Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
File: PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft (raw, json)
Hash identifier: llDzuDBetHt/vrVodgtPQFCt6iKXhT6I1KfQDNKMjKY=
Subject key identifier: BE:7F:D7:10:7D:98:93:5D:C5:87:77:FF:15:4C:D3:3E:19:65:D4:E9
Authority key identifier: 3D:0E:F4:35:8A:DB:04:0F:33:3D:93:61:A4:26:1E:A0:E5:0D:38:AB
Certificate issuer: /CN=3d0ef4358adb040f333d9361a4261ea0e50d38ab
Certificate serial: 019D28F2BE4904E6BC37F1BEF83855A7D165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQ70NYrbBA8zPZNhpCYeoOUNOKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 07:01:30 +0000
Manifest this update: Thu 26 Mar 2026 07:01:30 +0000
Manifest next update: Fri 27 Mar 2026 07:01:30 +0000
Files and hashes: 1: 9_KMCCpdv__dNX3XCcGQGoY_t7E.roa (hash: 4J310WOIoaFhdk7Rws5ylL5JHddp0w2bpHJlXbfEDWM=)
2: PQ70NYrbBA8zPZNhpCYeoOUNOKs.crl (hash: EVAKPFil5PT73nOtkkw+15J2xUCBCNPdT2GF27LShfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQ70NYrbBA8zPZNhpCYeoOUNOKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:be:49:04:e6:bc:37:f1:be:f8:38:55:a7:d1:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0ef4358adb040f333d9361a4261ea0e50d38ab
Validity
Not Before: Mar 26 07:01:30 2026 GMT
Not After : Mar 27 07:01:30 2026 GMT
Subject: CN=be7fd7107d98935dc58777ff154cd33e1965d4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ec:36:ae:1b:55:2f:51:8a:71:bb:17:aa:d5:
ce:2d:2e:f0:db:10:bf:29:6c:3a:7f:e3:8f:b4:99:
74:37:f4:fd:24:a7:ad:0d:32:88:59:0d:fc:ee:f7:
cf:65:c4:58:9a:73:03:54:fa:8d:35:45:7b:c0:85:
5d:b7:1f:85:b6:80:82:15:3f:9a:cf:5c:7d:6b:7b:
40:23:4d:77:d9:d6:6d:1a:8e:54:6f:fc:4e:94:cc:
b9:f6:f4:65:d0:7f:4c:7c:ac:ba:b1:63:8d:45:e4:
aa:ab:c7:45:ba:ac:db:78:98:e7:03:18:b9:20:9a:
50:51:5f:51:71:85:fb:72:ae:95:1d:2f:46:6b:b3:
ea:00:25:5e:93:c9:44:17:b5:d0:43:4e:65:ea:07:
07:ad:b1:17:17:33:be:07:f9:27:47:cf:9c:59:44:
57:48:f6:20:89:de:05:69:06:4d:ec:a9:36:ad:68:
f8:98:c6:d6:53:00:13:a0:a4:0f:3d:04:e3:e7:29:
c0:0b:45:2f:68:0a:e1:35:dd:d0:d9:cc:22:2b:e3:
f1:dd:be:a8:92:67:29:50:07:61:ae:ac:85:97:f7:
3d:9e:c2:71:27:5b:09:ef:25:be:36:c5:f9:99:b6:
41:19:e1:d0:b8:f9:7d:ec:96:be:94:24:3e:03:fd:
f0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7F:D7:10:7D:98:93:5D:C5:87:77:FF:15:4C:D3:3E:19:65:D4:E9
X509v3 Authority Key Identifier:
keyid:3D:0E:F4:35:8A:DB:04:0F:33:3D:93:61:A4:26:1E:A0:E5:0D:38:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQ70NYrbBA8zPZNhpCYeoOUNOKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e8:82:2f:03:56:c3:1e:0a:c2:20:59:51:7d:35:b5:96:77:
65:76:4b:7e:44:bf:3b:5e:d8:f0:ab:48:38:bb:19:f8:a0:9d:
f0:bd:3c:dd:29:6b:b0:3b:db:b6:99:fd:18:0b:25:19:ab:e8:
bf:d4:73:f4:11:83:67:ad:18:58:85:30:0f:10:2f:19:05:52:
c0:b0:bd:51:82:c8:84:93:4d:51:91:7e:b8:d7:2b:70:1a:ee:
71:fd:06:85:8a:56:e1:0e:b9:a3:95:e7:2b:47:00:cd:23:23:
cd:89:2e:84:b2:5c:65:19:05:6b:56:02:b2:77:8f:01:ab:c9:
cd:c8:a6:da:16:2b:26:23:86:b7:56:95:ca:ec:28:8d:42:fe:
81:85:5e:1a:46:cf:cf:12:b2:dc:c2:1e:64:e3:79:1c:61:9f:
0c:d0:ef:f5:a7:09:2b:73:4e:66:c5:1e:84:50:e3:41:d8:2c:
dc:ab:bc:01:a1:6b:fd:64:ed:1d:46:65:fc:07:23:8e:9c:e0:
1e:0c:d7:1f:51:6d:dc:f5:2f:a0:21:17:f2:1b:99:76:68:97:
6f:f4:3f:cc:23:a7:a0:0a:03:c3:da:21:87:36:3e:e1:4c:93:
85:d8:bf:91:3a:6a:b6:0b:d1:dc:99:bd:93:7b:ed:da:ad:fe:
56:6f:d6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:53:19 2026 by rpki-client