Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.mft
File: PBQVQhaFrONoLxYdMQ2ScmzfsJc.mft (raw, json)
Hash identifier: W7jdtlj1anEWPpRxvsqmcHU/EAIwKfWX3/E4BbZnVwc=
Subject key identifier: 7C:00:91:2B:4A:30:98:62:7E:9D:95:BD:11:B4:A9:21:18:F0:4D:1D
Authority key identifier: 3C:14:15:42:16:85:AC:E3:68:2F:16:1D:31:0D:92:72:6C:DF:B0:97
Certificate issuer: /CN=3c1415421685ace3682f161d310d92726cdfb097
Certificate serial: 019D2AE035B311905DDF1BFEABD70FFAEF88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBQVQhaFrONoLxYdMQ2ScmzfsJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 16:00:29 +0000
Manifest this update: Thu 26 Mar 2026 16:00:29 +0000
Manifest next update: Fri 27 Mar 2026 16:00:29 +0000
Files and hashes: 1: PBQVQhaFrONoLxYdMQ2ScmzfsJc.crl (hash: uHN18wf9uefH4iHDtzagJiA6mX/HpLKsaDft8o96BPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBQVQhaFrONoLxYdMQ2ScmzfsJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:35:b3:11:90:5d:df:1b:fe:ab:d7:0f:fa:ef:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1415421685ace3682f161d310d92726cdfb097
Validity
Not Before: Mar 26 16:00:29 2026 GMT
Not After : Mar 27 16:00:29 2026 GMT
Subject: CN=7c00912b4a3098627e9d95bd11b4a92118f04d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:83:fe:a4:c9:8f:20:62:c1:3f:46:8b:3f:b7:
ee:1f:35:6a:85:40:13:1a:3c:30:1b:60:ba:14:a1:
46:36:01:12:d0:87:ba:50:d1:04:c8:4c:d9:21:36:
b8:d8:08:99:f4:9c:a6:e4:d2:3f:23:f1:e4:99:07:
89:20:fe:57:31:87:fe:f6:f5:78:cf:0c:51:48:ab:
8d:b3:f4:d6:51:b2:78:52:07:a1:d1:4c:e4:3c:36:
3c:1e:96:1d:21:05:1a:0d:fa:7f:a8:c3:33:77:57:
f6:52:38:1c:f7:a8:9d:af:84:95:9b:ec:db:e4:05:
11:89:0c:a6:bb:6a:d5:b8:9d:e7:1c:1a:59:f7:45:
91:09:ef:bd:a3:4d:9d:7a:5b:19:c8:91:2f:56:d0:
40:66:40:de:56:a5:7b:0a:5a:f5:03:e5:0d:dd:45:
08:a8:be:5b:26:23:06:dd:fa:ff:23:7f:79:f6:2c:
b8:69:40:72:fa:28:a4:02:21:33:1b:69:30:29:a4:
5c:b9:bd:d8:40:48:83:e8:04:6c:f8:86:f0:0f:d4:
c5:b2:64:c2:c5:9f:ea:16:a7:62:66:e8:ee:7a:50:
57:2a:1e:a8:34:14:b1:35:e5:53:25:ce:a2:06:5e:
cc:80:0e:d2:59:90:a1:3d:0a:93:da:42:85:6b:fa:
90:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:00:91:2B:4A:30:98:62:7E:9D:95:BD:11:B4:A9:21:18:F0:4D:1D
X509v3 Authority Key Identifier:
keyid:3C:14:15:42:16:85:AC:E3:68:2F:16:1D:31:0D:92:72:6C:DF:B0:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBQVQhaFrONoLxYdMQ2ScmzfsJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:37:17:4d:df:35:47:88:cb:12:ec:22:e4:ec:82:da:d7:f4:
ea:af:f6:fd:af:e2:54:13:2c:e2:10:6e:8b:e2:48:ac:fe:37:
a5:ce:3d:41:35:f7:96:b9:b1:4f:ca:7c:df:fd:dc:a5:12:dc:
d4:fb:12:80:97:a2:8e:71:a6:f7:2a:28:04:be:7b:39:ab:c1:
3a:45:7d:a8:05:f1:d1:59:56:3f:49:16:2f:5a:20:71:f0:1a:
00:eb:49:10:fb:94:fc:91:5e:f1:59:47:fc:45:1f:48:29:37:
0a:02:54:16:ff:ae:71:69:a8:a6:81:59:66:8d:2d:84:fb:1b:
ba:c1:75:f8:47:c5:54:77:86:19:01:8a:e8:36:d5:e1:8d:d1:
d1:3a:2f:d3:67:76:e6:23:64:bf:cd:dc:60:4d:ff:d5:69:3a:
9c:b2:f9:d7:13:89:32:1e:5a:cc:a4:54:ac:6f:b5:c1:55:a3:
8f:52:5a:30:7e:9e:25:a6:32:c5:31:17:00:82:8c:a7:14:ba:
e9:d4:58:aa:98:48:fc:56:23:44:9b:04:69:4c:8a:a0:d2:29:
51:86:87:32:a8:91:e7:db:0c:95:9d:ea:a9:26:da:9e:c7:33:
21:e7:d8:4a:b0:54:fb:86:a8:c4:c4:71:88:42:d5:5b:02:fb:
e2:6e:9c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:07 2026 by rpki-client