Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft
File: PQJjyVdcvQESY66Ig5p4iLdPoHY.mft (raw, json)
Hash identifier: /Sud8jdRz+HM+shrUQNlRTiVAbuFsBdk1pZ6Lj28qY8=
Subject key identifier: CF:2D:0B:0B:1B:3E:44:E5:A1:DA:66:F9:66:8D:74:7F:B3:53:08:B3
Authority key identifier: 3D:02:63:C9:57:5C:BD:01:12:63:AE:88:83:9A:78:88:B7:4F:A0:76
Certificate issuer: /CN=3d0263c9575cbd011263ae88839a7888b74fa076
Certificate serial: 019D98F4E0949D7914FB73EC63C9888AF996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQJjyVdcvQESY66Ig5p4iLdPoHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft
Manifest number: 13EC
Signing time: Fri 17 Apr 2026 01:01:18 +0000
Manifest this update: Fri 17 Apr 2026 01:01:18 +0000
Manifest next update: Sat 18 Apr 2026 01:01:18 +0000
Files and hashes: 1: PQJjyVdcvQESY66Ig5p4iLdPoHY.crl (hash: Oysl1SO9LunvDvIdZgZ9Mgu+2FReSKYuGWgzT2zd7X0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQJjyVdcvQESY66Ig5p4iLdPoHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:e0:94:9d:79:14:fb:73:ec:63:c9:88:8a:f9:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0263c9575cbd011263ae88839a7888b74fa076
Validity
Not Before: Apr 17 01:01:18 2026 GMT
Not After : Apr 18 01:01:18 2026 GMT
Subject: CN=cf2d0b0b1b3e44e5a1da66f9668d747fb35308b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ed:e7:a3:5d:0f:f9:1a:97:5e:5f:c2:f9:40:
4d:46:f1:b7:92:72:6c:cc:38:44:03:8e:81:40:87:
7b:a9:d8:e3:14:4f:b8:67:f5:7e:e5:04:15:ae:40:
e6:bb:fb:85:68:f8:d8:d8:20:1e:f1:d1:63:77:de:
7a:c0:45:46:5f:44:36:aa:ff:8c:59:d9:f6:2e:a7:
50:94:e9:98:88:91:29:0d:f9:49:f0:c4:9c:c6:56:
6a:dc:54:00:ef:04:13:55:4f:90:75:91:c5:6a:6f:
a3:72:7f:7e:89:df:31:39:d3:dd:b2:46:d3:3e:bf:
1b:59:12:24:f7:ea:46:42:2a:a7:4a:17:ff:9f:54:
76:90:7d:13:78:87:1f:66:57:5d:38:4e:2f:58:43:
3a:f6:12:c4:4b:e3:17:27:dc:1c:4a:07:9b:99:23:
62:4f:69:40:38:a9:98:5a:dd:74:bf:fd:68:55:71:
e6:1d:63:8f:95:50:8b:85:98:a5:76:d0:a0:8c:4e:
e7:b4:a9:c5:8b:aa:40:66:fb:cc:34:d4:47:7c:c9:
e7:50:d3:49:9c:0d:cc:c5:2b:02:29:01:43:43:18:
22:95:92:78:41:6c:8b:22:c4:5a:12:c1:73:e4:2b:
d5:00:24:58:6d:aa:74:4a:a6:e7:6f:21:e0:eb:bc:
f3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2D:0B:0B:1B:3E:44:E5:A1:DA:66:F9:66:8D:74:7F:B3:53:08:B3
X509v3 Authority Key Identifier:
keyid:3D:02:63:C9:57:5C:BD:01:12:63:AE:88:83:9A:78:88:B7:4F:A0:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQJjyVdcvQESY66Ig5p4iLdPoHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:2c:ce:db:ef:df:5b:02:b5:69:b9:a1:f4:59:76:e4:cb:99:
ec:68:28:c3:2c:8a:7b:f8:fd:b7:d8:68:4f:ff:12:14:0a:69:
82:d0:9c:d8:52:a4:ba:86:79:90:04:5c:83:ac:df:cc:79:39:
9e:b3:aa:98:31:9a:a1:be:ca:41:54:c6:a9:2d:f0:e1:31:36:
a1:ef:3c:ea:3e:01:83:4e:40:07:fd:0e:58:d2:82:d1:e3:ae:
b0:75:18:73:61:b9:ed:f5:c0:42:6a:e3:51:e6:18:61:61:63:
17:59:46:d0:2b:78:a1:bc:94:94:f9:d2:8e:05:88:55:98:72:
0e:62:98:ed:0e:ba:26:9f:ab:9f:d4:40:a2:b0:38:4a:aa:62:
70:0b:25:f9:6c:d3:0a:e3:69:ae:b4:3b:50:5b:31:19:a9:4c:
d8:6e:37:09:2b:34:20:87:0a:03:da:06:89:58:88:48:99:21:
0b:97:0e:11:d8:68:d6:c8:73:f8:36:e0:f0:89:9b:28:44:bb:
b2:77:fc:e0:a2:e6:8c:12:24:93:a0:2a:fa:ee:d4:2d:69:a1:
18:ae:fd:0b:1b:b2:1a:66:b5:87:7c:ba:e8:1d:f9:45:be:e1:
3f:90:68:cd:1d:2c:55:fe:2a:aa:06:36:8b:1e:82:11:9e:cc:
0e:f6:0b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:28:42 2026 by rpki-client