Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.mft
File: Pq9YPXwbe09XMQE8iymLpQVGTlI.mft (raw, json)
Hash identifier: 7i2LiI/8CBW8DjftdqF3hWIgZoZhltxsolZLGnTWHhI=
Subject key identifier: 16:3E:DD:E3:77:8C:A8:B4:90:45:36:02:4F:47:3B:65:CC:16:3C:0A
Authority key identifier: 3E:AF:58:3D:7C:1B:7B:4F:57:31:01:3C:8B:29:8B:A5:05:46:4E:52
Certificate issuer: /CN=3eaf583d7c1b7b4f5731013c8b298ba505464e52
Certificate serial: 019D284D59908264DAA0EEE7559A3D7048C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pq9YPXwbe09XMQE8iymLpQVGTlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.mft
Manifest number: 14A0
Signing time: Thu 26 Mar 2026 04:00:50 +0000
Manifest this update: Thu 26 Mar 2026 04:00:50 +0000
Manifest next update: Fri 27 Mar 2026 04:00:50 +0000
Files and hashes: 1: Pq9YPXwbe09XMQE8iymLpQVGTlI.crl (hash: y++HQwkcBwzmKian61eJJVQ+Tlpdjhx2N2eo7B/Gg54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pq9YPXwbe09XMQE8iymLpQVGTlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:59:90:82:64:da:a0:ee:e7:55:9a:3d:70:48:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eaf583d7c1b7b4f5731013c8b298ba505464e52
Validity
Not Before: Mar 26 04:00:50 2026 GMT
Not After : Mar 27 04:00:50 2026 GMT
Subject: CN=163edde3778ca8b4904536024f473b65cc163c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:56:38:7e:3d:4f:db:81:70:37:d2:f0:19:e2:
b0:a3:93:d7:77:92:dc:8b:e4:78:2c:d7:e8:5d:f6:
6f:58:17:21:e2:af:b4:47:ba:1d:9a:99:64:1f:1c:
3c:e3:98:e6:8c:ab:be:0c:f6:e3:d5:a1:fe:cb:e8:
77:99:c4:de:e0:7a:32:34:98:11:48:b3:a9:f8:9e:
bf:3e:50:ee:f0:04:bc:59:c7:2f:c3:1f:8b:6f:6d:
9d:29:2f:a3:7f:2b:8d:b4:34:9d:18:4c:79:df:24:
59:87:66:6e:6f:d8:76:3c:59:b0:cd:98:d3:10:a1:
24:c6:8f:75:2c:e6:46:60:ba:4c:f4:37:46:63:82:
12:23:4b:d4:37:c0:b3:d8:0f:37:f4:79:1a:87:1c:
2a:5a:b7:ae:a3:34:88:72:7a:8b:08:93:9d:f4:58:
df:c7:d9:83:6c:66:94:90:7d:f7:df:fc:13:e4:d5:
e2:87:98:2d:79:ce:41:99:9e:22:2a:cd:8a:94:a8:
80:8c:3c:8c:78:ee:c8:02:4c:c2:52:2b:64:d3:c0:
a6:ec:20:9a:0c:0c:d5:d5:db:79:98:49:6b:7c:c4:
69:4b:75:c1:25:65:c2:48:81:55:ea:c7:78:e4:57:
d5:d1:dc:fb:2d:b8:86:65:89:a1:8c:f2:42:e7:0a:
20:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3E:DD:E3:77:8C:A8:B4:90:45:36:02:4F:47:3B:65:CC:16:3C:0A
X509v3 Authority Key Identifier:
keyid:3E:AF:58:3D:7C:1B:7B:4F:57:31:01:3C:8B:29:8B:A5:05:46:4E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pq9YPXwbe09XMQE8iymLpQVGTlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b8:29:78:df:f7:0e:ce:4a:dd:e5:d9:f6:0e:37:35:4a:d7:
7d:c4:7e:0d:f1:b1:8d:6d:d9:74:52:b1:65:96:7e:8c:92:a2:
f7:52:33:1d:d6:f8:17:2b:ef:17:9c:76:08:83:19:d9:2b:6b:
00:00:bf:a5:78:ab:19:20:ee:84:70:d3:5d:7c:ac:93:ac:91:
18:6e:9d:c7:6f:b5:66:39:00:f4:53:73:52:90:77:34:26:10:
3c:ff:22:f5:09:a0:9e:93:7f:c2:4d:27:16:9e:b9:61:57:61:
fe:ad:c4:87:f0:91:ad:2b:dc:49:3b:88:3c:29:4c:f2:66:ec:
ba:c2:f1:c5:3f:bd:75:b0:21:de:a9:38:11:59:6b:a9:ec:3f:
25:d5:55:99:b7:3a:ab:3b:43:22:0d:3c:63:58:81:55:d9:76:
50:18:34:ce:4d:d9:66:0d:74:0d:f0:5a:c7:72:53:47:28:9d:
4b:c7:9e:ec:df:78:14:79:db:07:02:d7:fb:95:0c:cb:41:e0:
78:cb:5b:f4:55:4a:ec:79:7d:1a:da:87:02:8f:78:75:e5:0d:
67:f7:56:dc:1e:b0:4d:21:72:f5:aa:a5:c9:0a:75:fc:c3:1f:
de:41:0e:25:28:8a:47:53:25:0d:88:45:1a:70:aa:a8:ec:54:
2b:97:e0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:15:37 2026 by rpki-client