Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft
File: PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft (raw, json)
Hash identifier: 5/WaM5jQFyvWXt27qlezEV8I+oXZ8OLXyoS/YnKvz9Q=
Subject key identifier: E3:60:EF:9C:84:E7:C9:99:47:7B:6A:26:8A:66:5C:23:8F:F2:23:29
Authority key identifier: 3C:AB:C3:DD:E8:F1:6C:F6:D9:18:A4:0F:16:82:CA:41:BE:4D:0A:41
Certificate issuer: /CN=3cabc3dde8f16cf6d918a40f1682ca41be4d0a41
Certificate serial: 019D2A3B8E7AD4C15CAF19134E420AEEE718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKvD3ejxbPbZGKQPFoLKQb5NCkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft
Manifest number: 0FB2
Signing time: Thu 26 Mar 2026 13:00:39 +0000
Manifest this update: Thu 26 Mar 2026 13:00:39 +0000
Manifest next update: Fri 27 Mar 2026 13:00:39 +0000
Files and hashes: 1: PKvD3ejxbPbZGKQPFoLKQb5NCkE.crl (hash: rF6HGTtZbvAeUogKOz/L8zdOge5ARsbVYZ/zgCfGF8c=)
2: jSTMNWI98laPeFskt5VdyYCzFn4.roa (hash: gzOEKofa3x731/L1ThXmhgX8mhfqgZGpQnOVJpBrNiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PKvD3ejxbPbZGKQPFoLKQb5NCkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:8e:7a:d4:c1:5c:af:19:13:4e:42:0a:ee:e7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cabc3dde8f16cf6d918a40f1682ca41be4d0a41
Validity
Not Before: Mar 26 13:00:39 2026 GMT
Not After : Mar 27 13:00:39 2026 GMT
Subject: CN=e360ef9c84e7c999477b6a268a665c238ff22329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b2:8f:ff:75:fd:c7:31:df:fb:4a:e4:df:77:
a5:af:99:d9:05:1e:6e:7a:6f:c7:ff:54:48:b2:1b:
8f:3d:0f:88:a1:e9:ed:f9:8f:83:5f:5c:18:b3:ea:
b7:7e:b4:bb:f5:2b:45:f7:80:a0:75:2b:89:f5:8e:
b8:8d:ea:19:11:3d:55:06:57:59:f7:fc:18:71:5b:
97:46:d6:8c:0a:ed:52:fe:83:28:40:a4:d8:f4:55:
0b:da:ed:d7:8c:e9:42:20:5b:5e:10:6c:73:2e:40:
a7:a4:48:1d:58:1c:63:63:b0:d6:b3:77:3a:6c:ed:
74:d8:21:63:c5:f0:2a:c2:d7:c5:cd:04:20:67:aa:
90:a0:4c:85:d9:3f:df:a2:3d:7b:c7:ad:59:30:f2:
78:f4:86:fb:c5:f7:37:77:e9:81:cc:51:2d:a2:8b:
fb:b3:af:47:51:47:db:f2:f6:f3:ca:34:bf:18:6f:
7f:60:b6:c7:e6:f3:69:39:09:59:02:d4:64:f1:ce:
11:2d:b7:f5:3e:75:c1:99:33:84:8f:87:cb:6e:c7:
4c:40:de:c0:0a:84:63:68:25:a0:85:a3:27:ec:da:
80:98:82:60:0b:f0:0b:26:9e:60:2a:6e:c7:d1:84:
c7:d3:e3:44:04:7e:cd:26:e8:26:85:ae:12:33:5a:
ae:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:60:EF:9C:84:E7:C9:99:47:7B:6A:26:8A:66:5C:23:8F:F2:23:29
X509v3 Authority Key Identifier:
keyid:3C:AB:C3:DD:E8:F1:6C:F6:D9:18:A4:0F:16:82:CA:41:BE:4D:0A:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKvD3ejxbPbZGKQPFoLKQb5NCkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:12:9d:98:f9:74:43:fe:74:3e:89:fd:82:05:25:31:77:4e:
9a:45:86:6e:98:69:22:43:5e:c6:7a:3c:fc:68:80:55:c9:ca:
7f:cc:d3:e3:87:bd:91:00:2e:a9:62:8a:86:18:c8:d7:15:34:
7c:97:a4:3f:6f:20:11:6e:91:67:fc:71:1c:64:d4:42:5f:90:
08:24:58:2e:99:00:1d:06:23:ca:de:24:35:23:1b:d2:8f:c0:
a4:7c:91:69:24:89:f9:d5:87:69:54:b5:6e:b9:eb:fb:c4:7a:
80:92:04:53:68:13:1f:6e:f3:e4:6a:b1:92:86:ef:e7:23:af:
fb:37:36:6a:c6:2f:a0:2e:e8:4f:59:53:95:b8:f6:93:43:f5:
65:89:c9:a2:49:09:3d:5a:16:69:cb:c7:2f:ae:06:6a:22:5a:
10:19:50:c2:ce:2d:79:d0:ce:9b:69:eb:61:7e:3e:df:5c:28:
d8:02:c2:82:ca:16:74:2e:47:c4:58:21:4a:bb:35:51:e4:76:
d4:32:a2:0f:1e:37:6a:c0:ed:98:22:62:ef:f1:35:e7:53:62:
14:7c:83:c9:0d:21:f2:54:e3:00:0e:2a:e1:d5:3b:ad:eb:7c:
ab:1d:bc:67:4a:a7:7e:55:86:df:70:7e:6c:49:33:fd:d3:2f:
dc:72:16:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:21:10 2026 by rpki-client