0:98:1c:21:72:a6:3c:ad:3c:5f:87:24:3b:
62:b4:8e:dc:14:1c:6a:7b:08:a0:4c:28:07:07:04:
e9:b1:3c:43:d4:63:b9:2f:1b:cf:cb:d1:19:c8:ea:
c2:27:bc:61:d0:b2:7e:0b:69:c8:42:d2:38:71:f1:
8a:13:f8:ca:4e:7e:24:51:b5:a6:26:37:2a:eb:4b:
ff:20:85:ba:1e:51:f4:2c:d2:50:e6:bc:24:7d:35:
27:51:01:47:83:20:3e:95:77:68:3c:de:d9:9d:87:
5e:3e:c5:87:db:df:2c:23:ad:b1:39:02:10:22:c8:
d2:50:c0:b6:2e:b8:e3:7f:ed:35:41:72:4e:36:53:
b3:58:c3:da:69:02:37:fd:f5:59:42:5f:22:ec:06:
25:00:b0:16:c0:6d:29:25:3e:5e:ee:40:9d:b0:8c:
99:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:64:E5:AB:71:BE:1C:A6:4F:E0:7E:8D:D8:98:86:FF:C1:DC:9F:EF
X509v3 Authority Key Identifier:
keyid:3E:BE:AE:AA:0F:07:DC:3D:54:BC:11:5C:CE:20:2A:DA:98:20:B1:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr6uqg8H3D1UvBFcziAq2pggsdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ea:b0:d1:aa:f5:4f:15:f2:a1:de:85:30:e5:fa:63:04:90:
f7:0e:ec:45:d4:e8:91:0a:9d:e2:b4:2c:47:3f:81:0b:15:40:
44:89:11:10:c5:a2:74:1c:f3:45:e5:8d:48:92:e6:5c:e5:1c:
20:fe:07:20:64:2b:f3:a8:b6:3a:da:0d:42:4b:7b:22:68:d1:
c6:19:c8:18:bc:cc:67:ca:f0:de:d5:50:02:16:4c:6c:fc:78:
93:17:06:79:95:f3:c7:c4:98:98:42:09:14:16:fb:92:0a:7e:
d0:1f:9a:8e:1d:a5:6f:21:09:77:64:4a:62:a2:57:f8:05:a6:
72:78:21:ac:c4:eb:ab:cc:d6:72:d9:12:a2:f4:fa:44:b3:3b:
40:38:2c:94:04:c4:1b:e2:50:0c:0f:2d:57:5c:d4:c0:63:37:
4c:3d:f3:1b:90:5f:ae:d5:2b:ae:3d:2a:ed:7c:68:96:cb:1f:
f7:a1:d1:8d:3a:a8:29:c3:2d:51:c2:18:53:1c:0e:b5:f7:ed:
4f:fe:0b:ae:f4:bc:68:bd:b0:83:05:71:63:62:17:c3:01:66:
51:a0:5b:c2:1f:bd:e8:4a:12:7b:11:77:ca:9b:19:12:71:65:
0d:cf:10:6b:6b:55:a0:3c:60:f6:6a:53:1f:49:3b:45:96:21:
7f:c1:04:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:36 2026 by rpki-client