Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.mft
File: PE7ZQuXHQud7-5vrlU-HJTT1KEg.mft (raw, json)
Hash identifier: ipK+kTpCZL8x6HD9uTTINWz5qMowLJaRyJjmOA5Sh0E=
Subject key identifier: AF:8A:DC:D0:DD:13:57:91:5E:DC:B1:DC:FF:75:E7:C3:2E:4E:C5:7B
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 019D284DE4C83CDDE0CA6D48D4CBE6694372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.mft
Manifest number: 135A
Signing time: Thu 26 Mar 2026 04:01:26 +0000
Manifest this update: Thu 26 Mar 2026 04:01:26 +0000
Manifest next update: Fri 27 Mar 2026 04:01:26 +0000
Files and hashes: 1: PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl (hash: rgWlRtxkQR1QNucjnKwo95ECWhjEvUqHBPpMJwTuWs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:e4:c8:3c:dd:e0:ca:6d:48:d4:cb:e6:69:43:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Mar 26 04:01:26 2026 GMT
Not After : Mar 27 04:01:26 2026 GMT
Subject: CN=af8adcd0dd1357915edcb1dcff75e7c32e4ec57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3f:80:ea:ce:dd:c9:5b:52:14:90:8e:cc:5d:
2e:e9:ba:46:a0:26:12:13:4b:51:8d:35:61:b0:89:
c8:a3:89:9e:45:8f:3b:be:5d:86:9d:a7:6f:21:bd:
e7:28:37:68:f0:3a:32:f8:45:45:19:5c:5d:b0:a7:
cf:cd:29:c5:fc:db:1e:9b:8c:3b:79:c9:10:62:06:
3d:68:e9:80:0a:4d:f5:2a:55:a8:fb:89:af:26:09:
3a:e6:57:17:18:9d:5a:92:23:0d:20:0f:cd:8c:ea:
e4:eb:4e:0f:e1:c6:65:67:a7:09:96:91:7b:b7:18:
da:4f:6e:78:67:c4:cb:23:e0:2b:52:eb:0c:ff:2b:
96:90:da:8d:ae:8c:6c:db:f0:b3:bf:75:0c:6c:a4:
e6:2b:14:ed:d8:31:42:9f:4d:b8:8d:ac:28:50:3d:
78:c7:1b:e5:ab:05:fc:12:18:d2:2d:f6:a7:33:3c:
e5:78:30:0e:c1:53:c3:22:33:3e:51:49:d6:89:8b:
e3:83:98:b7:d5:05:c6:92:38:47:0b:d7:44:7b:1e:
93:5a:0d:db:36:a1:d2:cb:d5:7e:4a:4b:18:d6:6f:
87:4a:11:62:61:0b:6c:9b:e0:d2:c2:65:08:6f:64:
02:fd:50:da:8e:a0:4a:c6:0f:8f:3d:4b:52:f7:43:
98:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8A:DC:D0:DD:13:57:91:5E:DC:B1:DC:FF:75:E7:C3:2E:4E:C5:7B
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:63:fc:d9:23:24:6e:90:0f:01:ef:8f:6c:72:c2:c6:31:c0:
d8:6c:90:5c:8c:ff:31:b3:d0:2e:bc:57:5a:ee:1a:3b:43:f0:
3e:fc:21:b0:2b:35:1c:83:10:83:97:3b:15:b3:70:c7:ee:2c:
93:f2:53:0b:5e:92:35:28:38:74:89:07:9d:c2:dc:d1:3f:f2:
a1:cc:b4:69:f8:26:65:99:e3:af:20:05:fc:81:2e:d1:9f:ca:
5f:9a:2a:e8:9d:a2:2f:b5:52:8e:57:7c:74:f1:65:ae:ca:b7:
f7:fa:5b:69:4a:49:a7:22:77:77:e2:f5:35:51:50:76:1c:5c:
9c:3c:25:ca:1d:57:20:82:73:df:ba:08:f9:aa:1b:85:fa:65:
aa:8b:42:cf:2b:6a:39:fb:be:bc:e1:42:82:0e:57:9a:44:4c:
2e:6f:62:c0:c7:11:18:85:81:e5:f0:b8:1c:c1:14:50:31:70:
6b:d5:28:d3:4f:f4:f6:7d:40:ff:f0:7a:e8:31:e5:5e:a7:4d:
7f:45:30:3e:63:5d:d5:07:b2:58:3b:1e:ed:ac:82:94:00:aa:
e1:fe:b6:bb:fa:2f:08:7d:20:e7:21:d3:92:ce:f2:dc:0f:f0:
41:b2:8c:93:22:93:1a:c6:99:71:13:e5:e1:fe:26:99:a0:44:
47:f2:bd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:23:58 2026 by rpki-client