Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
File: PBtlq7jKPpDpdlehqTHkZGneuaA.mft (raw, json)
Hash identifier: MML2nFTj5fp0MZLOgvII+mOgI3a5kuurZkZgVaUO+H8=
Subject key identifier: 49:BE:E6:7A:90:44:C3:E9:44:AE:BC:84:85:A7:CE:C3:3A:84:30:2A
Authority key identifier: 3C:1B:65:AB:B8:CA:3E:90:E9:76:57:A1:A9:31:E4:64:69:DE:B9:A0
Certificate issuer: /CN=3c1b65abb8ca3e90e97657a1a931e46469deb9a0
Certificate serial: 019FA7BDC306A6D454E0E97C7478AE572684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBtlq7jKPpDpdlehqTHkZGneuaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
Manifest number: 0166
Signing time: Tue 28 Jul 2026 08:00:58 +0000
Manifest this update: Tue 28 Jul 2026 08:00:58 +0000
Manifest next update: Wed 29 Jul 2026 08:00:58 +0000
Files and hashes: 1: PBtlq7jKPpDpdlehqTHkZGneuaA.crl (hash: gUF1g62Om1wxjqwwcLn4QQkB12YmjkNdoj/Bqcv7cCY=)
2: gMCIz449uqD5WX8VFOvlE05m9FM.asa (hash: piapX0oug4b2n4Ly7SK9SEYjbmdeHD72ighx3Ds0YaQ=)
3: ufhzE0W5SH0Js0oKYXP2RX7vpvA.roa (hash: L+5eFfEh2iKkPrG9ir0RuhaK5ClvADkNCI+XRwX6vSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBtlq7jKPpDpdlehqTHkZGneuaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:c3:06:a6:d4:54:e0:e9:7c:74:78:ae:57:26:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1b65abb8ca3e90e97657a1a931e46469deb9a0
Validity
Not Before: Jul 28 08:00:58 2026 GMT
Not After : Jul 29 08:00:58 2026 GMT
Subject: CN=49bee67a9044c3e944aebc8485a7cec33a84302a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a7:78:55:aa:9f:d6:fe:5e:c8:00:de:8c:32:
d2:4d:05:a7:e4:93:04:be:55:5b:3d:ac:76:0d:14:
45:13:30:ea:67:f2:1c:c7:ce:3b:26:67:b8:30:52:
fe:8d:d8:5e:f8:d4:2b:f6:14:21:98:52:4d:f0:ee:
3a:f1:cb:fc:d4:2c:10:3d:35:48:0e:f6:14:76:92:
4a:18:03:a5:f0:30:44:51:c5:89:4f:1d:7b:0b:7b:
e9:51:c8:a2:5d:f5:ee:9d:cc:9a:da:70:57:9e:76:
56:1d:06:b4:4a:b2:4c:95:37:78:5e:23:74:ec:cc:
56:81:e4:8f:f5:b9:c4:1a:aa:69:b1:3d:28:23:7a:
70:91:7d:55:0e:ce:45:18:5f:db:1b:35:1a:79:8d:
96:71:d8:42:7a:de:42:c4:be:be:7e:fe:75:d9:9d:
f2:92:50:ba:45:13:0d:4f:5a:e6:ef:4e:ae:4c:c8:
ad:15:83:44:0b:74:72:76:7b:a2:12:8a:49:13:11:
1b:b6:d2:37:34:bf:e5:35:db:3e:d8:b2:44:ac:72:
ab:fd:c2:cc:77:3a:12:00:75:a4:99:00:a5:26:a2:
89:20:5e:5e:4e:5e:75:d5:eb:0f:b6:7a:35:f1:af:
61:5a:90:cc:f0:4c:ba:1a:ea:49:ab:05:4a:1f:77:
c3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BE:E6:7A:90:44:C3:E9:44:AE:BC:84:85:A7:CE:C3:3A:84:30:2A
X509v3 Authority Key Identifier:
keyid:3C:1B:65:AB:B8:CA:3E:90:E9:76:57:A1:A9:31:E4:64:69:DE:B9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBtlq7jKPpDpdlehqTHkZGneuaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/19731f-a646-45b7-9b8a-8dc6edc71a00/1/PBtlq7jKPpDpdlehqTHkZGneuaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:1c:9f:17:5e:07:1f:32:46:1d:e5:28:a7:a3:09:1f:5c:41:
30:32:5a:12:79:a2:78:a6:88:f3:7d:48:2c:3b:d7:75:2e:7f:
b1:c9:82:dc:c0:77:c8:86:83:ac:d1:45:c6:e1:d7:65:ba:19:
33:27:5c:96:3a:a8:64:e4:52:0f:10:1d:4f:ce:f4:11:f4:23:
83:23:b3:58:cc:f9:1a:53:80:86:03:a6:bb:21:be:e9:72:08:
52:13:94:b4:7c:e0:79:87:be:07:f9:5a:24:b0:ab:41:1b:fe:
79:d1:83:9d:43:08:f9:65:17:ee:12:d2:f8:bb:34:08:cf:f9:
54:b6:d3:f0:b9:0e:12:ea:fa:3a:75:0c:d7:e0:02:b1:87:1e:
3e:e9:72:a7:f7:81:01:e6:5f:71:4b:8f:42:a9:37:78:d1:f1:
6e:74:eb:29:de:33:a4:6f:0f:08:ca:c7:52:c5:b0:b2:9d:fa:
39:ad:b7:c4:62:3d:93:6c:0a:f6:b3:c8:20:57:83:e5:94:c9:
c3:ac:1e:55:50:fb:d1:d2:3b:db:19:5a:98:fb:da:f7:d5:94:
49:76:63:f2:7b:e7:f8:3b:53:ee:fc:f6:1c:fc:e8:0d:1f:11:
58:da:aa:59:47:7b:55:5c:32:71:20:e9:8b:7a:55:35:ff:ea:
73:d4:62:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:39:28 2026 by rpki-client