Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
File: PqlK-DEYyT_-izYnXtU0mU1not0.mft (raw, json)
Hash identifier: WSQ7l7i0GI7CIfLxmdWK/Xz8pp1zz6zl5j2twVmtbD8=
Subject key identifier: 62:4A:82:F0:A8:72:B1:D6:7E:31:83:5D:BE:22:F9:68:93:C0:54:D7
Authority key identifier: 3E:A9:4A:F8:31:18:C9:3F:FE:8B:36:27:5E:D5:34:99:4D:67:A2:DD
Certificate issuer: /CN=3ea94af83118c93ffe8b36275ed534994d67a2dd
Certificate serial: 019D9BF53FFA5F49BD0615BC65FCF7BF1F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqlK-DEYyT_-izYnXtU0mU1not0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
Manifest number: 14B3
Signing time: Fri 17 Apr 2026 15:00:34 +0000
Manifest this update: Fri 17 Apr 2026 15:00:34 +0000
Manifest next update: Sat 18 Apr 2026 15:00:34 +0000
Files and hashes: 1: PqlK-DEYyT_-izYnXtU0mU1not0.crl (hash: hZlCeXv8f00Mj4tPUzW8YIsAm5UX2UQGU2l0eCUqu+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqlK-DEYyT_-izYnXtU0mU1not0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:3f:fa:5f:49:bd:06:15:bc:65:fc:f7:bf:1f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea94af83118c93ffe8b36275ed534994d67a2dd
Validity
Not Before: Apr 17 15:00:34 2026 GMT
Not After : Apr 18 15:00:34 2026 GMT
Subject: CN=624a82f0a872b1d67e31835dbe22f96893c054d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:95:4a:f8:d5:1b:f0:0c:f8:6e:79:23:97:3d:
bd:38:07:a2:a6:89:a7:7d:c0:ae:13:a7:ec:44:1f:
7f:e4:39:61:c6:57:a8:41:36:94:a1:8e:45:60:eb:
d6:79:d2:4c:91:31:76:26:df:1a:94:6f:3a:57:f6:
e9:10:29:92:38:85:3b:a4:45:8c:78:38:45:ce:5f:
c2:5e:82:20:fa:e2:9a:bf:86:c7:5c:fb:94:56:ff:
6a:ab:a1:96:f7:d8:09:8f:76:49:1f:33:18:da:8b:
30:07:f0:72:01:ab:e1:3c:08:68:89:4c:95:e1:22:
32:e9:7d:e5:47:9f:60:8a:0a:39:ef:54:aa:82:8d:
7d:4b:11:a3:24:fb:f9:84:d1:51:21:1e:49:16:33:
28:d9:b0:ea:23:8e:53:78:12:22:59:10:2e:a8:e9:
a1:13:a8:c9:2e:3a:26:5f:4f:5d:4b:79:4d:5b:48:
3f:7f:3a:e8:49:c6:49:68:5d:fc:e5:15:f8:9b:55:
05:39:94:40:37:25:b0:65:78:25:de:e3:b2:1a:b6:
ca:c3:ea:f6:b5:f5:6d:03:f2:5f:c8:02:f8:dd:8e:
4c:d0:c1:fe:04:d5:9a:40:e9:2a:b3:a2:94:7b:51:
38:eb:8a:87:34:99:3d:b4:6f:c3:de:cd:4a:f6:41:
e3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4A:82:F0:A8:72:B1:D6:7E:31:83:5D:BE:22:F9:68:93:C0:54:D7
X509v3 Authority Key Identifier:
keyid:3E:A9:4A:F8:31:18:C9:3F:FE:8B:36:27:5E:D5:34:99:4D:67:A2:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqlK-DEYyT_-izYnXtU0mU1not0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:44:16:6f:ec:c5:6c:4b:0d:cc:6b:93:38:9d:a0:bd:c6:34:
