Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.mft
File: Pv1EVCQT55zFa-mDGjl-eqP1LTk.mft (raw, json)
Hash identifier: awBEXzrhwH8GZASDdT36aGGhDm0ig9t6QFyxxm8nRjM=
Subject key identifier: 0E:C0:C5:60:A2:A7:CF:9E:99:E6:9E:90:05:96:45:7E:89:0B:CE:14
Authority key identifier: 3E:FD:44:54:24:13:E7:9C:C5:6B:E9:83:1A:39:7E:7A:A3:F5:2D:39
Certificate issuer: /CN=3efd44542413e79cc56be9831a397e7aa3f52d39
Certificate serial: 01A0C1B13AA88774BD796E2F99AF9C842E61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pv1EVCQT55zFa-mDGjl-eqP1LTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.mft
Manifest number: 0203
Signing time: Mon 21 Sep 2026 02:00:12 +0000
Manifest this update: Mon 21 Sep 2026 02:00:12 +0000
Manifest next update: Tue 22 Sep 2026 02:00:12 +0000
Files and hashes: 1: Pv1EVCQT55zFa-mDGjl-eqP1LTk.crl (hash: puTGckLF5wPhFBHBaULy7BSW924kR17onidrB0rzH9g=)
2: mcJm8HeYM8tAaxj_DbPV_ZHMr0U.asa (hash: fdM8B4LFVNA1rExhWmALS3M97yC0S/Herj8AXOIShkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pv1EVCQT55zFa-mDGjl-eqP1LTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:b1:3a:a8:87:74:bd:79:6e:2f:99:af:9c:84:2e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efd44542413e79cc56be9831a397e7aa3f52d39
Validity
Not Before: Sep 21 02:00:12 2026 GMT
Not After : Sep 22 02:00:12 2026 GMT
Subject: CN=0ec0c560a2a7cf9e99e69e900596457e890bce14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0a:35:66:fb:ac:ef:a3:7a:6f:7e:39:d9:49:
79:74:d0:0f:c6:e6:ba:94:62:3a:c6:ea:a3:41:86:
96:43:b2:01:4c:6f:62:b0:04:ce:62:c8:d7:ee:8c:
b2:4d:0c:1b:19:6c:d8:e8:42:4c:21:36:7f:57:0b:
2c:f7:c9:a3:bb:0e:71:b5:c2:db:ba:e7:28:00:8a:
0c:ac:36:70:46:fa:c1:f6:a1:87:a5:21:78:ac:0e:
52:c6:0b:02:db:6e:fb:3a:a0:7b:b1:2b:2a:db:f2:
bc:5e:fa:a3:25:96:bb:d3:5b:7c:13:9c:96:65:d9:
83:1f:e5:1f:d2:e6:2c:d0:3f:e1:71:65:9f:f8:99:
bf:2e:6e:be:57:bf:a5:d5:48:e9:08:a2:6e:bd:4e:
aa:93:db:d3:60:31:a9:34:a4:ce:56:e1:b5:6d:d5:
4f:7d:47:a9:ae:a1:70:3a:aa:a4:47:7b:c2:cf:92:
70:5f:32:bd:f8:25:d0:ed:6e:fa:bd:80:69:e5:f9:
5f:44:46:b4:42:6f:f1:90:a3:d2:aa:09:03:8c:8c:
06:69:f9:bd:bb:18:91:6d:bd:27:5e:a2:bc:99:b4:
63:3c:02:27:49:bb:2a:1b:4e:c4:d7:24:ef:0c:c7:
8a:36:67:30:2a:1b:03:10:ca:ed:b0:e4:75:33:4b:
65:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C0:C5:60:A2:A7:CF:9E:99:E6:9E:90:05:96:45:7E:89:0B:CE:14
X509v3 Authority Key Identifier:
keyid:3E:FD:44:54:24:13:E7:9C:C5:6B:E9:83:1A:39:7E:7A:A3:F5:2D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pv1EVCQT55zFa-mDGjl-eqP1LTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a5c06b-86e9-4aec-9e50-5d4a554ba735/1/Pv1EVCQT55zFa-mDGjl-eqP1LTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:7a:15:49:5f:0f:99:da:be:f6:55:b2:2c:aa:e2:79:71:71:
74:36:00:6a:15:59:cd:77:c3:30:7b:95:4e:b4:5c:58:29:7c:
01:92:c5:37:08:a6:9d:16:de:a8:80:d1:5a:f2:ba:cf:0d:0b:
ce:9c:07:05:4f:71:f0:32:ba:23:a4:e5:fb:f6:ca:7e:96:d7:
ab:f9:21:a8:bf:16:7f:8a:a7:ba:4d:8b:d8:05:e5:91:f0:9f:
7d:17:8d:23:23:70:46:0b:a3:ba:3f:6c:b0:e6:f1:7f:2b:4d:
ce:23:88:b8:17:c2:90:47:1e:52:09:52:7f:87:0f:de:34:f4:
71:4c:f8:8e:7f:2e:e1:0b:86:d2:0c:68:a7:69:cf:59:75:dc:
4a:f7:56:42:2c:b9:27:6a:ec:61:cc:09:02:0e:67:0b:4a:dc:
bb:b3:48:24:03:be:72:ed:93:d9:b6:32:3c:cc:00:40:1b:ff:
d6:f8:ab:a4:4b:80:54:87:09:ed:ea:b0:c6:41:89:01:3a:04:
50:76:8b:52:97:95:cf:6e:51:03:b2:ea:1f:e8:3b:b1:81:5c:
e0:c4:aa:30:0f:12:9d:75:c6:1a:63:61:22:4b:22:e0:04:1a:
75:01:7f:7b:61:ac:26:7b:94:2c:57:96:8e:ec:ac:46:ed:71:
d1:92:72:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:42:50 2026 by rpki-client