Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
File: PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft (raw, json)
Hash identifier: prLicMHXMGb13B8toFrLI04IU1McuOT5DVaaflgwmeQ=
Subject key identifier: B0:BD:9C:98:0F:11:CB:19:3B:AA:08:FE:41:AE:F0:61:21:6C:DE:8D
Authority key identifier: 3D:85:00:BC:DE:49:68:99:C5:D1:FA:92:4D:E4:E7:82:7D:99:16:CE
Certificate issuer: /CN=3d8500bcde496899c5d1fa924de4e7827d9916ce
Certificate serial: 019D26CD01100DEE06BF4914C132EB63CE05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
Manifest number: 1020
Signing time: Wed 25 Mar 2026 21:01:02 +0000
Manifest this update: Wed 25 Mar 2026 21:01:02 +0000
Manifest next update: Thu 26 Mar 2026 21:01:02 +0000
Files and hashes: 1: PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl (hash: 9PFw6+oADAhXcFECh10OdXUzFVIRvH8fkzYPUw6W2mQ=)
2: RkAA10vCg6MkKKDZVdqR-tBX7bM.roa (hash: 3GXYAmGoE5ebf+ZEUr6uNtnsEAbhBs1D4PtYm72f7Lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:01:10:0d:ee:06:bf:49:14:c1:32:eb:63:ce:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8500bcde496899c5d1fa924de4e7827d9916ce
Validity
Not Before: Mar 25 21:01:02 2026 GMT
Not After : Mar 26 21:01:02 2026 GMT
Subject: CN=b0bd9c980f11cb193baa08fe41aef061216cde8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e7:d5:fe:ac:c5:96:e5:cd:bc:98:3a:f9:67:
fc:49:cb:41:b3:a9:8c:6d:b8:13:b7:f8:e9:d2:cf:
27:92:ae:9a:5c:fe:78:47:cd:8c:96:da:44:93:8a:
da:22:e0:23:6f:58:b1:a9:ac:d7:47:f6:b0:1d:cf:
e2:74:e0:54:1c:6f:fc:1d:22:35:48:3e:ae:a7:bf:
2e:63:00:c0:e0:49:12:e6:98:46:fb:81:f9:35:98:
1d:8a:01:63:2c:aa:3f:89:76:78:8c:26:e3:cd:e5:
35:a5:06:40:5c:56:1b:1d:36:1b:55:10:78:7f:0d:
a5:c1:2e:1c:93:ea:b4:c6:db:8b:a0:41:3b:07:17:
46:80:b0:26:af:e4:e9:b8:a9:ba:72:02:78:86:05:
71:7a:55:f9:45:f8:7c:f9:b6:75:fa:b0:6d:00:b7:
4b:92:4a:7b:32:0b:fd:5f:42:e9:38:40:77:56:0b:
54:74:56:4a:0a:a3:65:99:9b:08:aa:0d:34:8e:59:
8a:3a:e9:ed:c2:4a:b4:99:57:e9:cf:83:01:6e:ba:
21:bf:6c:cd:15:2e:a3:9b:43:9b:ba:14:de:53:6e:
d3:ca:3a:10:1f:60:93:74:57:31:cf:2c:c2:b4:d1:
f4:b8:e1:8e:2f:7b:df:e1:49:c1:b5:b0:f1:f2:ce:
19:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BD:9C:98:0F:11:CB:19:3B:AA:08:FE:41:AE:F0:61:21:6C:DE:8D
X509v3 Authority Key Identifier:
keyid:3D:85:00:BC:DE:49:68:99:C5:D1:FA:92:4D:E4:E7:82:7D:99:16:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:16:f3:4c:a1:d9:e8:a2:27:9f:6e:ba:39:b2:92:93:02:3a:
5a:fd:7c:3a:55:67:f8:24:6b:51:91:50:ec:4c:6a:99:85:47:
33:71:6f:36:62:73:bc:f9:57:6a:08:c0:9c:ad:82:72:1b:c2:
d0:d3:b5:c6:00:09:47:7a:87:e2:48:c9:af:c8:48:aa:3d:56:
84:f3:d4:95:74:23:aa:f9:e1:a2:45:42:2b:35:9a:f1:cd:de:
8b:ed:31:9c:ce:80:4f:38:d0:3c:7d:06:10:cd:a0:0d:1b:5f:
a2:d6:16:c2:7a:6b:dd:d8:f1:92:67:1a:31:53:73:f6:de:80:
40:c5:3f:3b:5d:55:f2:02:1e:ca:2c:d5:80:e4:14:10:ac:dc:
cc:3b:8d:5a:35:0a:db:d4:bf:c6:8c:27:c1:37:b0:34:32:ce:
fe:30:b0:02:5e:52:71:49:f1:56:84:cf:29:40:82:a3:61:92:
c8:d4:32:56:bf:42:67:b7:c9:e0:9f:44:4e:93:02:17:dd:b9:
c4:0e:81:98:0f:3a:c8:4c:f2:5a:8c:0b:ac:f2:e5:e2:03:71:
69:42:a0:55:0d:1b:fa:b6:9b:f0:9e:4c:5d:61:b8:3b:34:58:
45:c1:e6:2f:29:4b:aa:54:8c:46:78:17:6b:93:49:28:f4:7b:
cb:57:50:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:54:23 2026 by rpki-client