Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft
File: PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft (raw, json)
Hash identifier: kYWaAdd4b+TkQPmpqw1o0uq0PU/7h0l397H0EKm54i0=
Subject key identifier: 13:7B:84:19:E6:E3:A6:D9:F9:FE:9B:8F:D4:77:91:57:1A:30:8E:2E
Authority key identifier: 3E:AB:E0:28:F3:BE:7E:E0:72:88:5D:02:BB:D7:B6:2A:65:24:25:EF
Certificate issuer: /CN=3eabe028f3be7ee072885d02bbd7b62a652425ef
Certificate serial: 019CABDA06DCA36232D692FA003E977F4D08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft
Manifest number: 0E59
Signing time: Mon 02 Mar 2026 00:01:58 +0000
Manifest this update: Mon 02 Mar 2026 00:01:58 +0000
Manifest next update: Tue 03 Mar 2026 00:01:58 +0000
Files and hashes: 1: 66CPSBvOBs6dFqzBnItMz4Q213g.roa (hash: b1rR7/NAs6w4yv3zdYzfmRYRTyFpzzr69EUW9oij5uE=)
2: PqvgKPO-fuByiF0Cu9e2KmUkJe8.crl (hash: c01npK7H948iY22xHtaRjMKy3KYvhkOLuy0J0t/iy64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:da:06:dc:a3:62:32:d6:92:fa:00:3e:97:7f:4d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eabe028f3be7ee072885d02bbd7b62a652425ef
Validity
Not Before: Mar 2 00:01:58 2026 GMT
Not After : Mar 3 00:01:58 2026 GMT
Subject: CN=137b8419e6e3a6d9f9fe9b8fd47791571a308e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:66:4a:3a:cb:3b:9e:c4:47:a9:24:42:22:e6:
99:8c:83:f0:ba:de:63:58:4b:97:68:97:56:43:23:
69:36:f6:a7:49:8c:b6:01:ab:fd:02:d4:4f:fa:8a:
1c:b5:1d:67:e4:25:36:8e:df:3e:7d:c0:56:df:ba:
7b:79:47:cf:24:0b:8b:24:f4:c6:7b:cc:a7:53:d4:
34:4b:7b:3f:ae:51:e8:77:3e:43:4b:07:7f:35:30:
44:4e:10:39:fb:2a:e8:29:0b:2b:75:f9:f9:de:00:
ef:49:da:0e:54:0b:3a:cd:00:df:db:e3:a2:60:b9:
69:e7:16:fc:83:fc:1c:4d:63:b8:ab:ab:72:a9:dc:
a1:79:ab:8e:eb:10:2d:28:33:07:df:83:8d:14:9f:
9d:9f:e3:d7:40:b7:39:7d:76:69:95:d8:66:d8:a5:
db:27:96:fa:c0:35:0b:cc:75:f1:c9:d7:68:52:ab:
d5:39:34:ea:f6:c5:8d:ed:56:7c:d9:88:2f:0d:4b:
9d:b3:5d:80:32:c4:37:a5:93:86:e2:34:e7:19:48:
9c:96:10:94:7b:6b:41:27:ba:ec:47:69:bc:94:bb:
4e:b4:53:6a:a6:6d:74:68:7e:07:ba:c5:b2:77:98:
07:74:eb:55:2d:b0:69:ea:bd:49:46:f4:c4:df:8f:
ce:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7B:84:19:E6:E3:A6:D9:F9:FE:9B:8F:D4:77:91:57:1A:30:8E:2E
X509v3 Authority Key Identifier:
keyid:3E:AB:E0:28:F3:BE:7E:E0:72:88:5D:02:BB:D7:B6:2A:65:24:25:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:cf:8a:77:2c:1f:de:d2:0f:4f:7d:8e:58:c2:ce:21:3b:ae:
74:27:45:12:6f:28:22:3d:94:c7:07:d6:e3:2b:23:67:bf:73:
46:2c:03:97:22:d3:5b:c2:aa:d9:87:26:6c:e1:59:f1:ba:e3:
ba:16:51:06:e0:b9:49:7e:50:06:c8:39:f7:e8:0b:04:26:c4:
17:b3:57:45:35:b9:f4:64:3b:f5:18:15:d9:a2:3b:01:6e:47:
db:d7:fb:98:0c:b6:1b:f4:a5:25:ab:4b:60:ef:b7:44:eb:8c:
ec:ff:ae:36:36:a8:2b:10:67:25:a2:02:1f:63:c8:6b:44:16:
dc:25:4c:23:b5:4f:99:93:c5:47:4b:dd:bb:3b:ab:b5:ad:e7:
ec:d1:b4:21:d3:03:cd:7e:a0:f4:a4:09:1f:36:de:6f:54:bc:
d6:15:bc:22:2a:cd:bd:f8:58:d9:d9:75:e8:2d:aa:30:56:1f:
28:04:b8:78:fc:3c:30:a1:de:11:8b:b4:7b:9c:44:78:f5:5d:
62:64:a2:80:76:35:89:b5:45:8e:c8:dd:8b:25:42:74:f2:8f:
8d:8e:f2:c1:06:a7:17:10:b0:e3:96:e9:70:ea:ca:3f:a9:31:
b7:bb:32:e7:39:6a:dc:ed:4e:83:60:c7:d4:79:ee:53:af:91:
40:9c:c2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:02 2026 by rpki-client