Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
File: PesQRGPpILRVQravGifVlQ6G6aA.mft (raw, json)
Hash identifier: Ceg/A/LaZFK1jR1nqxDXbyCU0QVtdVoYlLtrUqPT46w=
Subject key identifier: 22:BA:B5:FB:F3:84:E0:35:E0:D7:FF:DD:1A:77:E4:4F:A1:43:25:96
Authority key identifier: 3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0
Certificate issuer: /CN=3deb104463e920b45542b6af1a27d5950e86e9a0
Certificate serial: 019D97E26152ECE46373C68D3ACAC4A40A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
Manifest number: 1692
Signing time: Thu 16 Apr 2026 20:01:28 +0000
Manifest this update: Thu 16 Apr 2026 20:01:28 +0000
Manifest next update: Fri 17 Apr 2026 20:01:28 +0000
Files and hashes: 1: 9JqUzmhn979MzWUxIBT2RPIOS8A.roa (hash: rkzdzZw7cy8e5NHHoY93mCGwkkZGsYaobB+ZGaI78YQ=)
2: K0vidJ7tM2mKOKZRaF9LzxYTcOY.roa (hash: j1Pyv97hL7TS1MOu3SXdm7zFyMsZ0tV3SkgI1mKBoHI=)
3: PesQRGPpILRVQravGifVlQ6G6aA.crl (hash: eMFmAwHtflKm04XBTQllYzs6HLCWbA8vzV9rzp1uaSY=)
4: Vh01heQZwiiV-5U2YWUI9ETdNp0.roa (hash: NerAxUNFCszCX2X5F5Gpmh7sivfYufWqTOLrM/cv+gM=)
5: tMuTjVPYB4qy8Lzty-HvMfNIyHg.roa (hash: 2UYLL/RMvv9f6KttdupVfDP+HWvUuHhv7cOVMA+gdLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:61:52:ec:e4:63:73:c6:8d:3a:ca:c4:a4:0a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3deb104463e920b45542b6af1a27d5950e86e9a0
Validity
Not Before: Apr 16 20:01:28 2026 GMT
Not After : Apr 17 20:01:28 2026 GMT
Subject: CN=22bab5fbf384e035e0d7ffdd1a77e44fa1432596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e1:27:e7:23:b7:1e:6e:28:01:70:d2:9c:f2:
cf:61:e0:bc:d3:08:98:be:77:04:fe:a6:75:bf:d6:
35:3e:cf:01:df:78:7b:e0:e7:c9:c5:25:9f:19:1b:
17:47:70:7f:21:ad:e7:5c:48:9d:3b:73:25:34:c4:
f5:37:36:91:b4:8e:04:84:96:7b:1c:14:01:cc:76:
a0:b3:cb:31:e9:96:bb:2b:e0:fc:c3:3d:44:a6:63:
c9:16:f7:33:c9:ec:d7:09:5c:37:e0:6e:5b:7b:f6:
f5:7a:da:5e:52:f6:f0:44:2e:5d:05:74:aa:06:98:
0f:ef:b3:35:7b:64:05:17:9c:9b:d1:3a:ea:de:4d:
06:13:c3:b1:62:ea:4f:fe:ae:ff:5e:d2:9f:84:79:
0a:9a:f9:34:7e:7e:2f:07:87:8f:bd:0c:2b:85:db:
24:c7:d4:ac:2b:0d:84:82:ab:22:c0:f0:6d:41:b3:
bf:ec:5c:21:50:dd:ea:0c:07:7b:aa:f8:24:c3:a1:
33:ce:a9:c7:44:b3:a0:fa:84:55:2e:5e:b8:93:72:
15:37:ee:9d:5c:aa:e2:86:8d:15:c5:ce:9d:e7:6e:
93:71:4e:c4:5e:9f:95:3f:bb:0c:c3:dc:d3:1b:08:
0c:12:37:d8:cc:57:d6:1a:bd:3a:99:13:f4:66:e5:
09:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BA:B5:FB:F3:84:E0:35:E0:D7:FF:DD:1A:77:E4:4F:A1:43:25:96
X509v3 Authority Key Identifier:
keyid:3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:bd:02:28:c2:ec:88:9f:11:b5:17:7e:79:16:43:be:66:59:
30:fb:6c:f7:03:b1:fb:fa:b6:c4:ff:c8:d2:9a:32:7f:26:6f:
77:57:f1:67:eb:c6:1a:af:ed:a0:39:fc:aa:70:63:ee:c7:65:
0e:de:f7:44:42:a5:d4:5b:77:96:20:9c:37:7f:46:41:a3:31:
ff:45:6b:0d:79:b5:63:17:63:f8:b2:64:eb:e2:77:fb:98:ac:
91:0a:6f:af:1f:21:cd:08:e1:f1:a3:09:06:28:bf:c0:cf:0d:
ff:c3:b9:7f:45:8f:5c:fb:29:83:94:03:ec:d4:9f:49:f0:44:
fb:04:ea:63:cc:c2:56:a6:57:45:89:f4:13:67:2b:43:72:67:
93:84:52:e7:6a:e0:1b:31:b2:0e:a4:7a:1c:d4:6c:6b:46:ed:
c0:82:ff:71:5e:cb:88:45:97:6e:bc:20:d3:f9:5b:43:ba:e5:
d5:8b:9c:b0:64:48:64:64:5d:36:39:46:f4:1d:da:29:8e:b2:
80:29:c1:b6:71:bd:65:a9:3a:02:26:63:49:67:7e:3a:48:b9:
93:9d:26:56:5d:60:0e:88:2b:40:d6:ee:86:83:4d:f8:ab:c7:
5b:6a:74:f6:92:17:5e:39:c5:df:f9:5a:e7:d7:ed:3a:25:da:
60:97:bc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:47:11 2026 by rpki-client