Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
File: PqGMkbK-KKB0uaOHSpC0RgE84b4.mft (raw, json)
Hash identifier: TJoxEEICQo5uIRFU+SSU7F4S+nwYrABQ35L9GbuDBHY=
Subject key identifier: 97:B9:8E:63:6F:5F:CA:E7:C2:4D:8B:8F:59:C3:C3:02:64:35:27:05
Authority key identifier: 3E:A1:8C:91:B2:BE:28:A0:74:B9:A3:87:4A:90:B4:46:01:3C:E1:BE
Certificate issuer: /CN=3ea18c91b2be28a074b9a3874a90b446013ce1be
Certificate serial: 019E1FB5BBC8588B46F52F4DF71444078D5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqGMkbK-KKB0uaOHSpC0RgE84b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
Manifest number: 069D
Signing time: Wed 13 May 2026 05:01:04 +0000
Manifest this update: Wed 13 May 2026 05:01:04 +0000
Manifest next update: Thu 14 May 2026 05:01:04 +0000
Files and hashes: 1: PqGMkbK-KKB0uaOHSpC0RgE84b4.crl (hash: 2OW1wQANm7VHV3RTpvP8N+Yn7oxP7l/oS7zncCtGs20=)
2: gHuLcIKcn2iD6YpXmVRm72KupiQ.roa (hash: FWAOBqOIoer8EKcUh4bDcvJog66L4foyvXVuyT1R4Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqGMkbK-KKB0uaOHSpC0RgE84b4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:bb:c8:58:8b:46:f5:2f:4d:f7:14:44:07:8d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea18c91b2be28a074b9a3874a90b446013ce1be
Validity
Not Before: May 13 05:01:04 2026 GMT
Not After : May 14 05:01:04 2026 GMT
Subject: CN=97b98e636f5fcae7c24d8b8f59c3c30264352705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9f:f5:e1:32:27:bf:b2:50:e4:71:66:34:3a:
69:d3:dc:cd:a3:a3:28:0c:eb:b7:0f:8a:2d:ec:03:
24:12:bf:36:e6:24:b7:72:31:3a:93:36:0b:98:b7:
19:49:44:7c:b1:ad:9f:8d:79:3b:81:43:1b:bf:56:
75:54:45:71:b9:1d:0e:d7:fc:08:c0:ca:31:14:12:
38:b3:7e:59:6d:7a:01:cb:1a:ff:31:01:23:c3:56:
10:7c:ce:4f:bc:0a:ab:ce:5c:4d:32:94:ae:19:f5:
a0:16:26:df:c5:5c:ba:d6:ca:4d:a2:95:98:a3:06:
7a:ab:f8:c9:96:33:65:2a:54:22:b5:a8:ba:62:cd:
b1:a6:5d:a6:76:36:ee:0c:75:e2:8c:9b:c3:57:19:
a5:5a:50:59:b1:62:a8:f4:c9:e5:98:58:d3:1b:b7:
3e:ec:9b:af:d0:80:a4:11:69:51:aa:95:0a:8a:33:
c7:7b:c2:82:99:db:be:50:14:59:3e:d2:52:31:6a:
39:36:ed:4f:20:8e:69:48:1e:31:79:9e:e7:2d:fc:
84:1b:3c:2e:bb:0e:0e:62:bc:c1:73:2e:b3:24:86:
41:9f:92:36:8c:40:23:ed:2b:41:af:5a:bf:c8:98:
2a:4f:5f:59:d3:6a:5f:76:4c:0c:48:75:c1:5a:a1:
9b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B9:8E:63:6F:5F:CA:E7:C2:4D:8B:8F:59:C3:C3:02:64:35:27:05
X509v3 Authority Key Identifier:
keyid:3E:A1:8C:91:B2:BE:28:A0:74:B9:A3:87:4A:90:B4:46:01:3C:E1:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqGMkbK-KKB0uaOHSpC0RgE84b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f4:38:e3:3c:38:24:49:95:7b:5d:6c:a6:51:77:a9:1e:c6:
d0:e8:f9:a2:db:72:d9:87:63:21:e4:42:c2:77:59:ab:2c:bd:
2e:b8:4d:c1:4e:16:6f:e0:30:7e:0d:3b:91:f0:77:db:34:a7:
d3:a5:18:c5:eb:db:40:b4:98:22:21:d4:fc:3c:d0:2b:7c:b2:
0f:4e:9f:d5:cd:83:72:6e:dc:7a:7e:35:a1:d0:48:b6:25:87:
aa:1c:84:21:77:7c:b5:1e:bd:6a:f6:bd:0a:37:cb:b5:c6:bc:
db:46:7f:e0:ba:4c:ed:cc:86:b8:6f:9f:b8:9b:3e:c4:be:cc:
39:d7:9a:23:ce:3b:88:53:49:73:1f:2f:db:16:b5:21:8f:cb:
c1:b4:b1:2d:2a:31:85:6a:76:28:0f:ef:51:2a:9c:66:5d:a7:
f8:99:d4:74:e8:45:c8:4c:75:c8:c0:49:3f:b2:4e:a1:d7:9e:
00:8a:1f:9a:ed:04:be:d9:f0:47:88:f4:77:93:75:ad:22:c1:
bd:f2:9a:ae:9c:92:e6:9d:c0:44:b5:b3:41:a7:8f:3d:0c:3e:
8e:31:56:70:1f:7c:44:51:a4:cb:fc:50:c1:89:41:1c:4d:04:
26:6b:2a:c2:fd:61:c5:1d:1b:37:10:80:03:df:09:11:0c:ee:
21:46:d5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:35:02 2026 by rpki-client