Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
File: PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft (raw, json)
Hash identifier: +K5DUz1qawhGZqW3hxU5xjAvPiActlh5v1nHkBo1wVo=
Subject key identifier: 80:12:58:63:64:DC:3C:B1:FF:03:40:71:B2:2C:EC:E0:6A:ED:2A:52
Authority key identifier: 3D:0B:E4:AE:38:73:55:54:CD:11:81:0A:9C:7D:20:30:19:04:01:98
Certificate issuer: /CN=3d0be4ae38735554cd11810a9c7d203019040198
Certificate serial: 019FA86271D58CFDE1B7846078D741C2AA7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
Manifest number: 03B7
Signing time: Tue 28 Jul 2026 11:00:51 +0000
Manifest this update: Tue 28 Jul 2026 11:00:51 +0000
Manifest next update: Wed 29 Jul 2026 11:00:51 +0000
Files and hashes: 1: PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl (hash: fpuYfzIaM7w3EtjAYRDiuVo4e+VQpyNwHJS1nC5u64I=)
2: xz923TuXOINB3WLY3XLk0pyQs6s.asa (hash: SGmXF+mIU3rmhMsPtkMgk1YdAxdF0xFT+cRVzGK/gGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:71:d5:8c:fd:e1:b7:84:60:78:d7:41:c2:aa:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0be4ae38735554cd11810a9c7d203019040198
Validity
Not Before: Jul 28 11:00:51 2026 GMT
Not After : Jul 29 11:00:51 2026 GMT
Subject: CN=8012586364dc3cb1ff034071b22cece06aed2a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:27:86:46:54:bc:5c:9b:0f:c7:7e:fd:ae:d3:
08:b5:dd:2a:c6:27:10:e7:13:84:c6:da:e9:3d:c2:
27:b9:11:c5:48:6d:37:9e:51:cb:7b:06:b4:54:1b:
43:67:0f:8b:d9:e2:6c:72:91:ee:26:a3:69:a6:ec:
49:7b:00:db:84:6a:04:af:57:a1:2e:30:62:6e:ab:
2a:9a:72:0a:48:58:1c:08:d4:98:dc:ea:7f:11:fc:
2b:e8:70:61:e1:f1:09:29:65:33:49:ca:52:66:a2:
a7:2e:09:28:47:89:6e:d4:25:00:e6:40:39:9a:da:
3a:37:49:15:c1:ef:71:c7:33:b4:4d:bc:18:0b:20:
26:0c:27:a6:f6:0d:3a:e1:94:84:a8:e0:24:c7:36:
2e:06:97:ad:f9:64:ad:b4:9d:22:53:12:c8:6c:07:
61:6d:0e:b7:d4:c8:13:aa:a5:aa:ae:bf:23:37:63:
bb:b1:8b:56:28:32:ec:86:61:57:ed:d7:ac:6c:44:
da:7b:5d:c8:d8:f8:42:45:bc:d5:5e:ab:53:d5:23:
3a:00:84:ab:07:b5:73:3f:e1:29:c8:7c:89:c4:3a:
66:95:0b:cb:3d:58:76:6f:5b:57:28:e2:d1:9e:ef:
25:db:2a:48:25:33:b7:3b:b0:e8:fc:7b:8c:55:0e:
67:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:12:58:63:64:DC:3C:B1:FF:03:40:71:B2:2C:EC:E0:6A:ED:2A:52
X509v3 Authority Key Identifier:
keyid:3D:0B:E4:AE:38:73:55:54:CD:11:81:0A:9C:7D:20:30:19:04:01:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:61:9b:2d:50:9d:a1:c8:c5:24:77:93:7f:48:67:d7:81:0f:
7e:b2:48:54:5b:a6:73:93:d6:29:9b:cd:bd:63:ac:c6:a5:f1:
f0:30:e6:87:40:70:c2:6d:c9:4d:cf:9c:fd:28:b9:1b:2d:9c:
03:46:fd:eb:8f:9d:16:b8:44:9a:4e:b4:38:e8:e5:56:cd:43:
c9:f3:29:bd:3d:eb:92:6f:c3:5e:b2:d7:ec:db:b5:0c:15:78:
a3:3c:3c:53:ff:96:0d:9d:5a:6d:1f:53:3d:56:be:1b:48:d1:
59:7e:c2:e1:53:e9:12:6a:d3:82:21:7f:14:76:42:4d:0e:81:
c8:c0:ff:6d:50:37:b6:41:bf:d1:32:bc:35:9c:46:4c:1a:e7:
60:3f:7e:83:d5:a4:f8:d5:1a:a9:9c:47:89:18:e0:78:5a:b7:
d9:b2:34:38:5f:10:30:5f:ee:32:d2:c6:91:2a:a9:97:8f:de:
21:d1:dd:e3:82:05:6d:cb:46:0c:bd:4a:1f:16:63:da:82:19:
4e:31:e0:5c:ab:a2:86:a9:93:ad:fa:3a:08:c6:c5:2c:50:33:
f1:e5:42:f0:0d:38:fe:0e:af:e9:e6:f0:5e:21:58:af:78:53:
2d:ef:4d:f4:86:57:6f:3f:8a:57:ad:b2:e8:ab:1e:cc:2b:74:
45:22:2f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:54:09 2026 by rpki-client