Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
File: PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft (raw, json)
Hash identifier: JTJVGTPlwdCo2vylIQGiJOsf40CW8FpiXrRbZOqDl+g=
Subject key identifier: CB:C3:B0:F8:A1:47:B4:5C:B1:4C:8D:0B:8E:81:D2:7C:A9:B9:1D:24
Authority key identifier: 3D:0B:E4:AE:38:73:55:54:CD:11:81:0A:9C:7D:20:30:19:04:01:98
Certificate issuer: /CN=3d0be4ae38735554cd11810a9c7d203019040198
Certificate serial: 019D9D0809A9565B9F03C9B514EA257ED89F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
Manifest number: 02A8
Signing time: Fri 17 Apr 2026 20:00:42 +0000
Manifest this update: Fri 17 Apr 2026 20:00:42 +0000
Manifest next update: Sat 18 Apr 2026 20:00:42 +0000
Files and hashes: 1: PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl (hash: 0hj+nEJirFDcYXOtaGxpHhIqnXlK7a77FkFyvuO6ah8=)
2: xz923TuXOINB3WLY3XLk0pyQs6s.asa (hash: SGmXF+mIU3rmhMsPtkMgk1YdAxdF0xFT+cRVzGK/gGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:08:09:a9:56:5b:9f:03:c9:b5:14:ea:25:7e:d8:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0be4ae38735554cd11810a9c7d203019040198
Validity
Not Before: Apr 17 20:00:42 2026 GMT
Not After : Apr 18 20:00:42 2026 GMT
Subject: CN=cbc3b0f8a147b45cb14c8d0b8e81d27ca9b91d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c5:b9:5e:04:c1:46:a6:9e:b8:50:d7:ae:6c:
29:c4:85:37:de:17:e1:dd:c5:80:f1:97:2d:5e:77:
ae:b4:8e:98:15:3e:cc:ac:bf:aa:1c:22:c0:12:0c:
c1:87:9c:0f:74:7b:13:63:3e:a5:c8:95:18:da:0b:
1d:2c:2d:4f:6d:c3:91:20:9b:16:04:5c:d9:2e:ba:
9d:b9:07:09:e7:00:ee:e9:38:6f:36:df:8b:47:24:
c3:0e:0b:32:86:a8:36:9e:85:2f:80:ec:b9:b7:14:
b3:40:0c:57:0c:10:8c:90:86:23:ca:f6:b5:a2:ce:
4b:eb:99:8b:a0:20:8e:21:e1:51:5c:f3:8d:a0:4b:
53:63:2f:d7:b4:41:c3:17:c2:31:73:82:64:2e:f1:
e2:8a:8b:c7:78:b0:1d:a5:c9:47:85:d3:e9:25:b7:
d4:d7:f4:1c:23:26:42:ee:ff:2d:e4:14:a5:e9:2f:
c9:bf:7d:aa:ef:33:3d:14:9a:0f:2c:89:fa:9d:5f:
04:c3:c6:24:5e:e2:3f:e8:17:2e:42:b0:5b:c8:9c:
9f:8c:fb:03:12:a6:98:8a:52:c5:10:3b:65:0e:ba:
b4:18:ba:eb:2d:f5:f3:e3:d3:64:65:fd:24:63:92:
dd:01:1e:97:18:f9:d6:e4:a9:e7:4c:15:66:6e:ad:
f0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C3:B0:F8:A1:47:B4:5C:B1:4C:8D:0B:8E:81:D2:7C:A9:B9:1D:24
X509v3 Authority Key Identifier:
keyid:3D:0B:E4:AE:38:73:55:54:CD:11:81:0A:9C:7D:20:30:19:04:01:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a9:7b:47:d0:82:be:e8:2e:5c:e4:bf:8d:34:57:08:66:b6:
73:ee:20:dc:e8:c6:f5:df:3a:46:0a:6b:78:2d:fa:21:50:f4:
03:f2:0b:56:a9:65:88:03:c3:9b:c6:9d:59:43:95:82:72:66:
5e:2c:f4:06:33:1b:8a:e9:f6:40:93:d9:67:65:c3:ee:3e:ac:
59:96:0c:94:1f:ec:7a:98:2c:65:ec:e3:6f:4e:d5:0a:8d:72:
74:4a:59:4f:a6:de:1b:78:c6:93:4f:9a:ff:cd:c2:e6:93:bf:
f9:c7:4c:ff:34:8a:d3:0c:5e:df:43:73:f5:d3:9a:97:bd:31:
2c:b4:8a:a3:9b:3a:54:d8:52:cb:d1:17:22:de:9b:77:ab:ef:
f4:e5:69:e0:07:02:d6:f6:d6:93:5b:28:d2:09:7a:bb:f5:9e:
a1:59:4d:57:ea:51:56:2a:78:84:ae:d4:a0:d0:7a:5d:24:93:
7e:17:5b:97:06:26:4b:ca:81:17:cb:41:8a:9e:d6:eb:64:ac:
45:48:06:86:f7:7a:2e:0e:ea:a6:ee:76:50:72:3b:f7:6b:52:
6c:30:1d:8d:95:94:66:34:09:a8:de:30:8e:c2:cd:2f:16:75:
31:8e:41:fa:3e:98:34:c7:d1:23:38:67:e6:32:6d:d2:4b:04:
14:94:4a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:48:26 2026 by rpki-client