Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
File: PksGq_B-6qwRslmgj-Fx1mvSgw0.mft (raw, json)
Hash identifier: KqqzTQtxwtzCzeUyj4pN4mN5Qus5ANEkzsr1ef8H2l4=
Subject key identifier: BA:F6:17:D7:40:41:84:7F:19:CB:E5:2C:74:F3:03:EE:8B:15:CC:F0
Authority key identifier: 3E:4B:06:AB:F0:7E:EA:AC:11:B2:59:A0:8F:E1:71:D6:6B:D2:83:0D
Certificate issuer: /CN=3e4b06abf07eeaac11b259a08fe171d66bd2830d
Certificate serial: 019D25F14874061D6B0B25715A240281909B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
Manifest number: 081B
Signing time: Wed 25 Mar 2026 17:01:02 +0000
Manifest this update: Wed 25 Mar 2026 17:01:02 +0000
Manifest next update: Thu 26 Mar 2026 17:01:02 +0000
Files and hashes: 1: P_mFxEcYlCrFN3MG993zE4Mm2l4.roa (hash: qelseO1it8WIi6uPqUIeiOJkVLkt0DoO5JMwvTxaQaY=)
2: PksGq_B-6qwRslmgj-Fx1mvSgw0.crl (hash: QkCht9whjddCpcpwNsgO8v2ddqR14IjEJItAEGpVguE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:48:74:06:1d:6b:0b:25:71:5a:24:02:81:90:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e4b06abf07eeaac11b259a08fe171d66bd2830d
Validity
Not Before: Mar 25 17:01:02 2026 GMT
Not After : Mar 26 17:01:02 2026 GMT
Subject: CN=baf617d74041847f19cbe52c74f303ee8b15ccf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:35:96:14:c0:0a:6e:74:30:5d:6c:08:9e:f1:
e3:51:92:0e:85:d5:2d:4c:53:43:1e:cf:9d:1c:0f:
5b:93:34:f0:fd:dc:a6:f6:7c:60:64:f5:58:5e:8b:
6e:2e:18:85:3a:db:ab:27:7a:0b:3b:bc:cf:57:7f:
ab:12:3c:1c:15:58:73:9b:73:d1:b4:26:35:50:2e:
75:91:4f:58:ab:c4:d2:80:69:4e:e2:e8:6b:6e:1c:
57:76:27:2b:8b:f7:2e:61:c4:33:9b:8c:09:2a:c4:
ba:02:4e:e6:6b:7a:a6:d2:23:5f:01:33:35:ec:7c:
90:6a:c7:7b:d7:9b:96:07:08:9f:c8:f5:cf:37:9f:
bd:9f:4a:aa:da:4c:f2:7f:3a:e6:be:13:cf:b6:cd:
48:9d:7c:ed:70:71:66:2f:75:1e:a6:b0:7d:74:25:
e7:7a:33:b2:40:8d:d0:70:4a:a1:7e:81:72:9f:e3:
81:17:a0:c9:1d:3e:a0:5a:c9:47:f5:7e:87:83:ed:
d8:cd:46:09:a0:5f:ec:6e:08:d9:fa:3b:31:45:cd:
48:6f:a4:a5:f0:93:df:27:04:97:5f:f8:0e:49:23:
0a:c2:b5:3c:8a:fb:54:4d:35:95:2f:7d:48:6e:30:
b9:cb:74:66:23:1d:c3:ed:bd:f8:ab:29:b0:f2:85:
74:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F6:17:D7:40:41:84:7F:19:CB:E5:2C:74:F3:03:EE:8B:15:CC:F0
X509v3 Authority Key Identifier:
keyid:3E:4B:06:AB:F0:7E:EA:AC:11:B2:59:A0:8F:E1:71:D6:6B:D2:83:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:91:5b:1d:9e:c3:6f:13:60:f6:6e:4b:43:78:55:61:05:27:
7e:ef:ba:8b:f6:26:11:72:74:b0:76:4d:0d:46:c6:6e:a2:a6:
40:3a:8a:88:05:4e:e4:a9:f1:01:0f:97:63:85:aa:a5:e0:6f:
37:66:26:c4:2c:5d:7d:f0:fe:41:26:68:77:ca:1f:fa:d0:34:
39:0f:b6:17:23:c9:7d:9b:39:67:f9:68:8c:56:c7:9f:9a:cd:
13:f5:7a:90:26:b7:1b:f6:74:f1:8c:8a:db:22:db:c2:1f:67:
a6:5a:92:9a:09:b7:84:2d:d3:de:f2:16:2d:32:af:12:85:79:
74:d7:29:b1:1b:70:87:35:9d:f1:cc:26:9a:a0:22:67:c9:86:
54:29:e8:87:fc:29:11:1e:0d:79:a2:16:dc:5f:8d:29:1f:e1:
bb:d1:23:fa:eb:3e:e8:f5:77:7e:77:67:53:0d:8b:d6:9b:b1:
e8:c1:03:c5:3b:6b:8b:54:88:21:ca:c2:d5:14:a9:73:6d:54:
a6:3a:b1:15:0e:8d:3e:9a:09:77:99:9f:98:d7:8d:4f:90:26:
80:f6:e7:99:31:22:d6:e5:13:09:af:6c:78:a7:22:f4:65:51:
2a:0e:26:b2:a2:a0:65:17:a7:d8:d1:67:1f:cd:12:03:dd:72:
31:fd:9b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:54 2026 by rpki-client