Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
File: PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft (raw, json)
Hash identifier: PIUKyqg1+fld4lUMEnJY7oG8lmXqVC9rKtaJVsGkPa0=
Subject key identifier: 35:95:2D:B4:6C:E4:97:6E:C4:F8:57:47:C2:54:8B:D8:B2:51:D8:4C
Authority key identifier: 3D:0B:E4:AE:38:73:55:54:CD:11:81:0A:9C:7D:20:30:19:04:01:98
Certificate issuer: /CN=3d0be4ae38735554cd11810a9c7d203019040198
Certificate serial: 019CA9B36BC7B2A387066BB64A59093F9DAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
Manifest number: 0229
Signing time: Sun 01 Mar 2026 14:00:33 +0000
Manifest this update: Sun 01 Mar 2026 14:00:33 +0000
Manifest next update: Mon 02 Mar 2026 14:00:33 +0000
Files and hashes: 1: PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl (hash: E48RGLCTAWvQxjgpPZvG6ZfPzFBTjZ9euOK/VfOE45U=)
2: zT9KHUtxtSzxzIWfNIbM_5YrNkg.asa (hash: eQArodPkL9GT9btZe2O+IRGyIxJmz7mwSCT2keKt/1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:6b:c7:b2:a3:87:06:6b:b6:4a:59:09:3f:9d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0be4ae38735554cd11810a9c7d203019040198
Validity
Not Before: Mar 1 14:00:33 2026 GMT
Not After : Mar 2 14:00:33 2026 GMT
Subject: CN=35952db46ce4976ec4f85747c2548bd8b251d84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ae:67:0d:d7:a7:77:ed:73:ba:a0:6a:dc:4c:
54:92:6b:6a:14:78:d2:ec:0e:68:49:f1:be:2a:3d:
a9:8f:e2:9c:77:d3:c2:47:8b:f7:2e:ac:1d:e3:71:
9d:e0:42:36:c9:e9:db:33:98:47:09:07:bb:ae:ab:
93:5c:26:2e:28:3f:4c:7e:3a:ee:2b:36:dc:b1:1a:
86:59:a8:7a:c6:84:fe:08:9d:c0:fb:df:3b:57:2d:
be:57:1d:88:1b:94:e0:72:94:a7:c6:a4:a2:d7:79:
0e:db:93:46:4b:60:2d:e8:56:f8:d2:c6:3a:ad:c1:
f8:fc:35:be:82:3e:09:a7:7a:9b:7b:7e:0d:ee:21:
bd:c1:c6:99:f8:04:3c:c5:e6:16:9e:33:12:73:05:
13:79:cd:74:ae:05:46:0a:69:b7:14:53:ab:23:00:
99:ca:17:f9:ee:97:fa:60:a6:b0:79:7e:a0:e3:4d:
0a:76:61:40:07:b7:0c:09:8c:8a:aa:4c:a1:c6:d2:
e9:be:34:36:ed:86:d9:c5:9e:0d:e0:2e:aa:30:cf:
79:34:b4:5b:bf:4c:88:05:31:b6:fc:56:d5:6a:f9:
ad:2e:00:8e:28:78:ae:51:f0:f3:79:ad:02:df:8e:
95:33:44:e2:5f:81:c8:a9:fa:09:05:b5:67:a8:26:
6a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:95:2D:B4:6C:E4:97:6E:C4:F8:57:47:C2:54:8B:D8:B2:51:D8:4C
X509v3 Authority Key Identifier:
keyid:3D:0B:E4:AE:38:73:55:54:CD:11:81:0A:9C:7D:20:30:19:04:01:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:c1:d4:df:fa:8f:3f:1e:01:63:8a:29:6e:7e:8b:0f:24:80:
d0:02:75:0f:8f:72:2c:3e:0d:e4:67:14:70:7e:ed:2d:21:77:
e8:15:f8:87:77:65:5f:68:26:ea:fb:f8:f8:fb:86:ad:c8:70:
70:bc:89:99:dc:8c:35:b5:ab:f6:a7:5e:e8:c7:a9:ef:97:a7:
38:72:af:6a:a3:95:ba:19:d5:23:3e:7c:39:0e:75:f8:3d:50:
79:bd:df:ff:4f:f6:db:29:99:f6:59:c7:0a:84:ac:30:86:37:
09:00:7a:ce:70:24:cc:23:e7:c9:9c:22:ba:03:de:ba:89:28:
73:e0:14:af:0e:ab:04:05:59:f8:b3:de:84:6a:c5:fa:19:7d:
88:3a:26:4a:b6:8f:b4:47:07:51:04:b9:01:e6:dd:18:6a:8f:
6b:ee:0d:77:75:03:1a:9e:78:91:50:e2:5e:0f:9f:a6:66:28:
d3:75:79:60:59:95:7e:bf:c7:6e:bd:98:03:cb:e5:05:a0:c6:
1a:c4:47:29:7d:ba:2a:77:0e:17:86:4d:7e:b1:3c:a5:01:80:
81:87:21:dd:15:57:78:03:54:eb:dc:51:16:f8:ca:45:86:f1:
ef:f9:fd:d3:d5:fc:ed:d3:6a:8f:f6:09:a2:8a:4f:ac:d7:7a:
2e:53:3c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:57:31 2026 by rpki-client