Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
File: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft (raw, json)
Hash identifier: +rnAy1SMnYApX5In3pKM0jnwcjxDMbPORwDU+k9dGSM=
Subject key identifier: 6E:67:FA:C5:C7:08:75:7C:DB:90:35:C6:6F:8F:E1:75:47:97:94:DF
Authority key identifier: 3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
Certificate issuer: /CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Certificate serial: 019D9A07144C013BD2651FD5D1995787383D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
Manifest number: 125E
Signing time: Fri 17 Apr 2026 06:00:48 +0000
Manifest this update: Fri 17 Apr 2026 06:00:48 +0000
Manifest next update: Sat 18 Apr 2026 06:00:48 +0000
Files and hashes: 1: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl (hash: HdQNRc9T0weOJ58u7rZo5iosoWAG5HiShLlAAjBl240=)
2: Rc1JKlzBWJzMspxz5Sz8_wKGjSQ.roa (hash: YXV2SDD7Lq/HvpspFTkxAD7KLYHXbsXZfXUiY1m7rzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:14:4c:01:3b:d2:65:1f:d5:d1:99:57:87:38:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Validity
Not Before: Apr 17 06:00:48 2026 GMT
Not After : Apr 18 06:00:48 2026 GMT
Subject: CN=6e67fac5c708757cdb9035c66f8fe175479794df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3a:bd:18:33:32:d3:58:87:a7:9f:74:bb:cd:
9d:b0:ac:86:3b:83:14:76:24:bc:da:86:9c:e4:be:
b6:47:32:cd:8f:d3:9f:93:57:61:d1:2f:be:be:fe:
e0:89:db:59:00:ae:4e:a4:17:56:20:b2:b9:a0:9e:
91:bc:7d:61:06:2d:e9:18:e3:11:3f:6f:85:b1:41:
61:82:b9:62:d4:1f:ad:b3:f5:34:5a:40:9c:88:56:
3a:af:36:8a:16:7e:eb:3f:c1:af:e4:88:fe:e1:b0:
98:a9:98:35:ad:82:96:58:22:7e:9b:0f:7e:8b:ae:
63:35:4d:fe:8e:33:39:2d:3e:e7:91:4a:27:9a:10:
a9:75:9e:c6:4c:2f:90:01:34:19:f5:6d:e3:e9:0c:
e3:58:7a:fc:ea:d4:a8:f3:a9:6e:a0:8d:74:7d:6a:
44:6b:d8:8d:aa:16:12:be:e0:14:04:35:a9:33:72:
f8:fa:5e:d0:85:96:03:a7:ae:79:bd:e0:66:ab:cb:
1b:50:69:60:ec:2d:de:b5:44:ed:22:18:ea:36:a0:
bc:7e:89:d4:66:07:db:60:02:ba:87:31:f0:1e:ad:
d6:b0:bb:6a:05:c4:4d:ed:6f:0c:1a:60:d8:ed:a2:
ee:e3:97:e4:a0:ab:c4:f8:f3:66:8f:cc:39:63:29:
95:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:67:FA:C5:C7:08:75:7C:DB:90:35:C6:6F:8F:E1:75:47:97:94:DF
X509v3 Authority Key Identifier:
keyid:3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:20:14:cb:61:6b:8a:5a:6a:66:14:c3:34:e4:10:ee:4b:e7:
16:19:87:21:62:fa:0a:74:b1:bb:f8:c3:f5:0c:d9:c9:fe:c2:
63:4f:48:25:84:fb:8e:6a:7d:23:d5:66:9d:b6:ee:0b:c5:ad:
14:4a:63:f8:32:58:0e:53:cb:2c:ed:a7:53:67:a9:41:6f:97:
fa:35:62:89:93:5a:9e:e2:02:64:e3:7c:ad:06:76:41:ee:c1:
58:62:8f:2a:ab:48:2c:5d:3d:3c:f3:c6:66:c7:64:b6:68:bc:
0a:ef:a4:01:40:af:b2:90:03:b1:a4:8f:13:61:01:eb:94:b6:
8c:de:d1:6a:2c:8b:57:bb:6d:f9:39:f1:6d:bf:69:ab:4a:38:
31:a1:65:d8:01:a3:6a:6d:73:f5:81:99:ec:06:6a:6d:83:53:
40:dd:f3:a9:fb:16:48:a2:25:3e:70:35:a3:ea:81:3a:6c:35:
d9:4c:e8:95:09:6f:54:37:e9:92:74:9d:c5:2f:08:c3:f4:d0:
8b:bd:67:b5:23:b9:88:1a:ff:b0:a3:92:5a:1b:f1:bb:08:33:
e4:39:08:b5:59:bb:1c:8d:82:2c:b1:91:78:23:a6:65:fc:65:
b5:00:dc:c4:0c:b1:e7:8c:ce:31:ca:4d:c5:01:80:83:ae:3d:
43:5c:44:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:59:35 2026 by rpki-client