Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft
File: PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft (raw, json)
Hash identifier: BFwsH/5jikcB26dtKIdEoj5kWhJuPJGjwUDl59gTI1U=
Subject key identifier: E0:CB:6D:A3:29:46:A4:C0:1B:5D:84:84:CB:B7:93:96:90:C2:49:2B
Authority key identifier: 3E:AB:E0:28:F3:BE:7E:E0:72:88:5D:02:BB:D7:B6:2A:65:24:25:EF
Certificate issuer: /CN=3eabe028f3be7ee072885d02bbd7b62a652425ef
Certificate serial: 019DA4F923F53B7BA1AEAC48EE6CB341578F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft
Manifest number: 0EDA
Signing time: Sun 19 Apr 2026 09:01:24 +0000
Manifest this update: Sun 19 Apr 2026 09:01:24 +0000
Manifest next update: Mon 20 Apr 2026 09:01:24 +0000
Files and hashes: 1: 66CPSBvOBs6dFqzBnItMz4Q213g.roa (hash: b1rR7/NAs6w4yv3zdYzfmRYRTyFpzzr69EUW9oij5uE=)
2: PqvgKPO-fuByiF0Cu9e2KmUkJe8.crl (hash: c+osIRAowJ2L43tAQIFeO5INjg11jekO9W0TOqwbZYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f9:23:f5:3b:7b:a1:ae:ac:48:ee:6c:b3:41:57:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eabe028f3be7ee072885d02bbd7b62a652425ef
Validity
Not Before: Apr 19 09:01:24 2026 GMT
Not After : Apr 20 09:01:24 2026 GMT
Subject: CN=e0cb6da32946a4c01b5d8484cbb7939690c2492b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9b:65:c2:55:93:ad:42:ac:e0:af:e3:d0:68:
35:0d:b6:7f:96:84:e3:ce:02:7c:dd:37:ce:cd:77:
47:c2:31:34:0b:00:a9:1f:da:93:f4:f3:47:79:23:
69:ca:c0:ea:e0:be:12:8e:88:92:f3:bb:b4:bc:cb:
c6:0a:1b:3b:e8:23:2e:a7:4e:cb:33:56:fa:ac:c8:
25:08:ea:9a:d3:40:b5:58:a6:7f:bf:af:bb:41:44:
bd:55:e9:1e:67:39:62:8a:7e:6a:38:ed:1f:e8:92:
36:61:33:9b:49:5b:6d:67:95:7d:e8:40:85:25:32:
97:84:84:9f:03:60:5f:96:20:92:ff:39:8c:ff:1e:
97:eb:3c:d8:b0:cf:d0:44:f5:d9:83:c5:cb:41:72:
d6:41:06:11:e3:a6:7d:36:9a:7f:08:ad:66:4e:a6:
96:78:26:a5:f7:35:c5:f1:f4:f1:70:50:a9:a3:cb:
d5:cf:b0:87:2a:77:9d:5a:dd:d1:1b:01:4a:f4:94:
9d:ea:f9:0f:d1:c2:0d:d2:51:b2:57:4b:5e:73:3a:
f1:48:da:31:12:c8:2e:b7:e8:d7:87:5e:13:b0:73:
aa:f9:08:d0:0d:4f:3d:7a:ce:d8:25:a7:16:0f:a5:
d9:da:ec:eb:bd:d6:2f:ee:e3:b9:ac:d2:9d:a0:37:
97:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CB:6D:A3:29:46:A4:C0:1B:5D:84:84:CB:B7:93:96:90:C2:49:2B
X509v3 Authority Key Identifier:
keyid:3E:AB:E0:28:F3:BE:7E:E0:72:88:5D:02:BB:D7:B6:2A:65:24:25:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:45:50:43:e0:96:02:30:3c:03:3f:8f:83:8b:d4:51:df:d9:
51:b9:77:ea:d6:50:1e:ea:1d:e7:de:4e:4f:1f:7e:c6:ef:7d:
cc:9b:11:6c:18:c3:ed:41:d6:8c:68:8a:9b:11:59:d0:61:0e:
10:07:02:2c:e7:07:0e:01:84:c3:5f:4f:f3:ee:f2:88:fb:9c:
b4:8b:9c:c9:73:0b:82:57:7c:ea:b2:b0:4f:ac:1d:bb:45:68:
f9:fe:61:f4:0a:f9:30:8a:1a:3e:a9:41:35:4a:8e:de:4e:89:
f1:8d:cd:b2:f5:0c:91:d4:44:ec:f6:81:79:26:f3:d0:09:75:
06:a3:94:93:71:d1:fd:2c:2c:c7:46:ba:6d:c0:67:56:b1:40:
35:59:78:ab:93:d2:ec:0a:b9:a2:f8:6b:50:b9:96:8f:06:67:
d9:e7:71:e7:84:69:ad:49:d9:14:52:89:73:66:f2:03:f2:71:
d0:fb:16:67:40:53:d0:83:ad:d9:17:7e:f8:1e:91:b7:33:c1:
cf:9a:4c:c2:aa:cb:95:f2:be:43:b1:74:aa:8f:43:5a:31:fb:
0a:5f:2d:6e:62:ea:cc:d1:f7:44:b2:c1:9f:0c:28:83:9b:fc:
49:31:b4:1a:52:9a:81:b9:25:6a:b5:59:1e:19:f3:1b:b2:49:
dc:89:b6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:59:25 2026 by rpki-client