Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
File: pBdnGZEpiZeeCGEloqQaEz__3CQ.mft (raw, json)
Hash identifier: E7Y9x2Qj3tDrNs/VCTp6/ibCZnRST4gILfNNLvSAGzg=
Subject key identifier: 75:BC:18:43:F8:72:A0:99:99:F0:5A:CB:31:88:23:61:DB:BB:72:51
Authority key identifier: A4:17:67:19:91:29:89:97:9E:08:61:25:A2:A4:1A:13:3F:FF:DC:24
Certificate issuer: /CN=a4176719912989979e086125a2a41a133fffdc24
Certificate serial: 019E1E35C35B25E2EC2D456962483CF3F5C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
Manifest number: 04F1
Signing time: Tue 12 May 2026 22:01:40 +0000
Manifest this update: Tue 12 May 2026 22:01:40 +0000
Manifest next update: Wed 13 May 2026 22:01:40 +0000
Files and hashes: 1: pBdnGZEpiZeeCGEloqQaEz__3CQ.crl (hash: JYeE70JtjWxRAl9DILJrIOhZSstzpJt58+CHPJa0YUA=)
2: rARCZBQx81Clx2YkjkNrgwNwwGw.roa (hash: m/bTzb/MHtintyTMzTN6NuL6tPs6yNlDmOaQ8Q4iw1s=)
3: z4Ea-_smfK8pY-O7TeNPgzC6Xm0.roa (hash: 1vptVTLhkufvE9Ios5V+HLnfGDLY4lc0acUg7cG/MQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:c3:5b:25:e2:ec:2d:45:69:62:48:3c:f3:f5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4176719912989979e086125a2a41a133fffdc24
Validity
Not Before: May 12 22:01:40 2026 GMT
Not After : May 13 22:01:40 2026 GMT
Subject: CN=75bc1843f872a09999f05acb31882361dbbb7251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:51:3a:c6:e0:bb:22:88:4a:51:21:21:36:01:
39:38:91:51:56:82:4a:2f:4c:2d:fe:48:05:1e:10:
f1:49:c8:8a:a6:fa:04:b3:ad:81:7d:5a:ef:2f:72:
24:9a:4d:7a:35:77:ba:f1:00:ec:4f:d6:51:c2:b1:
5e:17:11:ab:68:38:8e:67:c1:de:6c:f4:a2:d9:a9:
9c:3f:cb:99:8a:fd:5b:4d:b6:f9:a6:2b:1c:df:6a:
a2:1b:66:35:fb:c3:93:81:5e:d2:d7:9b:9c:ec:3a:
97:e7:73:dd:59:8e:de:31:ac:42:87:9b:a5:be:d9:
45:e2:be:2f:30:a5:05:36:42:63:5e:25:54:b7:9f:
a6:d6:b9:6f:c4:41:de:7e:71:7d:d7:e4:82:ae:47:
f1:2e:c1:1d:57:d6:5a:65:7c:bc:fb:f6:e1:35:a9:
d5:60:e5:93:f4:92:12:2d:ae:a5:c0:59:84:85:aa:
ab:b5:70:ab:c5:20:77:67:dd:76:8d:c4:98:e6:1e:
11:44:93:4f:b2:6a:e5:ff:6b:98:a5:f0:de:25:4c:
51:46:d3:d5:05:16:bb:59:50:04:3b:c0:54:b1:b9:
10:2a:83:3f:a7:e6:6b:e0:c2:15:0f:74:f8:8d:79:
3e:3d:c4:26:22:5c:26:d2:9d:bf:44:e6:3d:71:fe:
5a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BC:18:43:F8:72:A0:99:99:F0:5A:CB:31:88:23:61:DB:BB:72:51
X509v3 Authority Key Identifier:
keyid:A4:17:67:19:91:29:89:97:9E:08:61:25:A2:A4:1A:13:3F:FF:DC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:9a:cf:f4:a4:74:2b:43:2c:12:3b:db:49:de:42:a2:b0:a2:
7b:d9:cb:9f:91:c1:5c:b3:2b:8f:e6:02:77:01:b7:97:8a:2f:
57:a2:3b:bb:11:b2:0d:fb:d1:f0:9a:8c:26:80:85:d5:f4:d8:
1f:85:21:39:a7:e4:69:d5:ca:cc:d6:e2:f2:72:aa:3c:57:39:
44:50:fb:cc:4f:1c:be:74:76:73:15:d7:e0:b5:8d:25:b1:9f:
43:f6:1e:51:1e:27:ff:b8:fb:b1:ce:6b:63:ec:a9:6d:3c:0f:
01:b2:f4:58:14:ce:28:21:d0:ae:e3:0b:a7:b1:40:5d:a3:39:
9d:55:af:4e:e5:b7:33:34:37:79:ef:73:d7:c2:62:06:15:e2:
61:33:18:54:23:62:b2:24:3c:9f:ff:6f:a8:75:c9:cc:a3:48:
43:26:e6:fd:5f:5d:bb:f8:e5:46:df:5f:45:48:65:ab:c3:f5:
28:e7:5b:bb:be:13:43:72:83:7e:03:4d:18:9f:eb:41:20:56:
4d:ef:b3:55:62:14:b1:e1:ba:ba:f8:e7:ec:83:1f:7a:8e:72:
7f:92:03:5c:fb:df:40:d3:34:c0:c6:8f:8f:31:bf:bc:a5:69:
7c:c8:6e:0e:0b:3f:70:8f:81:a4:e7:9e:08:b0:31:b0:98:4f:
3d:00:74:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:09:58 2026 by rpki-client