Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
File: PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft (raw, json)
Hash identifier: kdyN9X0CWeDqrpSamhZQdZeDg1ONic4OKaDs5zwnqm0=
Subject key identifier: BC:EE:3D:73:C5:0A:40:9D:23:32:CD:D1:3A:10:35:4C:02:4D:99:5C
Authority key identifier: 3C:CA:84:9B:37:50:15:F4:33:E9:A2:40:EC:AB:F0:3C:F1:52:C7:81
Certificate issuer: /CN=3cca849b375015f433e9a240ecabf03cf152c781
Certificate serial: 019D2929307141F70652DDE2F49CD9B01C8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 08:00:58 +0000
Manifest this update: Thu 26 Mar 2026 08:00:58 +0000
Manifest next update: Fri 27 Mar 2026 08:00:58 +0000
Files and hashes: 1: PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl (hash: LztbKpvLGelM1d60AmGn7/ldWfkw1I5ZnvX706zau5I=)
2: ZF9EAOYUL63fX_K72Oa83qsiY90.roa (hash: qJmN8WRTqe/THyiR/N1Q9A4OK8XBEhImcFksk6kb4Ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:30:71:41:f7:06:52:dd:e2:f4:9c:d9:b0:1c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cca849b375015f433e9a240ecabf03cf152c781
Validity
Not Before: Mar 26 08:00:58 2026 GMT
Not After : Mar 27 08:00:58 2026 GMT
Subject: CN=bcee3d73c50a409d2332cdd13a10354c024d995c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:95:5d:05:9e:aa:8b:e6:8c:89:1e:cb:0a:31:
c4:b1:be:3c:a8:14:3d:c6:ac:95:1d:6b:16:a9:a6:
4d:66:81:e8:22:ca:49:2b:49:2b:e1:50:ee:ce:6f:
64:2b:32:d7:48:28:53:c4:c3:ac:f2:21:20:54:14:
b4:c0:3e:94:c5:87:d8:f0:ca:98:2c:55:c1:e0:d1:
eb:23:f7:53:d0:c6:47:af:59:41:70:eb:88:7f:fb:
b8:cc:9f:a1:6a:3a:1c:74:70:b5:6f:41:df:df:81:
7c:18:11:00:04:79:23:4a:8f:a4:09:31:f6:3f:fa:
b5:7d:81:d5:2d:21:e7:15:5b:b2:a8:5a:32:df:a5:
2c:b6:74:e0:40:e9:27:a0:d0:f2:13:9d:7e:5a:87:
77:b9:04:e8:df:b1:f5:19:e4:cc:10:8d:af:06:37:
af:7d:60:2e:92:2c:87:3e:d0:f7:15:b7:92:b0:fd:
f6:f4:32:a2:28:14:5a:ea:22:ab:17:49:b5:63:89:
46:61:a1:a9:c4:76:d0:f7:c6:7a:ab:df:6b:87:38:
1e:62:4e:76:34:2d:9c:93:47:10:af:aa:7c:a4:cd:
fb:2e:a6:94:52:7d:59:7e:0d:a7:a4:86:7a:33:cc:
68:89:3f:f9:88:50:c6:19:1d:ed:53:54:74:f1:d7:
32:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:EE:3D:73:C5:0A:40:9D:23:32:CD:D1:3A:10:35:4C:02:4D:99:5C
X509v3 Authority Key Identifier:
keyid:3C:CA:84:9B:37:50:15:F4:33:E9:A2:40:EC:AB:F0:3C:F1:52:C7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:06:ef:85:f6:2f:a3:6d:7f:36:1c:8b:8f:b6:28:f7:a3:a5:
61:86:68:b6:da:0e:00:5c:8e:74:b3:11:a7:1c:b0:5b:04:80:
d1:30:73:02:be:f8:85:1a:30:e8:65:76:45:af:54:68:2c:9f:
3d:56:0c:70:8a:bd:5a:9f:a9:93:a1:dc:63:7c:e0:44:ed:67:
ed:90:34:72:d3:4b:fc:a2:7a:6a:1c:0c:04:0c:4e:5d:5a:bc:
af:ff:64:7e:cf:51:85:24:86:c7:df:cb:0e:3b:73:db:f4:9d:
e9:61:3a:a3:8b:ae:c0:8a:bd:d7:72:f7:21:fb:48:af:5d:c2:
7b:2c:be:00:27:87:70:50:d7:71:71:e5:45:9a:1d:28:ea:e9:
0d:b4:b1:76:d6:b5:94:e4:d6:c2:a8:bc:67:73:c2:d9:7e:80:
ad:dc:a8:51:02:00:12:36:bb:86:b1:c4:10:6d:92:de:97:a5:
42:bd:37:1b:a4:89:d1:8a:a2:fd:09:98:0f:75:f3:d9:1d:62:
b6:7a:87:da:07:b1:a0:5a:bd:4a:ba:7d:98:ea:eb:e2:2c:1f:
34:55:33:ab:f9:e1:72:cf:10:52:93:52:9d:86:11:88:e8:b8:
e1:e9:92:ca:e0:ae:73:cd:cf:9c:ef:ad:47:ce:72:3d:de:cd:
96:47:44:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:31:14 2026 by rpki-client