Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
File: PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft (raw, json)
Hash identifier: 3nx60C6EudzhbiMuc6eHLX1bhhvHLY3E9GeemAmAXu0=
Subject key identifier: 53:4D:14:33:A3:41:CB:65:D3:35:FD:52:DB:C8:F7:82:13:10:D4:9C
Authority key identifier: 3C:17:7B:52:80:43:A8:59:53:FC:25:0F:99:1D:9D:80:20:E2:81:0D
Certificate issuer: /CN=3c177b528043a85953fc250f991d9d8020e2810d
Certificate serial: 019D273AF4D3A6B1CE74372BC77E5CA4B7E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
Manifest number: 1891
Signing time: Wed 25 Mar 2026 23:01:08 +0000
Manifest this update: Wed 25 Mar 2026 23:01:08 +0000
Manifest next update: Thu 26 Mar 2026 23:01:08 +0000
Files and hashes: 1: PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl (hash: uEWZAYQgKqcDwjTTVvffHeihuMT/hag6Yer3lGTCGUE=)
2: QHHv-lGS27dlf_Kcr4moiCURb3g.roa (hash: Lcy2JaAZZjozQ94TOOqc21SM3JNpF1vrI2NkHkiFmLY=)
3: gKrLEMKKBPn76EAbd2e67fa8nlA.roa (hash: 2MR02OlNV98WA7eo7V/sklDPjIr74dUCdC13yh8HK9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:f4:d3:a6:b1:ce:74:37:2b:c7:7e:5c:a4:b7:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c177b528043a85953fc250f991d9d8020e2810d
Validity
Not Before: Mar 25 23:01:08 2026 GMT
Not After : Mar 26 23:01:08 2026 GMT
Subject: CN=534d1433a341cb65d335fd52dbc8f7821310d49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c3:57:5d:67:96:c9:ff:23:72:53:a0:31:77:
ea:4c:8e:4d:c0:1e:c4:9e:6a:7b:2a:cd:70:ac:9b:
27:57:5a:f8:8c:36:01:08:97:eb:8d:ca:a0:97:7b:
6b:8c:c5:c6:85:6e:f2:ad:99:82:61:92:58:c7:4f:
01:21:ad:2f:0e:92:16:48:55:f0:13:9c:d3:45:76:
dd:f2:d3:44:10:83:87:cd:c6:3a:97:eb:72:ee:dc:
c1:d4:bd:a9:20:4f:b1:f1:7f:0c:a1:5a:0d:2b:a4:
93:70:67:34:d5:24:14:c3:33:24:47:b3:be:c7:03:
10:bb:a1:60:69:98:bd:5a:31:f1:2f:61:07:82:81:
52:45:18:d0:70:42:93:be:6e:98:7a:28:da:aa:2d:
33:15:8b:82:17:43:11:c7:42:16:e8:98:33:94:04:
d7:24:3e:a6:af:58:93:8b:f0:29:af:73:84:ca:fb:
a9:d7:df:b1:d3:45:c3:7e:12:d5:20:c4:a7:2f:d0:
98:84:a9:e1:8f:b9:89:44:09:aa:27:ba:a7:11:34:
70:32:0a:28:ce:92:34:46:f3:84:a9:cd:51:6c:d7:
26:ff:85:a7:05:58:31:9d:4e:37:b7:7f:0a:bf:1a:
ba:fb:d0:0f:62:f7:80:b9:c4:55:53:89:f0:73:30:
25:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:4D:14:33:A3:41:CB:65:D3:35:FD:52:DB:C8:F7:82:13:10:D4:9C
X509v3 Authority Key Identifier:
keyid:3C:17:7B:52:80:43:A8:59:53:FC:25:0F:99:1D:9D:80:20:E2:81:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d8:0c:06:54:e2:59:e3:de:28:03:65:c6:90:43:be:ef:78:
81:27:0e:9b:73:7b:67:92:b6:d2:bc:a6:2b:d9:e0:1f:77:84:
8f:e5:af:ef:77:4a:e3:f9:b0:31:ca:6e:84:62:cb:9f:d9:e7:
76:bd:58:95:66:11:88:bd:6f:53:40:91:58:2b:80:fa:d3:34:
3a:dc:be:d4:eb:c1:29:49:b0:2b:4a:0c:80:75:e1:f9:6c:20:
ea:ad:28:17:dc:98:d5:4e:7a:3d:55:1a:44:a5:a9:bd:6f:16:
7c:26:ea:e6:43:ba:00:76:50:0f:d2:dc:ad:3b:87:f6:5f:5d:
0d:3a:e3:85:55:a9:ae:2e:3c:2d:8d:f0:cd:29:e7:21:6c:2f:
01:2e:31:97:66:5f:0c:b7:9d:b4:5e:60:08:bc:49:b7:d5:1b:
2f:11:de:62:f7:a2:f9:61:7d:b4:2f:5a:02:eb:f5:82:05:58:
40:1b:34:59:f9:f8:a8:b6:c5:27:6c:4c:96:78:1d:fd:64:12:
2a:a0:22:8b:20:e8:b7:c8:c7:bb:95:69:31:ae:ae:9e:1e:ae:
58:6d:ba:5c:a6:18:e9:72:3a:90:3a:14:db:25:d7:95:35:ee:
11:ba:ea:48:02:c9:42:d9:6a:55:2c:79:e0:4c:04:a9:c9:78:
1e:87:d4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:49:19 2026 by rpki-client