Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.mft
File: PKE4ItxLDjEIGkhX_QQHDW2svgw.mft (raw, json)
Hash identifier: /ND1qLqCvvgSawrOKHyG6IUA0lescp2aHWs/5c364/c=
Subject key identifier: F4:82:15:0A:B6:A7:6D:10:26:A7:92:20:CE:C3:10:BC:4E:22:FF:6C
Authority key identifier: 3C:A1:38:22:DC:4B:0E:31:08:1A:48:57:FD:04:07:0D:6D:AC:BE:0C
Certificate issuer: /CN=3ca13822dc4b0e31081a4857fd04070d6dacbe0c
Certificate serial: 019D9A3E70918256DF4D81D7AF2602AD22D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKE4ItxLDjEIGkhX_QQHDW2svgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 07:01:16 +0000
Manifest this update: Fri 17 Apr 2026 07:01:16 +0000
Manifest next update: Sat 18 Apr 2026 07:01:16 +0000
Files and hashes: 1: PKE4ItxLDjEIGkhX_QQHDW2svgw.crl (hash: LWH9+zdN+GUutrWLDoldo3C4FJd8plGXmHdfTgmlx8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PKE4ItxLDjEIGkhX_QQHDW2svgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:70:91:82:56:df:4d:81:d7:af:26:02:ad:22:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca13822dc4b0e31081a4857fd04070d6dacbe0c
Validity
Not Before: Apr 17 07:01:16 2026 GMT
Not After : Apr 18 07:01:16 2026 GMT
Subject: CN=f482150ab6a76d1026a79220cec310bc4e22ff6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:00:63:b0:02:dd:21:cd:a5:cd:c9:a1:ad:d4:
ef:13:db:d0:e0:55:41:4d:0b:66:3a:3a:74:de:48:
81:96:bb:b6:41:1f:6c:86:e3:76:92:03:64:6e:0f:
a4:a0:75:b6:df:1a:04:b3:52:92:01:73:1b:dd:eb:
0b:36:8c:cc:cd:3b:3d:1b:17:9a:75:9f:e5:8d:e4:
b0:60:06:56:a9:39:61:5c:60:a6:ca:8d:67:fc:6e:
7d:48:77:fc:35:8d:cb:59:ba:e7:38:ce:9e:91:77:
f9:06:8b:0a:9a:65:df:22:13:0e:0d:b2:48:a3:af:
5a:18:93:dc:9f:f9:33:48:d6:21:e7:35:93:ae:02:
e5:8e:43:5f:29:95:b8:d4:9f:6e:d4:b0:d8:00:ef:
5f:41:d0:f7:b8:0d:db:0d:de:cb:24:87:7c:83:e6:
93:f3:77:5d:d2:86:3f:a7:d9:d4:b4:65:2e:c3:da:
a7:41:fe:c2:8a:24:a9:9b:de:0a:30:1c:c5:db:f9:
ad:bc:b6:4e:19:8b:c9:f7:cb:05:c4:72:03:13:63:
48:93:3f:bb:90:a9:91:c5:c8:94:6a:14:30:e2:21:
a8:36:c5:71:c0:7c:66:8a:74:c2:cd:e8:b5:b6:1d:
d4:d2:a6:d4:89:12:3c:d8:bc:c3:98:00:df:4c:97:
f6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:82:15:0A:B6:A7:6D:10:26:A7:92:20:CE:C3:10:BC:4E:22:FF:6C
X509v3 Authority Key Identifier:
keyid:3C:A1:38:22:DC:4B:0E:31:08:1A:48:57:FD:04:07:0D:6D:AC:BE:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKE4ItxLDjEIGkhX_QQHDW2svgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:68:d7:6d:21:13:36:a7:ce:f6:74:3d:de:e6:8a:66:66:8b:
91:0a:f5:91:1c:d1:d6:1b:02:63:4b:bd:3b:45:ed:84:6a:be:
be:3d:2e:69:98:99:1f:d7:d5:25:ee:e3:1d:cf:85:83:a9:45:
bd:1a:d1:df:29:84:29:f9:cb:2d:08:fa:7e:df:a0:69:03:6c:
7a:48:74:3a:59:2c:4d:37:a2:7c:74:4b:02:04:98:d2:32:c1:
48:8a:99:93:43:92:2c:f3:3f:f1:b6:8f:07:12:6c:e8:a9:e1:
fb:4d:b5:ce:da:c5:28:39:0f:b5:ff:ca:eb:c8:bd:53:03:3c:
2d:e0:4c:13:eb:77:7b:68:25:ed:dd:0f:c7:35:74:a9:c6:4c:
c8:a1:5b:c1:12:8a:c8:b9:aa:a5:4e:02:62:fb:d9:40:82:93:
5f:d8:4e:74:92:ed:ee:79:66:89:c0:81:52:6f:38:d2:77:f0:
ca:18:93:00:2a:b8:1e:db:52:e0:a7:a4:cc:15:e7:67:92:5a:
41:ac:d4:54:b2:a0:e8:7e:d2:b1:9c:7d:1e:65:9c:74:46:6a:
a7:42:1b:14:bd:8d:f8:d5:1e:e2:e7:d7:a5:e6:d8:72:33:27:
5e:4a:6b:16:7d:ef:ef:b0:fa:b0:2d:37:f4:99:17:86:51:2f:
ea:14:96:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:58:44 2026 by rpki-client