Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
File: pBdnGZEpiZeeCGEloqQaEz__3CQ.mft (raw, json)
Hash identifier: lOWojS8NI/XvM7R2BDB9nQu2DWmAFDHpMrd8klQVULw=
Subject key identifier: F4:3C:12:2F:57:0E:BF:14:B8:7C:D5:D2:3D:00:32:75:CB:8D:07:44
Authority key identifier: A4:17:67:19:91:29:89:97:9E:08:61:25:A2:A4:1A:13:3F:FF:DC:24
Certificate issuer: /CN=a4176719912989979e086125a2a41a133fffdc24
Certificate serial: 01A0DD292CD7CA9E950B0B1C9D6566C5437E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
Manifest number: 065D
Signing time: Sat 26 Sep 2026 10:00:57 +0000
Manifest this update: Sat 26 Sep 2026 10:00:57 +0000
Manifest next update: Sun 27 Sep 2026 10:00:57 +0000
Files and hashes: 1: pBdnGZEpiZeeCGEloqQaEz__3CQ.crl (hash: blkxkrdTehR1m/fy8mF0Aqc+ncqXUv58sLQakx2Mmc4=)
2: rARCZBQx81Clx2YkjkNrgwNwwGw.roa (hash: m/bTzb/MHtintyTMzTN6NuL6tPs6yNlDmOaQ8Q4iw1s=)
3: z4Ea-_smfK8pY-O7TeNPgzC6Xm0.roa (hash: 1vptVTLhkufvE9Ios5V+HLnfGDLY4lc0acUg7cG/MQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:29:2c:d7:ca:9e:95:0b:0b:1c:9d:65:66:c5:43:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4176719912989979e086125a2a41a133fffdc24
Validity
Not Before: Sep 26 10:00:57 2026 GMT
Not After : Sep 27 10:00:57 2026 GMT
Subject: CN=f43c122f570ebf14b87cd5d23d003275cb8d0744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:66:3f:97:1f:14:20:cf:d7:4f:37:55:fc:26:
f9:e6:3d:e2:cb:ab:fc:ae:cd:8d:e6:50:8e:f2:4f:
8a:22:d4:b5:e7:14:af:c3:07:25:2c:95:e6:dd:4a:
15:13:43:bc:99:a7:dc:99:9e:4d:a7:9f:4b:95:7a:
5f:2f:d6:4a:f7:a3:8e:fe:34:30:d9:c1:27:2d:18:
ed:75:5e:8c:33:13:47:4d:9e:16:6a:e3:e5:1f:bd:
bb:2e:9b:ba:73:d2:af:ea:be:f1:40:b9:e2:79:5b:
f6:f0:7e:37:bd:24:95:54:58:de:97:05:fb:09:01:
2b:30:88:e5:9b:a7:8e:d1:f9:73:5c:c0:ff:4b:c8:
b6:b0:44:34:ec:ef:9e:40:39:ce:2f:50:6f:e7:da:
18:3a:72:17:30:15:07:6d:7d:19:f1:92:32:15:93:
74:0c:91:50:aa:e5:4e:9d:9c:d3:ec:df:e6:6c:2d:
f2:55:82:0e:5e:77:b5:f0:d1:a4:a5:f6:6a:bd:9a:
b7:0d:29:e6:83:86:d5:d2:a9:fc:44:e0:7d:eb:02:
2d:39:d8:f0:10:25:28:1b:88:99:a3:a9:6a:1b:de:
59:09:97:a4:96:a8:a5:db:f8:17:ea:f6:67:2a:4d:
de:71:aa:73:2d:e1:43:8d:c9:5c:d1:f8:94:1b:55:
1a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3C:12:2F:57:0E:BF:14:B8:7C:D5:D2:3D:00:32:75:CB:8D:07:44
X509v3 Authority Key Identifier:
keyid:A4:17:67:19:91:29:89:97:9E:08:61:25:A2:A4:1A:13:3F:FF:DC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBdnGZEpiZeeCGEloqQaEz__3CQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1a40f5-b9c9-4856-83c6-ef040aebea60/1/pBdnGZEpiZeeCGEloqQaEz__3CQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e7:fd:fe:73:5b:17:a3:95:3d:ae:34:b5:c1:e4:8c:b7:36:
17:80:06:65:7b:a6:ad:87:b6:58:00:54:42:12:b1:bc:50:3e:
36:8a:2c:7c:a3:a1:6e:e8:7b:3e:71:73:cf:72:46:85:ed:ce:
91:d3:46:08:4c:61:00:3b:57:b3:91:9f:e8:b3:dd:cb:0a:b8:
33:e0:1e:76:9b:14:c6:e2:fe:c0:a3:f1:db:0b:02:93:f6:e2:
73:7a:a5:28:d4:16:3d:5a:5c:43:1c:db:fc:99:83:fa:24:a9:
01:2c:84:bf:b2:ca:55:1f:16:2b:6b:38:e9:c5:02:d9:9b:51:
6d:9c:29:46:be:e0:52:92:f5:2c:ad:8d:89:e4:c9:92:cc:8d:
4a:ac:d5:09:fd:60:09:b1:ce:c9:cc:01:13:21:7a:a4:b8:4c:
d4:fe:db:a7:39:a6:c5:51:78:de:6c:1e:f2:e1:99:d0:0b:78:
e7:87:7a:7c:4b:5e:25:44:c9:07:1f:90:b6:dc:3a:ad:0a:35:
dc:19:07:90:f6:21:a2:8c:bd:6e:f4:95:62:6a:39:05:aa:92:
a3:bc:2f:81:de:5f:29:a1:ac:51:5d:65:10:e5:b5:2d:aa:42:
53:65:9e:b1:34:d4:79:22:c6:bc:12:0c:81:cf:92:e1:9f:8d:
f9:d4:a0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:14:03 2026 by rpki-client