Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
File: PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft (raw, json)
Hash identifier: dm/zCN/nuky1Bpz0yv0Jc2jbobL+OHVLjMWMVfnUUwU=
Subject key identifier: 7D:82:FE:16:B5:1C:D2:BE:DA:E0:55:FA:C4:00:6E:83:CF:D3:BD:F3
Authority key identifier: 3C:17:7B:52:80:43:A8:59:53:FC:25:0F:99:1D:9D:80:20:E2:81:0D
Certificate issuer: /CN=3c177b528043a85953fc250f991d9d8020e2810d
Certificate serial: 019E1E6C0E1C9386F350691FA4B6DA0DDD43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
Manifest number: 1911
Signing time: Tue 12 May 2026 23:00:58 +0000
Manifest this update: Tue 12 May 2026 23:00:58 +0000
Manifest next update: Wed 13 May 2026 23:00:58 +0000
Files and hashes: 1: PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl (hash: 6dUyVw7eI+Zcc+gOyUP2wLYs2/JJJr56xwvGPNMYkqw=)
2: QHHv-lGS27dlf_Kcr4moiCURb3g.roa (hash: Lcy2JaAZZjozQ94TOOqc21SM3JNpF1vrI2NkHkiFmLY=)
3: gKrLEMKKBPn76EAbd2e67fa8nlA.roa (hash: 2MR02OlNV98WA7eo7V/sklDPjIr74dUCdC13yh8HK9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:0e:1c:93:86:f3:50:69:1f:a4:b6:da:0d:dd:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c177b528043a85953fc250f991d9d8020e2810d
Validity
Not Before: May 12 23:00:58 2026 GMT
Not After : May 13 23:00:58 2026 GMT
Subject: CN=7d82fe16b51cd2bedae055fac4006e83cfd3bdf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4d:8d:0d:e7:82:6f:06:9b:84:98:ee:cb:6e:
c0:fb:ec:37:82:a2:56:3e:ee:12:bf:36:90:c6:ff:
34:3d:2d:8e:49:b1:c9:30:ae:a2:9d:5e:c6:d4:bc:
c5:65:f5:1d:b7:4b:0a:c2:24:75:f1:ed:87:7b:1e:
93:40:6e:32:91:2c:89:48:76:e4:16:7b:b9:c3:04:
d6:b5:04:52:f2:13:f2:e9:70:ba:7f:fc:45:7e:74:
07:bd:c1:6f:e1:f2:c5:f8:bd:41:37:3e:25:24:4e:
c3:68:fa:a7:d5:b1:20:55:91:55:85:24:26:79:27:
ae:b2:31:3b:18:35:00:a6:1f:2b:b3:91:3d:62:25:
9d:f4:46:3c:0c:cd:51:99:bd:da:89:cc:25:57:0e:
98:39:00:55:87:fb:51:a3:f0:bc:c3:5a:db:66:b1:
c9:ce:6b:a3:8c:fa:8b:8d:3d:11:93:10:e9:d6:bf:
39:d2:a9:f2:ef:9c:1a:e0:63:07:ce:2e:43:50:4a:
86:9e:71:ab:e5:7d:d1:4a:69:27:9f:6c:79:b1:14:
f2:10:98:26:c4:30:80:d2:8c:2c:56:bb:bb:ba:e4:
03:18:d3:0d:1b:1f:93:79:4f:e6:23:56:be:a1:69:
e3:dc:bd:fa:19:04:b2:ff:78:2e:66:bf:04:58:ed:
60:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:82:FE:16:B5:1C:D2:BE:DA:E0:55:FA:C4:00:6E:83:CF:D3:BD:F3
X509v3 Authority Key Identifier:
keyid:3C:17:7B:52:80:43:A8:59:53:FC:25:0F:99:1D:9D:80:20:E2:81:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:45:96:eb:91:f9:dc:de:1a:66:98:d5:d6:ac:55:b0:45:41:
b5:2e:3e:13:8a:2c:1b:a3:41:ca:87:88:9d:a0:72:2d:6b:d0:
5d:9d:b2:20:fe:b4:49:cf:e3:2b:c2:cb:62:6c:11:d4:10:e2:
0c:20:93:ff:9f:47:0d:a7:cd:cd:42:27:a8:2b:d6:6b:4d:9f:
73:91:85:6c:b5:e3:85:55:e9:8b:6b:ee:16:5b:51:bd:1d:4d:
4d:6c:87:53:5b:50:00:80:ac:64:e9:13:44:24:d8:cc:df:4f:
c1:e3:c4:de:a5:5e:89:b7:32:f2:4d:93:b4:4a:16:52:65:f4:
9c:6c:9e:f4:04:b4:ba:fa:f7:53:6a:df:9f:33:cb:dc:f7:1f:
b0:da:cf:88:4c:2a:ae:c9:d7:a7:53:b7:e2:36:88:53:0b:66:
a4:90:f9:46:4f:83:21:94:b0:0c:a5:77:0f:b5:63:c1:24:f5:
5b:14:ab:43:2c:76:e3:c4:48:30:e3:9d:b7:dd:f5:c4:c1:4f:
17:90:ed:2a:9a:85:f0:8c:27:fc:dd:fb:80:ba:e0:82:7b:50:
73:72:3a:58:d1:01:75:a3:d5:fe:51:95:10:f9:45:7a:d4:29:
3c:d8:68:43:45:47:d9:71:b5:b4:f1:ef:ca:49:49:08:e8:a7:
e1:32:ec:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:14:15 2026 by rpki-client