Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
File: PBtlq7jKPpDpdlehqTHkZGneuaA.mft (raw, json)
Hash identifier: zxeF1d4eCFyrJdR0G1f2UOIUgrywZSaPoXhwZqcJwAA=
Subject key identifier: 03:17:C9:69:F4:2D:52:E0:0F:43:1B:45:63:EB:96:BB:97:13:8D:73
Authority key identifier: 3C:1B:65:AB:B8:CA:3E:90:E9:76:57:A1:A9:31:E4:64:69:DE:B9:A0
Certificate issuer: /CN=3c1b65abb8ca3e90e97657a1a931e46469deb9a0
Certificate serial: 019D25F1B6176A2CD002D70141D6EE009F4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBtlq7jKPpDpdlehqTHkZGneuaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
Manifest number: 19
Signing time: Wed 25 Mar 2026 17:01:30 +0000
Manifest this update: Wed 25 Mar 2026 17:01:30 +0000
Manifest next update: Thu 26 Mar 2026 17:01:30 +0000
Files and hashes: 1: PBtlq7jKPpDpdlehqTHkZGneuaA.crl (hash: kUOXq1AVit/oO4yX31h34XL9rUmvd1h9OC2A3eD8MwM=)
2: ufhzE0W5SH0Js0oKYXP2RX7vpvA.roa (hash: L+5eFfEh2iKkPrG9ir0RuhaK5ClvADkNCI+XRwX6vSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBtlq7jKPpDpdlehqTHkZGneuaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:b6:17:6a:2c:d0:02:d7:01:41:d6:ee:00:9f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1b65abb8ca3e90e97657a1a931e46469deb9a0
Validity
Not Before: Mar 25 17:01:30 2026 GMT
Not After : Mar 26 17:01:30 2026 GMT
Subject: CN=0317c969f42d52e00f431b4563eb96bb97138d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:78:ce:b9:59:b2:7e:ad:1a:ce:8b:cc:43:f5:
83:81:d3:6f:9b:92:18:bd:e7:8e:1f:62:8d:d1:1c:
fb:4c:53:9e:02:86:d3:b9:c6:b6:c2:87:27:e9:07:
cb:78:ca:ab:4f:80:f7:06:e1:0f:c6:20:31:ec:f8:
f6:b6:76:21:ef:3e:81:94:1a:78:e7:c7:a7:82:36:
ca:59:1f:56:1c:50:0f:3c:06:3b:57:6e:54:f3:9a:
b2:6c:e8:c5:e8:ee:8b:04:93:d2:e9:38:57:cd:dc:
79:f7:64:b7:e1:95:e5:ee:b8:6d:4a:a2:90:da:bd:
1b:13:6c:0b:d5:ac:51:13:c3:ce:ad:0b:f0:56:21:
d2:35:3a:b9:b1:3d:38:70:4d:fb:3c:29:74:46:29:
99:46:a7:a2:7b:73:80:7a:0a:b5:4b:bb:ad:48:90:
4d:83:e7:87:59:ad:15:97:fd:b3:7e:57:ea:8b:41:
2d:69:c0:b8:05:93:fb:2c:5c:95:f9:3b:f5:54:32:
9b:27:b9:71:47:4e:49:12:30:5d:a7:1e:14:19:7d:
76:fe:71:b0:67:00:58:4e:d3:25:88:9d:ff:25:5a:
f3:78:59:9f:c0:bb:38:27:d7:9b:48:a9:17:bc:8f:
a3:75:47:77:e8:2b:f6:08:f1:f0:9c:ad:b6:f8:a7:
62:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:17:C9:69:F4:2D:52:E0:0F:43:1B:45:63:EB:96:BB:97:13:8D:73
X509v3 Authority Key Identifier:
keyid:3C:1B:65:AB:B8:CA:3E:90:E9:76:57:A1:A9:31:E4:64:69:DE:B9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBtlq7jKPpDpdlehqTHkZGneuaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:76:27:13:82:57:75:b6:28:a1:45:74:98:a6:61:9a:78:4d:
7e:c7:5c:15:a9:27:16:c6:4b:d7:fd:8c:f1:98:26:9a:7a:92:
c7:a4:53:33:2d:33:91:65:2b:83:e3:5f:81:70:b1:29:42:86:
f2:1e:3c:8e:4d:c8:04:db:c5:e4:f4:0e:73:cf:3e:6e:81:66:
3b:40:e8:e4:c0:67:8c:c5:16:d7:5e:85:85:11:76:35:16:8a:
12:f7:17:ea:ee:02:f5:06:d5:0c:1a:8e:20:e2:5b:e9:6f:f1:
a4:c1:01:ad:4d:fb:79:17:d5:22:1c:f4:46:02:75:ac:fe:63:
fa:ab:74:99:e3:15:88:5c:b4:66:4f:4c:0a:b9:71:38:ba:2d:
a1:31:0a:5d:65:4b:17:e0:6c:c6:f4:96:cc:25:4a:5e:0b:e5:
6d:5d:e6:9a:67:03:82:57:fd:d1:a3:be:67:e1:bb:5d:cb:d5:
5f:be:c0:1d:e4:4c:7d:7d:bc:3d:95:bd:7c:03:02:9c:f2:40:
73:73:fe:7f:db:e9:14:7b:73:67:03:b1:a6:34:8a:c9:b3:db:
85:11:33:20:c7:0a:a4:ff:86:86:de:c3:2d:6b:46:70:98:44:
c2:cc:ef:89:0f:39:ff:ed:4b:23:71:41:e2:9d:53:de:dd:a4:
fa:d3:b7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:27:45 2026 by rpki-client