Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
File: PBtlq7jKPpDpdlehqTHkZGneuaA.mft (raw, json)
Hash identifier: EYpjOFk/LbJWqVsmpYjS7C7aZekDPn6fPu8k8UKt6bM=
Subject key identifier: 2A:46:57:7C:10:28:56:1C:70:A3:39:AB:22:0D:19:77:8D:8C:20:9D
Authority key identifier: 3C:1B:65:AB:B8:CA:3E:90:E9:76:57:A1:A9:31:E4:64:69:DE:B9:A0
Certificate issuer: /CN=3c1b65abb8ca3e90e97657a1a931e46469deb9a0
Certificate serial: 019DA453B4427C8B74373DAADD1DA3C1B1BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBtlq7jKPpDpdlehqTHkZGneuaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
Manifest number: 5B
Signing time: Sun 19 Apr 2026 06:00:42 +0000
Manifest this update: Sun 19 Apr 2026 06:00:42 +0000
Manifest next update: Mon 20 Apr 2026 06:00:42 +0000
Files and hashes: 1: PBtlq7jKPpDpdlehqTHkZGneuaA.crl (hash: VjYSZM/9O5X0gzqJuvjt+rbA345XF3NCIdeuYB5Ls4Q=)
2: gMCIz449uqD5WX8VFOvlE05m9FM.asa (hash: piapX0oug4b2n4Ly7SK9SEYjbmdeHD72ighx3Ds0YaQ=)
3: ufhzE0W5SH0Js0oKYXP2RX7vpvA.roa (hash: L+5eFfEh2iKkPrG9ir0RuhaK5ClvADkNCI+XRwX6vSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBtlq7jKPpDpdlehqTHkZGneuaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:b4:42:7c:8b:74:37:3d:aa:dd:1d:a3:c1:b1:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1b65abb8ca3e90e97657a1a931e46469deb9a0
Validity
Not Before: Apr 19 06:00:42 2026 GMT
Not After : Apr 20 06:00:42 2026 GMT
Subject: CN=2a46577c1028561c70a339ab220d19778d8c209d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6c:e0:27:27:03:b3:9a:89:ee:ef:f5:59:d3:
8e:d9:3f:de:80:45:02:1e:bd:d1:a7:58:57:cf:74:
9f:1c:47:40:57:ed:a6:f1:e4:f4:75:cf:c8:28:9a:
c8:d1:03:ea:75:0e:20:b4:40:d2:59:c2:8a:20:ed:
14:4c:1a:ba:5f:d4:8c:f9:49:b7:7d:66:07:9b:5a:
56:8f:d8:b1:d7:62:a2:a5:52:25:ba:9f:45:da:23:
bc:ec:f2:41:14:0f:de:4a:9b:84:eb:1b:16:59:bc:
ca:a9:38:1c:35:ab:e6:ab:b6:53:d5:06:e1:96:62:
62:b6:45:57:71:3a:c1:83:ef:d1:31:24:e1:df:68:
2d:a0:9b:77:d2:0c:e7:e8:fd:55:98:28:d9:ee:5e:
dd:4f:4e:1a:61:7d:18:ec:ea:49:e1:43:ca:bd:e1:
69:00:4b:a8:f3:38:fa:78:db:d5:1b:7f:83:82:12:
9b:b9:fa:1e:66:0b:54:ab:95:b4:12:dd:ea:32:44:
4c:ad:32:61:4e:50:61:99:b2:81:8d:b4:9d:43:b3:
14:37:fc:69:e2:9e:d2:53:61:07:50:ca:b1:3d:27:
87:52:18:7e:08:81:e6:49:fb:c0:fc:de:5f:54:b7:
70:35:93:cc:bf:96:03:ea:bb:ab:7c:6c:73:24:8f:
ba:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:46:57:7C:10:28:56:1C:70:A3:39:AB:22:0D:19:77:8D:8C:20:9D
X509v3 Authority Key Identifier:
keyid:3C:1B:65:AB:B8:CA:3E:90:E9:76:57:A1:A9:31:E4:64:69:DE:B9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBtlq7jKPpDpdlehqTHkZGneuaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a3:15:9a:ab:10:02:02:68:61:2f:35:3d:ce:0a:bf:5b:5c:
4a:8a:52:eb:4d:f9:ef:dd:86:c5:14:79:7d:da:40:a2:6f:17:
0f:df:87:ad:2a:a2:8b:a9:22:9a:52:e6:3c:4f:5b:f3:24:ac:
ce:67:cd:32:ad:e1:f0:3e:de:58:c4:8d:6b:5c:ff:5b:f5:df:
05:5b:a9:9b:6b:b8:05:d5:75:f6:0c:df:45:3a:80:14:29:5f:
6a:a5:95:f6:89:52:b0:a4:86:0b:88:ff:01:ba:e0:dc:91:9a:
72:2c:34:c3:18:77:d9:82:5d:f2:36:59:54:33:74:8e:fd:25:
b0:6c:37:c1:ba:05:d9:da:03:24:53:ca:49:04:a6:ee:0a:0f:
c5:10:27:dd:49:51:95:5a:01:c6:88:0d:c9:fc:7c:e7:75:7a:
e1:78:a6:90:0e:c6:e7:b5:14:a2:80:56:46:b7:83:c1:c7:59:
f4:31:7c:4d:40:d1:9c:2d:6c:7f:78:71:8a:0d:ff:19:a3:c0:
57:77:da:7e:b1:dd:41:a5:c3:1c:a5:74:c0:07:d5:16:df:c2:
c4:29:eb:f2:f9:cd:1c:83:7f:0d:05:7c:22:2a:cd:cd:54:48:
55:63:29:be:26:4b:94:1f:1e:b8:3e:a3:35:b0:4c:31:c1:f3:
55:a6:86:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:40:58 2026 by rpki-client