Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
File: PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft (raw, json)
Hash identifier: ecwRi/15cRvpWdZmVR4V+dzxILmjE4F3xYFAQGYINUY=
Subject key identifier: 33:12:B8:A1:DB:D1:A6:E9:05:8F:A0:16:10:78:90:D0:97:4E:FD:78
Authority key identifier: 3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
Certificate issuer: /CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Certificate serial: 019D254C74B705EB79B3246B78BD8BFD14C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 14:01:00 +0000
Manifest this update: Wed 25 Mar 2026 14:01:00 +0000
Manifest next update: Thu 26 Mar 2026 14:01:00 +0000
Files and hashes: 1: D6JN_SUanY3VCPcy8MM0wRyWpFg.asa (hash: GO31s3wbPJQu1T3Grsa85oI8sAVmrZULl2h6J3A4Dcw=)
2: PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl (hash: owE/YHeGNGVOXEjOLzamp1fY0IRsMNUdLfIihNRhBGA=)
3: iVwLg--4UDbLvJn4dxkRR2fxInw.roa (hash: wrzc6nRtbm4MeWrVh43cUfhaLyz6R8Fbv5xm23WJS0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:74:b7:05:eb:79:b3:24:6b:78:bd:8b:fd:14:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Validity
Not Before: Mar 25 14:01:00 2026 GMT
Not After : Mar 26 14:01:00 2026 GMT
Subject: CN=3312b8a1dbd1a6e9058fa016107890d0974efd78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:81:37:cf:fa:be:3c:89:4a:aa:07:a3:a2:3b:
8f:1f:19:16:61:4d:39:d3:bc:33:b3:8a:f8:c2:83:
36:a4:9d:58:2b:0d:e3:9c:04:09:dc:af:b2:1b:34:
db:33:8a:d3:7b:30:69:ec:ec:fe:a9:44:b6:66:95:
55:40:53:9f:ce:84:69:0c:1d:24:14:62:32:af:2c:
ae:da:c9:59:01:44:14:1a:f6:f3:08:70:5e:3e:d1:
49:65:48:2a:f7:96:f5:12:d2:41:0c:99:df:41:c3:
b0:6e:b6:6a:88:e0:d3:7c:19:e1:f3:88:39:93:42:
4d:c2:df:be:30:cf:06:cd:71:f9:bb:a5:e5:75:eb:
e6:87:04:25:d7:cd:d9:a4:66:b8:ee:1d:c8:f9:b5:
b6:f6:b1:cf:3b:54:aa:53:b0:5f:09:dc:f9:04:d2:
de:25:a3:e8:0e:54:06:b8:ff:b6:38:de:fd:13:1d:
06:ff:18:c3:3f:8d:ac:45:2b:3f:98:e8:67:d5:97:
9e:f0:28:73:4d:80:23:a2:75:37:ed:65:5c:9d:6b:
ae:ee:ed:85:29:e9:62:d7:02:5f:1e:75:b0:3e:b9:
3c:62:63:3d:38:5c:dd:13:85:70:f1:bd:f3:10:8f:
f4:66:f9:66:2f:92:80:58:55:82:e1:ad:9c:c9:02:
0e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:12:B8:A1:DB:D1:A6:E9:05:8F:A0:16:10:78:90:D0:97:4E:FD:78
X509v3 Authority Key Identifier:
keyid:3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:4a:e9:31:bf:cb:93:76:87:aa:7f:94:b4:71:01:2f:5a:fc:
7a:68:5f:3a:66:a3:75:9f:f8:c4:d5:5d:ee:ad:8c:a7:00:66:
d0:5f:89:7b:e8:6b:65:f0:0d:a0:fb:c7:29:53:85:f4:1c:72:
0c:f2:6e:c1:de:c1:21:8d:5c:6d:9e:0f:4e:2f:74:c2:5d:d3:
c5:a9:ba:f3:de:9e:7e:bb:13:0b:6e:37:4a:51:e9:a9:26:cf:
ef:a7:64:a8:f5:27:1c:cb:73:6c:c4:8c:b2:14:8d:87:75:ac:
a8:71:1c:34:2d:68:58:be:fb:d7:07:24:6b:4a:5e:39:2e:70:
94:0a:60:e6:7c:1d:da:28:1c:da:63:87:ff:32:57:81:1c:07:
68:d7:3c:00:5f:2c:c4:a0:3d:61:29:c5:11:5c:8d:16:c9:a5:
d7:67:92:26:33:e2:7b:ad:78:d0:ec:06:34:b2:09:71:8b:37:
b7:90:bc:63:36:4c:db:c3:84:fe:6a:9b:16:0f:c8:3b:6d:f5:
05:ab:43:6d:aa:d3:e4:a7:0a:d4:34:45:df:dc:87:3c:2b:16:
ec:08:c4:e5:c4:9c:ad:a0:cf:cc:3b:7e:68:c4:f2:c6:c9:c8:
0b:95:f0:cc:6e:d7:1d:ee:02:0e:90:6e:44:e8:1f:c0:92:c0:
ca:fa:98:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:22:24 2026 by rpki-client