Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
File: PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft (raw, json)
Hash identifier: +5Hcq2QVGKgCv3WXUEjvWSusVpmSTrFA/+j8xfPfzVg=
Subject key identifier: FF:29:AA:24:81:AC:29:18:5D:D4:E1:2A:73:16:36:B5:0A:7F:4F:C0
Authority key identifier: 3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
Certificate issuer: /CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Certificate serial: 019D265F48E17260F1682005D2043E025EB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
Manifest number: 0A3E
Signing time: Wed 25 Mar 2026 19:01:11 +0000
Manifest this update: Wed 25 Mar 2026 19:01:11 +0000
Manifest next update: Thu 26 Mar 2026 19:01:11 +0000
Files and hashes: 1: PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl (hash: DBkRCwosxSozE3QMgVt67Obczf3dKMeNcJKEW1hNq0A=)
2: o2oMp4w_9TGCM9aisNXx6hIf0dE.roa (hash: 5zj6ry4dUTAYdyPOXRmxJv5IwbCW/zphAyYpf0E3ouc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:48:e1:72:60:f1:68:20:05:d2:04:3e:02:5e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Validity
Not Before: Mar 25 19:01:11 2026 GMT
Not After : Mar 26 19:01:11 2026 GMT
Subject: CN=ff29aa2481ac29185dd4e12a731636b50a7f4fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7b:6c:6f:99:ee:25:ef:35:32:c3:dd:04:b2:
68:ea:17:f3:e8:af:12:79:bd:03:f1:6f:6a:c5:4f:
0a:f7:81:54:e3:33:39:a7:27:38:1b:93:b5:91:4c:
0f:76:55:b1:54:52:5b:a0:e8:30:05:e5:b5:13:5e:
f9:c9:57:60:50:33:af:ec:da:38:3c:85:44:fc:95:
86:79:1d:21:4c:a9:0f:37:ed:45:1e:cf:d8:8b:7c:
ee:82:05:1b:f6:db:24:a4:f2:fe:7c:39:82:e7:a0:
a9:20:21:4f:34:7e:1b:3f:28:a5:b6:57:0c:37:5a:
70:f3:9f:c9:b9:58:0d:a5:d7:ef:87:13:11:8a:a3:
da:31:e0:10:58:5a:a8:2c:a1:4d:d5:c2:ed:31:cd:
40:32:26:d9:30:99:0d:72:0e:6c:45:44:f3:2f:7c:
6b:70:12:09:e6:e2:9d:29:ed:ca:81:10:0e:7d:08:
9e:12:5a:36:2a:20:4d:ab:75:9b:5c:a2:e5:a7:ed:
41:9a:eb:4a:ef:13:e2:40:44:33:fc:be:45:ab:20:
0e:3d:bb:81:45:f0:4c:0e:e1:d9:17:cc:dd:f9:18:
21:6e:8f:ad:1e:ed:f9:0e:07:aa:81:3e:05:85:ef:
78:59:7c:95:ce:e1:86:84:5a:54:9b:48:d9:96:69:
0e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:29:AA:24:81:AC:29:18:5D:D4:E1:2A:73:16:36:B5:0A:7F:4F:C0
X509v3 Authority Key Identifier:
keyid:3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:28:0c:3e:38:63:33:bc:0d:6e:ec:10:c9:a3:ed:95:87:39:
09:61:14:88:15:ad:a2:1d:e4:89:53:cb:35:b3:ae:5a:6a:9c:
e3:b6:72:92:af:26:44:d8:29:2d:2b:c0:89:1a:c3:d7:37:bc:
b4:26:16:18:c4:db:a1:43:b6:00:9d:c7:7a:aa:8c:2f:ab:7d:
87:7f:6e:af:6e:72:86:ed:31:c6:9a:b7:18:e8:47:76:81:8b:
e3:8d:f7:66:48:e2:e2:98:81:dd:17:a3:2d:a8:68:a9:0c:8d:
4e:8e:b0:37:5c:df:0e:ac:dd:fc:77:73:f9:2c:69:c5:3e:65:
e5:6d:91:33:0f:46:7c:c4:9a:64:2a:ff:f1:49:05:3e:2f:68:
26:e9:44:04:4a:7d:d5:13:d5:cc:ec:ef:dc:21:16:c1:5f:6b:
06:15:06:2a:cb:85:2c:6c:3b:41:80:b6:6c:0f:67:f9:0c:77:
57:ac:69:25:f4:06:58:d9:09:44:3b:10:b4:c5:5f:3f:c5:f3:
95:a5:85:d8:83:fa:2f:c3:b8:b9:ca:f1:08:bf:28:a0:3a:66:
9a:52:94:c0:cb:a0:04:a3:72:7e:98:cd:90:d2:f7:19:f6:12:
02:c4:10:d1:3f:11:22:47:ff:9c:0d:88:7a:2f:bc:80:c3:30:
ec:ef:28:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:38 2026 by rpki-client