db:6b:2d:44:3b:f4:06:25:67:ee:c5:55:81:bc:8c:4e:13:1a:
72:70:d7:58:52:ad:c5:0d:89:0f:96:63:00:ac:df:dd:5d:11:
a7:f8:ab:14:95:2c:34:bc:04:83:40:11:a4:e1:3a:e5:12:9d:
99:2e:f6:b9:a1:ee:34:64:9a:4d:31:a0:a2:37:d8:18:57:e5:
f0:af:d1:e3:84:2e:e7:81:84:ca:bb:c5:87:0c:3a:42:cb:22:
e3:a0:fe:0c:28:1f:ad:a2:6a:e6:30:ca:73:0e:89:54:44:0f:
24:bc:5b:72:b3:66:85:e5:d2:85:f8:eb:d7:92:7d:f1:3f:0f:
e7:38:d0:11:e4:85:80:39:84:7d:81:12:bb:8f:0c:3e:d4:2c:
18:19:9d:8e:f8:f0:40:b9:06:7e:a7:d4:cc:25:0d:f2:c6:f4:
30:46:21:77:18:6c:96:ab:ff:02:b2:3e:d2:4a:4f:48:f8:cf:
03:d6:0d:9d:2c:7a:96:96:57:bb:77:ed:64:d8:f2:89:b0:37:
45:e1:95:48:0f:f0:e7:24:10:a2:e8:bf:ef:62:29:45:f9:e4:
38:8b:94:1c:65:d4:52:1c:66:36:d6:a2:7d:ef:e6:2d:7d:b8:
b9:8d:f5:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2b9T/6X0m9BhW8Zfz3vx9+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYTk0YWY4MzExOGM5M2ZmZThiMzYyNzVlZDUzNDk5NGQ2
N2EyZGQwHhcNMjYwNDE3MTUwMDM0WhcNMjYwNDE4MTUwMDM0WjAzMTEwLwYDVQQD
Eyg2MjRhODJmMGE4NzJiMWQ2N2UzMTgzNWRiZTIyZjk2ODkzYzA1NGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpVK+NUb8Az4bnkjlz29OAeipomn
fcCuE6fsRB9/5DlhxleoQTaUoY5FYOvWedJMkTF2Jt8alG86V/bpECmSOIU7pEWM
eDhFzl/CXoIg+uKav4bHXPuUVv9qq6GW99gJj3ZJHzMY2oswB/ByAavhPAhoiUyV
4SIy6X3lR59gigo571Sqgo19SxGjJPv5hNFRIR5JFjMo2bDqI45TeBIiWRAuqOmh
E6jJLjomX09dS3lNW0g/fzroScZJaF385RX4m1UFOZRANyWwZXgl3uOyGrbKw+r2
tfVtA/JfyAL43Y5M0MH+BNWaQOkqs6KUe1E464qHNJk9tG/D3s1K9kHjKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJKgvCocrHWfjGDXb4i+WiTwFTXMB8GA1UdIwQY
MBaAFD6pSvgxGMk//os2J17VNJlNZ6LdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHFsSy1ERVl5VF8taXpZblh0VTBtVTFub3QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mZjQxOTEtYjlmMy00MzgyLWJlZTEt
Mjk1N2FmYjE0Nzk0LzEvUHFsSy1ERVl5VF8taXpZblh0VTBtVTFub3QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9mZjQxOTEtYjlmMy00MzgyLWJlZTEtMjk1N2FmYjE0Nzk0
LzEvUHFsSy1ERVl5VF8taXpZblh0VTBtVTFub3QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuUQWb+zF
bEsNzGuTOJ2gvcY022stRDv0BiVn7sVVgbyMThMacnDXWFKtxQ2JD5ZjAKzf3V0R
p/irFJUsNLwEg0ARpOE65RKdmS72uaHuNGSaTTGgojfYGFfl8K/R44Qu54GEyrvF
hww6Qssi46D+DCgfraJq5jDKcw6JVEQPJLxbcrNmheXShfjr15J98T8P5zjQEeSF
gDmEfYESu48MPtQsGBmdjvjwQLkGfqfUzCUN8sb0MEYhdxhslqv/ArI+0kpPSPjP
A9YNnSx6lpZXu3ftZNjyibA3ReGVSA/w5yQQoui/72IpRfnkOIuUHGXUUhxmNtai
fe/mLX24uY31Vw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:46:46 2026 by rpki-client