Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
File: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft (raw, json)
Hash identifier: Lf1eO89zDyMudbuelEvsU+D4k6/Nocex+FDJnY3hl28=
Subject key identifier: E8:F3:08:35:F0:48:55:C8:8A:EA:3C:F4:07:22:82:3A:85:17:EA:A8
Authority key identifier: 3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
Certificate issuer: /CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Certificate serial: 019FAD1B256185CB893DAF7F4D4048AC7353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
Manifest number: 1371
Signing time: Wed 29 Jul 2026 09:01:05 +0000
Manifest this update: Wed 29 Jul 2026 09:01:05 +0000
Manifest next update: Thu 30 Jul 2026 09:01:05 +0000
Files and hashes: 1: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl (hash: SJCJGuCfvGULRW0RhR+ChSG9CKYaCgSlEE+XeHa7dwU=)
2: Rc1JKlzBWJzMspxz5Sz8_wKGjSQ.roa (hash: YXV2SDD7Lq/HvpspFTkxAD7KLYHXbsXZfXUiY1m7rzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1b:25:61:85:cb:89:3d:af:7f:4d:40:48:ac:73:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Validity
Not Before: Jul 29 09:01:05 2026 GMT
Not After : Jul 30 09:01:05 2026 GMT
Subject: CN=e8f30835f04855c88aea3cf40722823a8517eaa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2b:c7:ab:c1:69:e5:90:ae:00:9f:3e:3a:94:
9b:53:cc:9c:72:ae:ae:e8:6c:ce:9e:06:10:ea:21:
0e:fc:bc:5f:77:2c:4c:10:b1:0c:b3:c2:0e:19:8f:
29:71:82:f0:f7:ef:4c:9d:ce:69:ba:b1:a5:52:0e:
89:a8:6c:73:7e:b0:c3:8b:5a:f4:5e:66:2e:f2:48:
d6:ae:06:1c:25:07:56:c3:28:d7:51:96:55:bf:32:
85:22:c3:de:a3:82:8a:46:b7:05:82:6d:11:f8:64:
bd:79:5d:0c:05:43:c5:8c:11:15:6b:3c:56:fb:cd:
d5:15:55:cc:5b:be:a1:69:5f:0b:7f:c5:ce:df:44:
1e:c5:64:a7:80:b9:11:f4:b2:d8:78:95:df:7d:a6:
c4:16:7a:ef:17:be:31:11:d0:53:8b:61:a6:9f:b4:
65:7c:4b:2c:12:f5:a4:fd:65:3a:64:ca:6b:39:d9:
4f:64:7f:76:67:33:38:78:28:d7:0f:69:21:c3:e6:
e7:dc:eb:d6:1f:e5:a2:f2:d3:8e:14:b4:33:89:f9:
3f:23:6e:ff:93:f4:40:cc:3d:3c:50:58:e2:83:cb:
c0:9d:94:d7:82:2d:7d:ea:bd:17:35:ca:ac:cf:eb:
6f:92:8d:b5:ba:a7:71:98:e7:10:22:71:58:ef:9d:
0d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F3:08:35:F0:48:55:C8:8A:EA:3C:F4:07:22:82:3A:85:17:EA:A8
X509v3 Authority Key Identifier:
keyid:3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:c6:15:e1:01:21:67:8a:c7:6f:65:f8:f9:d8:c9:b0:db:40:
51:4e:95:f7:68:bb:68:57:7c:58:10:10:87:8d:cd:e1:cc:8e:
c2:c9:3f:28:65:8e:f3:54:d4:d1:19:1a:73:36:a7:ec:e6:1a:
62:b8:ea:ac:ef:af:62:f6:61:bd:ac:b3:c6:59:11:8d:36:be:
08:4c:3e:a7:98:3b:76:9c:2a:3e:6b:89:fb:2d:09:d3:b0:9f:
36:9f:eb:0a:06:6a:82:41:03:9e:7f:04:ad:04:6c:30:e3:bd:
91:bc:f9:0c:4f:ce:17:b2:52:cd:37:48:6a:1d:1a:c4:00:a5:
b6:cc:1f:ce:3b:33:c4:b6:8b:49:1d:43:6b:59:64:6e:45:d9:
2b:e5:6e:82:cf:2d:71:85:6e:bd:bb:b9:05:80:45:62:52:36:
5c:fb:53:04:fa:9a:b0:9e:d9:d3:b7:c2:52:ec:88:7a:7c:bb:
5c:d5:f3:87:1e:ea:70:d1:13:58:10:e7:f9:7a:d8:68:92:4b:
d2:51:07:2f:8f:6b:57:af:27:73:7b:3d:a1:00:89:78:62:b9:
9f:b4:eb:b7:fb:58:80:70:cd:dd:11:fb:7d:ea:f1:b8:7f:9b:
69:9e:e2:6e:94:b1:40:d8:8d:e8:de:8c:a1:b8:8e:a5:69:84:
f1:d9:03:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:12:57 2026 by rpki-client