Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
File: PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft (raw, json)
Hash identifier: kseL8h+qKfp417tLGgE6riTYkM8dt0zPZ1qHi4cV6lo=
Subject key identifier: 15:BC:CC:65:38:CC:B5:45:56:A9:B7:1F:C0:41:62:1C:28:71:8D:0E
Authority key identifier: 3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34
Certificate issuer: /CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334
Certificate serial: 019CAC46A60825E828353D3E45CE2798ED04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 02:00:36 +0000
Manifest this update: Mon 02 Mar 2026 02:00:36 +0000
Manifest next update: Tue 03 Mar 2026 02:00:36 +0000
Files and hashes: 1: PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl (hash: nAwvdCd6uExjqKh5ykusbwmJ7i+EMmlaICPZw552GMA=)
2: nnxiFtwqx8GnsAuhyqsBzy-CKHk.roa (hash: a4O6X7QudSaMxrAiVWZoV6/Apq2rXIJ1YdJgf4/PVxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:a6:08:25:e8:28:35:3d:3e:45:ce:27:98:ed:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334
Validity
Not Before: Mar 2 02:00:36 2026 GMT
Not After : Mar 3 02:00:36 2026 GMT
Subject: CN=15bccc6538ccb54556a9b71fc041621c28718d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ef:68:f2:fb:99:27:fd:4b:cf:8c:56:4d:1f:
11:c6:d0:f5:f7:b4:77:65:f3:7e:50:37:bb:32:af:
05:44:2c:f7:e0:74:69:d9:fa:d9:75:83:5c:70:9c:
d3:75:a6:63:d6:c0:0c:19:ce:78:5c:d4:9b:de:9c:
59:25:37:24:f4:a5:b7:cf:58:96:d0:2a:6f:3f:ce:
9a:dd:69:10:d5:db:e2:ec:85:10:6e:37:fb:b9:fd:
15:8f:9e:6d:33:11:38:ab:1e:28:08:21:79:75:73:
64:1a:b1:51:17:aa:9b:48:7b:76:6e:74:72:4b:07:
0b:1b:2b:df:bf:53:7a:42:b0:10:1b:95:9b:6a:da:
c1:fd:66:8e:93:ce:58:9c:07:a5:9f:14:68:e4:97:
ec:b4:c0:b3:6c:1a:79:1d:ef:be:a7:23:3b:b9:45:
64:0f:3c:7b:93:37:8a:89:49:15:0f:98:26:4c:65:
4f:b3:2a:b2:52:b8:3b:83:15:85:83:6d:7a:a7:0a:
d1:8c:f5:33:fe:f7:51:03:01:17:7d:83:4b:f2:85:
90:63:c7:a9:16:60:44:d7:27:0e:00:1e:62:1b:75:
9a:49:95:31:69:08:95:99:c2:23:08:7b:75:f8:61:
f2:66:a1:1f:b3:0f:3b:45:ca:9a:e1:df:ce:21:d2:
5d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:BC:CC:65:38:CC:B5:45:56:A9:B7:1F:C0:41:62:1C:28:71:8D:0E
X509v3 Authority Key Identifier:
keyid:3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8e:97:a2:ff:b4:c7:eb:e7:9d:16:ed:ca:87:81:a7:5c:c5:
90:8a:3f:46:bf:88:a7:00:ca:3a:d1:98:0c:75:17:60:5d:10:
6e:bf:c4:ed:92:17:b5:1d:06:70:e3:95:41:81:5b:9e:b2:79:
85:0b:3a:66:9c:71:eb:9c:b8:f1:32:e4:11:31:c5:bc:57:c8:
8f:f5:43:ff:99:12:34:26:de:56:21:0f:d7:b6:95:d7:1a:63:
fd:20:9c:38:e1:58:5a:66:b9:c7:e0:64:48:a8:67:8f:2e:f8:
61:d2:81:6c:a6:02:8d:38:45:e0:ab:12:27:0a:a2:fa:3f:10:
92:90:0c:86:1d:ba:03:20:3b:36:4f:50:60:e2:eb:d8:ed:f7:
d7:77:88:65:5f:ae:e6:15:29:bf:68:a0:ec:ee:56:66:ff:de:
1a:c0:2d:28:a5:c6:5d:a5:60:a0:11:12:4e:5e:93:ab:48:d9:
6e:f8:31:ad:a4:7e:d3:35:15:c8:d0:66:ae:cd:f2:c9:2f:e6:
53:ab:6f:c5:95:58:58:fa:10:4e:07:7a:c0:cf:f5:12:1e:ab:
51:eb:a9:9f:4e:7d:9a:80:9f:33:d7:31:82:14:9a:c7:9e:0e:
60:4b:96:a6:0c:9b:c3:dd:01:91:ad:20:42:6c:5d:5e:0a:8f:
e1:6c:b8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:17:42 2026 by rpki-client