Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
File: PqGMkbK-KKB0uaOHSpC0RgE84b4.mft (raw, json)
Hash identifier: PN9vedZ1i+bj6TkYFCLTrnZmthWVuAIoVAVoRqwpdPg=
Subject key identifier: B2:DB:00:09:1D:18:D0:B3:BA:5D:2C:4F:D3:8B:4C:A3:05:41:4E:F8
Authority key identifier: 3E:A1:8C:91:B2:BE:28:A0:74:B9:A3:87:4A:90:B4:46:01:3C:E1:BE
Certificate issuer: /CN=3ea18c91b2be28a074b9a3874a90b446013ce1be
Certificate serial: 019D2A722E6F64D54AC1B1560BDB90B30BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqGMkbK-KKB0uaOHSpC0RgE84b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
Manifest number: 061E
Signing time: Thu 26 Mar 2026 14:00:19 +0000
Manifest this update: Thu 26 Mar 2026 14:00:19 +0000
Manifest next update: Fri 27 Mar 2026 14:00:19 +0000
Files and hashes: 1: PqGMkbK-KKB0uaOHSpC0RgE84b4.crl (hash: IkP3GuV/xYi3K3NT+iHMiAAMGM3yzkMvJturKfvDWHQ=)
2: gHuLcIKcn2iD6YpXmVRm72KupiQ.roa (hash: FWAOBqOIoer8EKcUh4bDcvJog66L4foyvXVuyT1R4Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqGMkbK-KKB0uaOHSpC0RgE84b4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:2e:6f:64:d5:4a:c1:b1:56:0b:db:90:b3:0b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea18c91b2be28a074b9a3874a90b446013ce1be
Validity
Not Before: Mar 26 14:00:19 2026 GMT
Not After : Mar 27 14:00:19 2026 GMT
Subject: CN=b2db00091d18d0b3ba5d2c4fd38b4ca305414ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c8:87:71:68:8d:d7:96:8d:b7:30:31:5e:da:
2a:4b:eb:a0:32:f3:94:f1:64:9c:79:57:be:b6:08:
82:9a:3c:08:4b:aa:cf:c8:e2:d4:ae:7f:b7:e0:5a:
b9:a1:6a:16:17:00:da:5b:8a:71:28:07:a4:7c:bc:
a6:56:88:ee:04:a8:34:a1:b7:b0:7c:44:14:1f:42:
3e:15:4c:fd:31:3e:36:b5:e7:c2:73:61:2c:03:85:
64:1e:e7:3e:64:96:32:cf:90:ff:f6:dc:a3:15:72:
93:14:ed:c6:23:22:35:26:8c:19:d7:b3:df:60:e7:
4b:43:25:d9:ab:7d:3f:06:f6:59:85:7c:db:69:34:
8a:49:13:eb:1a:cf:43:5c:8b:0a:d7:f9:2d:87:a9:
cb:30:e9:af:7f:7e:36:40:10:ae:13:3b:0c:01:b4:
fe:02:92:76:f7:39:9b:39:f8:63:19:13:d9:cc:14:
6c:b1:57:2c:fb:1d:7d:e0:38:7a:16:e7:dd:96:d6:
86:72:dc:d1:da:d1:46:a9:3e:68:e3:07:41:77:97:
fe:f9:9b:42:8c:dc:80:71:be:bf:47:ab:ee:93:e6:
51:96:5c:cb:24:c9:74:e0:bd:58:dd:3d:3d:bc:21:
79:f4:2b:97:59:73:96:47:36:f9:6e:58:3f:b3:30:
94:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DB:00:09:1D:18:D0:B3:BA:5D:2C:4F:D3:8B:4C:A3:05:41:4E:F8
X509v3 Authority Key Identifier:
keyid:3E:A1:8C:91:B2:BE:28:A0:74:B9:A3:87:4A:90:B4:46:01:3C:E1:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqGMkbK-KKB0uaOHSpC0RgE84b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:9d:1f:2b:22:37:c1:d6:de:52:a3:c7:9d:40:d6:cf:7c:ed:
f7:ec:a8:88:ce:e9:f7:e6:e9:e7:01:ee:4d:e7:73:37:1f:3d:
a9:6f:f3:9e:e4:d2:b6:b8:47:d6:df:64:dc:c0:f5:a8:41:d6:
98:ac:08:73:e3:57:07:8e:6f:e8:a5:11:cc:b4:20:c1:8f:d6:
b9:6a:85:19:39:2d:8e:fb:ac:71:1e:40:91:dc:cc:b0:da:b6:
de:6d:f5:77:3f:fb:44:82:3c:c2:14:ad:51:6b:d3:73:7a:cf:
5e:2d:be:50:36:1d:86:c6:67:36:e6:b5:3f:90:4b:7e:ab:09:
68:c0:5f:7c:dd:77:77:ea:4b:4a:b0:ed:52:b4:cf:ea:2b:b2:
0c:a6:0f:cf:a3:5e:f5:88:f6:f5:b7:d4:03:29:ea:6e:6b:85:
59:8e:ef:d7:e6:55:a3:5b:57:ea:c4:70:3d:40:52:50:22:70:
6f:b1:02:4a:65:a9:92:f0:07:f5:d0:97:32:a7:34:e5:64:5e:
89:f8:6a:73:5e:90:31:f4:b4:45:1a:ac:b9:bc:53:f4:71:7c:
0f:2c:35:4a:f5:26:09:1b:3d:82:10:33:6e:cd:ed:2b:27:11:
84:da:fa:19:de:e8:07:e8:91:94:4d:61:d3:48:41:d4:76:f7:
be:4c:62:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:48:59 2026 by rpki-client