Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
File: pBdnGZEpiZeeCGEloqQaEz__3CQ.mft (raw, json)
Hash identifier: CQS4G98Y5gAekxb51eLHsx8zbQAe0/Pqj4wY1T6c0XA=
Subject key identifier: FB:E0:62:50:EC:CE:4D:87:22:42:36:EF:C6:03:B6:AE:0F:4D:85:C8
Authority key identifier: A4:17:67:19:91:29:89:97:9E:08:61:25:A2:A4:1A:13:3F:FF:DC:24
Certificate issuer: /CN=a4176719912989979e086125a2a41a133fffdc24
Certificate serial: 019D2703FFC0D7E9BA206C551E58D2C3A945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
Manifest number: 0471
Signing time: Wed 25 Mar 2026 22:01:06 +0000
Manifest this update: Wed 25 Mar 2026 22:01:06 +0000
Manifest next update: Thu 26 Mar 2026 22:01:06 +0000
Files and hashes: 1: pBdnGZEpiZeeCGEloqQaEz__3CQ.crl (hash: HBYh549a0f8zGFv/StfnmjLk8iYBxWOXrx6P1G1s7tk=)
2: rARCZBQx81Clx2YkjkNrgwNwwGw.roa (hash: m/bTzb/MHtintyTMzTN6NuL6tPs6yNlDmOaQ8Q4iw1s=)
3: z4Ea-_smfK8pY-O7TeNPgzC6Xm0.roa (hash: 1vptVTLhkufvE9Ios5V+HLnfGDLY4lc0acUg7cG/MQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:ff:c0:d7:e9:ba:20:6c:55:1e:58:d2:c3:a9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4176719912989979e086125a2a41a133fffdc24
Validity
Not Before: Mar 25 22:01:06 2026 GMT
Not After : Mar 26 22:01:06 2026 GMT
Subject: CN=fbe06250ecce4d87224236efc603b6ae0f4d85c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:04:25:a4:d4:1e:c1:c4:ca:ef:0a:50:74:b8:
33:9e:3a:1b:e8:b4:26:d7:a7:1d:a1:a9:c5:88:2d:
ef:1e:dc:1d:c5:1d:4f:14:86:a1:fc:2a:9f:37:36:
d0:c7:e1:80:cc:59:0e:7e:99:39:3c:b6:5b:b5:2c:
dc:59:30:e2:97:28:d1:91:22:df:e0:c8:98:f2:3f:
a2:7a:7a:ce:9f:3d:a9:bc:32:84:28:ce:8a:66:0d:
9f:9f:90:db:f6:33:43:3e:c9:cc:75:c6:fb:11:89:
b1:c2:3d:ca:b5:e1:62:0e:3e:8f:02:78:b7:b3:ef:
79:9e:8e:0a:50:ad:77:ed:ef:44:dc:bc:c8:1c:ad:
bc:4c:05:a6:dd:40:57:64:38:aa:d1:9e:1a:e9:37:
1b:11:3a:80:6b:8e:f2:f1:30:68:f4:07:81:78:69:
ca:91:6e:35:bb:b4:cb:e3:4e:64:62:01:5c:2c:1f:
94:a0:a2:82:65:fd:d3:f1:7e:53:9e:c2:85:a7:88:
53:02:ba:51:8b:ca:a6:dd:17:19:b1:a0:51:be:ec:
95:ca:04:bc:4b:f2:8c:a7:52:ae:4e:d6:10:27:07:
9d:d9:78:de:97:33:81:67:db:9a:02:a4:a1:94:21:
1e:b2:b3:cb:34:93:04:22:4d:bf:fb:d3:12:21:26:
23:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E0:62:50:EC:CE:4D:87:22:42:36:EF:C6:03:B6:AE:0F:4D:85:C8
X509v3 Authority Key Identifier:
keyid:A4:17:67:19:91:29:89:97:9E:08:61:25:A2:A4:1A:13:3F:FF:DC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c0:b7:24:03:19:75:e0:47:00:14:00:dc:72:1a:2d:12:97:
6d:b1:b8:c1:ff:a1:f1:45:e4:d6:41:de:12:84:0e:41:4e:8f:
e5:76:5d:e0:2f:bc:36:e2:21:89:76:e5:0f:ca:92:38:e5:76:
5c:75:e8:8c:7b:ac:b0:51:5e:14:bf:fb:f5:8b:68:1a:3b:99:
64:a2:4d:c4:3c:1a:8d:3b:52:3c:ee:44:d5:05:18:77:08:d6:
83:21:b9:d4:72:97:54:82:9f:68:92:a4:56:93:99:16:2f:79:
f1:a8:07:39:39:2e:26:70:20:5b:a6:53:3c:74:da:13:bc:35:
40:0f:3f:62:41:be:35:09:21:de:62:48:94:61:d3:40:75:a5:
6b:af:47:80:e3:6e:f0:7b:4e:88:d5:8f:fc:0e:e4:4f:b4:5c:
96:10:a4:58:61:e5:b7:be:42:d5:e7:5d:37:14:3a:08:37:4a:
bf:d4:01:3b:7e:76:f5:d0:bc:28:7b:2c:39:19:03:23:1f:1d:
b2:4f:3f:31:cd:a0:17:39:bf:8b:b2:08:9f:33:8c:f6:cd:f0:
6b:0f:d1:5b:24:ea:c1:a9:15:7e:ee:68:66:73:bf:8b:4e:e4:
b8:48:8a:e1:19:cb:dc:72:86:cf:98:51:5d:a1:74:27:64:be:
78:69:f8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:16 2026 by rpki-client