Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
File: PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft (raw, json)
Hash identifier: RbqRIdsmOwIQwHMdT2eK1pNtdR4Fh2t8PP8QvrL6Qhs=
Subject key identifier: E5:FE:5E:62:61:E6:DE:50:0B:83:6E:31:DC:48:AF:36:43:D5:08:ED
Authority key identifier: 3E:A6:ED:31:F9:7F:37:C5:E5:C5:50:73:2F:85:D2:46:90:96:2C:EF
Certificate issuer: /CN=3ea6ed31f97f37c5e5c550732f85d24690962cef
Certificate serial: 019D2703F293BD6410D1AD2C72F8002D6A65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
Manifest number: 1881
Signing time: Wed 25 Mar 2026 22:01:03 +0000
Manifest this update: Wed 25 Mar 2026 22:01:03 +0000
Manifest next update: Thu 26 Mar 2026 22:01:03 +0000
Files and hashes: 1: PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl (hash: 2YzuesX+u0Qlh/GxMjzhz4CLPj9WZSVjyC85p8A93Qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:f2:93:bd:64:10:d1:ad:2c:72:f8:00:2d:6a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea6ed31f97f37c5e5c550732f85d24690962cef
Validity
Not Before: Mar 25 22:01:03 2026 GMT
Not After : Mar 26 22:01:03 2026 GMT
Subject: CN=e5fe5e6261e6de500b836e31dc48af3643d508ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f1:ab:44:b3:3e:78:2e:06:2a:ef:43:ee:67:
d0:16:ad:4e:06:a5:bd:d4:23:e7:59:a8:01:59:0e:
1b:4f:ae:48:6e:25:9b:4a:9b:7a:18:fe:5d:d3:a8:
eb:90:cf:34:19:67:9a:ff:a7:e7:5a:a3:43:8b:3a:
b8:26:b1:47:fe:00:de:61:f0:d5:06:f5:5c:90:eb:
54:80:4a:e0:cf:15:7c:74:9a:65:e7:0b:24:95:20:
d3:e3:eb:77:9e:6c:ad:fa:45:fb:1d:94:73:b9:2c:
60:55:01:89:a3:01:35:f9:fd:da:7f:8e:b4:c8:43:
1f:72:b6:ea:38:f3:8c:e6:6a:8f:16:5d:0c:e8:66:
ea:8b:74:a4:f7:c8:fc:d2:01:86:50:fa:2d:ad:7b:
1c:89:90:32:b2:c7:b5:92:e8:0f:8c:f6:c6:a5:82:
69:e1:0a:55:af:dc:06:00:81:71:16:8f:a7:41:c5:
4b:30:e1:4d:31:41:ee:07:68:7a:24:19:4c:65:1e:
e7:c1:32:fa:fd:40:cd:72:3c:60:8d:a9:23:db:a8:
fc:af:31:04:0f:8f:e8:d9:17:ab:fc:e6:35:32:9f:
17:42:97:10:fa:51:be:82:18:55:dc:65:39:8f:0e:
58:04:9c:ca:5e:b7:76:53:88:70:f8:7b:a2:24:49:
b3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FE:5E:62:61:E6:DE:50:0B:83:6E:31:DC:48:AF:36:43:D5:08:ED
X509v3 Authority Key Identifier:
keyid:3E:A6:ED:31:F9:7F:37:C5:E5:C5:50:73:2F:85:D2:46:90:96:2C:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:88:f4:0e:97:36:ce:2e:9a:7c:1e:fb:2a:8a:60:ae:50:2d:
fd:18:5a:4c:5e:9c:32:da:07:f6:63:52:1c:63:cb:12:1e:35:
3a:3e:22:f0:27:11:0e:e7:1d:33:a5:9b:da:8a:e3:05:6c:f8:
1a:a9:af:f7:8e:b4:1f:38:2f:57:bc:86:79:7f:d1:23:3f:ec:
61:d5:53:9c:15:aa:99:f0:b6:71:7b:f6:94:8d:fd:5b:90:2d:
f3:df:c5:e6:ff:96:1f:60:b6:c2:e0:05:29:3b:f9:47:29:4e:
4f:14:ad:4d:f0:28:33:78:b5:f8:ea:b2:bf:ed:24:96:05:d2:
0a:ce:9f:fc:02:0f:a1:88:1a:b5:f4:ed:4d:25:51:12:ce:74:
92:59:43:0c:ac:48:44:a2:72:2a:78:4e:1a:33:60:92:8a:5e:
dc:58:c6:48:bd:ae:f8:78:8d:77:2c:b7:71:95:a9:97:e4:9d:
80:ac:e4:9c:72:dc:76:86:97:6c:0e:82:32:7d:55:45:51:18:
67:80:70:89:c0:e4:8c:07:1f:b9:3e:2f:27:78:5c:cc:5c:21:
ad:e9:65:bf:27:ca:1b:45:54:3d:23:5e:f3:e7:d9:5a:00:9f:
f2:d5:9c:79:5f:17:45:f4:cc:a3:dd:a0:f8:9d:8b:1f:2f:ac:
a6:9b:13:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:16:58 2026 by rpki-client