Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
File: PBtlq7jKPpDpdlehqTHkZGneuaA.mft (raw, json)
Hash identifier: fsjiZdCCZ1cFsoi45qYWI2skg1a7484fWykm1o+nKTc=
Subject key identifier: DC:AF:04:AC:53:E6:22:42:61:D8:BA:B5:0A:0F:10:82:EB:35:3D:23
Authority key identifier: 3C:1B:65:AB:B8:CA:3E:90:E9:76:57:A1:A9:31:E4:64:69:DE:B9:A0
Certificate issuer: /CN=3c1b65abb8ca3e90e97657a1a931e46469deb9a0
Certificate serial: 019F8EA30A0987D707BDB12DD6DBF593BDA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBtlq7jKPpDpdlehqTHkZGneuaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
Manifest number: 0159
Signing time: Thu 23 Jul 2026 11:01:17 +0000
Manifest this update: Thu 23 Jul 2026 11:01:17 +0000
Manifest next update: Fri 24 Jul 2026 11:01:17 +0000
Files and hashes: 1: PBtlq7jKPpDpdlehqTHkZGneuaA.crl (hash: WtDaXI8A3Z6fwhp8g+IwBefz2YG307yfzmtRwylIpdY=)
2: gMCIz449uqD5WX8VFOvlE05m9FM.asa (hash: piapX0oug4b2n4Ly7SK9SEYjbmdeHD72ighx3Ds0YaQ=)
3: ufhzE0W5SH0Js0oKYXP2RX7vpvA.roa (hash: L+5eFfEh2iKkPrG9ir0RuhaK5ClvADkNCI+XRwX6vSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBtlq7jKPpDpdlehqTHkZGneuaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a3:0a:09:87:d7:07:bd:b1:2d:d6:db:f5:93:bd:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1b65abb8ca3e90e97657a1a931e46469deb9a0
Validity
Not Before: Jul 23 11:01:17 2026 GMT
Not After : Jul 24 11:01:17 2026 GMT
Subject: CN=dcaf04ac53e6224261d8bab50a0f1082eb353d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e9:d9:1d:6e:91:f4:1b:9a:d4:17:c1:42:9f:
55:b8:54:e7:bc:10:70:51:cb:44:54:f5:41:20:18:
41:c7:66:cf:83:87:8a:17:39:2b:d1:fd:46:d9:f9:
4d:db:62:7a:76:3c:c0:1f:f2:fd:a7:1d:55:f5:35:
5e:05:d4:5f:11:58:7b:ab:c6:b8:8d:09:18:dd:eb:
e7:a0:f5:3d:1b:06:2e:f7:2e:59:af:79:39:67:53:
fe:71:8d:ec:b7:e9:91:f6:ec:f4:0c:ac:18:c5:c5:
a4:f7:a8:ab:51:fe:dd:3c:c8:0c:75:5e:a3:ff:66:
12:f1:33:09:4c:b4:07:aa:4d:6f:15:3f:1a:c7:9e:
34:6b:0f:83:1e:37:29:d8:83:95:a5:60:e8:bb:7d:
f2:5d:80:f8:f0:6b:01:d8:7b:01:34:01:37:4f:7e:
35:30:12:97:b2:9d:f8:65:fd:7d:d9:46:7b:3e:7e:
1c:d6:72:71:46:77:ad:ad:1b:65:5b:79:3e:78:3b:
d4:37:2b:d6:0d:a8:cf:7f:fd:26:48:1f:67:94:aa:
38:4b:16:61:80:c5:54:d5:dc:01:0f:47:5b:ba:41:
b7:8f:03:cf:70:50:6f:16:9d:00:83:c1:7f:a0:ba:
fc:60:ff:c5:cf:1a:e9:2b:c3:6c:94:00:3b:55:c6:
36:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:AF:04:AC:53:E6:22:42:61:D8:BA:B5:0A:0F:10:82:EB:35:3D:23
X509v3 Authority Key Identifier:
keyid:3C:1B:65:AB:B8:CA:3E:90:E9:76:57:A1:A9:31:E4:64:69:DE:B9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBtlq7jKPpDpdlehqTHkZGneuaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ec:83:6d:bc:1d:fd:8e:9c:67:24:0a:36:d8:47:8e:e6:f2:
8c:28:b1:d9:3d:0d:fa:01:e1:8d:6b:7e:12:80:ca:6b:0f:97:
9e:66:e4:c4:b2:69:5b:2f:1b:66:aa:21:e4:80:da:22:87:a1:
9f:ef:9c:f1:4d:0e:03:aa:4d:c6:1e:97:bc:4a:c0:00:cf:93:
8e:7e:6b:3f:02:c1:54:a5:82:5b:93:5c:4f:b6:51:13:81:8b:
c7:d0:e9:69:0f:0b:4f:b6:88:72:d9:8b:04:44:32:4c:a4:0c:
39:71:99:de:4a:73:e3:86:e2:d5:d9:e0:a1:e8:d3:60:ff:30:
5e:28:d9:9d:8f:d7:73:ca:72:c1:ff:5e:95:71:af:bd:71:e9:
d7:49:9c:a4:f4:c8:4a:78:cc:b2:77:c3:8d:e0:0c:34:01:62:
d7:3e:02:5e:ca:a2:1e:d2:fc:60:a8:25:6e:16:6f:22:2d:2e:
a8:00:e8:5e:3d:52:18:f4:71:9d:c4:fa:f3:ef:e7:ea:67:d6:
eb:e2:75:cb:66:d9:44:40:5f:7b:47:1b:c3:a8:e3:55:e1:f3:
19:1e:4c:18:b0:af:2e:67:b0:08:41:02:23:4b:ad:28:45:6d:
51:c3:7a:9e:d3:08:91:3d:3b:f6:2e:92:cb:23:0d:35:02:15:
ad:c3:78:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:09:32 2026 by rpki-client