Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
File: PtQqBIdwVgYBXlow2h5w9Aflnpk.mft (raw, json)
Hash identifier: RObyFIla9A8f62wg9lTUHVErGjTyiTYTZ8tp7mxLYY0=
Subject key identifier: 50:02:60:53:87:39:9D:D4:11:B7:8D:44:FC:AF:13:6A:94:46:00:64
Authority key identifier: 3E:D4:2A:04:87:70:56:06:01:5E:5A:30:DA:1E:70:F4:07:E5:9E:99
Certificate issuer: /CN=3ed42a0487705606015e5a30da1e70f407e59e99
Certificate serial: 019D284E0CFCDA455052A2730B30344FA8DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 04:01:36 +0000
Manifest this update: Thu 26 Mar 2026 04:01:36 +0000
Manifest next update: Fri 27 Mar 2026 04:01:36 +0000
Files and hashes: 1: PtQqBIdwVgYBXlow2h5w9Aflnpk.crl (hash: qeBnxBjoDFGBEqv+jJfBw8dobsRW+/W0b9Wywl54+cw=)
2: odBM4SC03fv9qvg4-_DkLC3ibmA.roa (hash: NMg6E7qAz0hV7HQf0d2bJZ/M9xt0HNBTnuvRtP4cu6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:0c:fc:da:45:50:52:a2:73:0b:30:34:4f:a8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ed42a0487705606015e5a30da1e70f407e59e99
Validity
Not Before: Mar 26 04:01:36 2026 GMT
Not After : Mar 27 04:01:36 2026 GMT
Subject: CN=5002605387399dd411b78d44fcaf136a94460064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2d:93:c4:65:3b:a7:70:f9:10:3d:4a:eb:64:
36:f2:5f:dc:3e:43:c0:70:2e:2f:22:50:2b:16:9d:
8f:90:51:65:19:9a:a5:11:fd:31:91:5e:2c:cf:76:
85:6f:e3:29:c4:21:d8:55:ed:32:e1:a5:b9:ff:35:
3f:b9:9f:a7:ec:9c:42:7c:ec:84:b2:e5:5d:df:b8:
07:f9:82:79:1d:07:96:4a:fb:95:d1:f6:5f:c8:26:
60:07:f4:f6:80:19:bb:0e:9e:ca:c2:dc:a7:9e:f6:
c5:8b:a1:cd:48:f1:a3:8d:bd:43:39:22:2f:55:17:
6c:2e:36:27:81:fa:b8:f2:2b:50:a4:5b:11:6b:b7:
ef:5e:35:f8:12:17:05:0b:03:4f:d0:13:4e:24:88:
ec:e2:77:bc:87:c5:04:a7:23:78:be:7d:8a:62:e6:
33:61:69:66:bd:58:3e:d0:83:dc:aa:3d:84:70:c2:
e1:9d:9b:e0:f0:41:86:46:81:39:6c:6f:49:4d:5a:
55:e1:d2:21:6a:0c:97:36:c0:e2:57:a1:e7:a0:7f:
83:3b:44:9f:2f:86:86:8e:db:4f:98:8f:b5:b0:0c:
fb:a6:fb:bf:3e:d9:c8:b3:4e:81:6b:c6:5b:92:56:
ee:c0:3d:23:c1:d2:6c:be:48:2b:b6:40:b9:f6:1c:
98:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:02:60:53:87:39:9D:D4:11:B7:8D:44:FC:AF:13:6A:94:46:00:64
X509v3 Authority Key Identifier:
keyid:3E:D4:2A:04:87:70:56:06:01:5E:5A:30:DA:1E:70:F4:07:E5:9E:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:6e:29:e6:b4:c6:6e:c3:3b:92:c2:56:76:05:fa:d9:bc:3a:
02:d3:62:b8:73:36:ad:a9:dc:89:ad:76:49:6d:09:4f:af:c5:
39:d8:a1:45:d8:46:eb:22:bb:16:de:34:9d:ff:4a:40:cf:ef:
bc:45:99:cb:6a:40:82:b8:fd:87:67:87:f5:6a:46:f3:06:c1:
9d:10:e3:fd:98:5c:37:b4:f5:f4:08:67:14:6d:40:63:90:ed:
dd:79:4c:6c:f7:0a:35:df:37:1f:ff:d0:d9:69:aa:9f:93:fc:
49:e7:2b:0d:fd:0c:ea:38:50:c3:b4:4b:6b:99:c7:54:df:62:
b3:f1:7f:92:0a:59:35:d8:cc:f3:44:73:38:41:c6:4a:94:d8:
f6:e8:b4:72:3a:96:9d:cd:22:7c:14:38:01:39:87:ba:fa:66:
0d:05:c7:28:37:76:e6:95:44:7c:97:38:b7:c4:4b:86:39:fa:
b6:4f:40:96:68:70:48:28:b2:3e:63:1c:86:bf:da:2d:cd:f3:
4d:df:c5:fc:2a:59:ad:0c:b5:27:a3:25:6b:f6:ec:f7:3b:32:
21:5b:62:1a:fa:c5:15:02:6a:16:d4:31:e9:26:6d:ca:82:54:
7a:12:60:cb:fa:79:a7:ca:98:65:e8:ef:ec:74:3a:a3:af:e9:
d0:6a:d3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:04:55 2026 by rpki-client