Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft
File: PQJjyVdcvQESY66Ig5p4iLdPoHY.mft (raw, json)
Hash identifier: ggRNpazV8FlXAfK8EHunzFwNE16PZEoSlrJ5z+FNRBU=
Subject key identifier: 25:AC:F6:51:7A:4E:5F:AD:B3:3B:25:92:66:17:1F:C8:EF:CA:4B:71
Authority key identifier: 3D:02:63:C9:57:5C:BD:01:12:63:AE:88:83:9A:78:88:B7:4F:A0:76
Certificate issuer: /CN=3d0263c9575cbd011263ae88839a7888b74fa076
Certificate serial: 019CAD59EA8B23F29DE3F7551B0A4E5F598D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQJjyVdcvQESY66Ig5p4iLdPoHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft
Manifest number: 1372
Signing time: Mon 02 Mar 2026 07:01:16 +0000
Manifest this update: Mon 02 Mar 2026 07:01:16 +0000
Manifest next update: Tue 03 Mar 2026 07:01:16 +0000
Files and hashes: 1: PQJjyVdcvQESY66Ig5p4iLdPoHY.crl (hash: Y3FTHhTXlw61Sl79Ak2Y9ZqkHGrauqAZWmLlKDMUElI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQJjyVdcvQESY66Ig5p4iLdPoHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:ea:8b:23:f2:9d:e3:f7:55:1b:0a:4e:5f:59:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0263c9575cbd011263ae88839a7888b74fa076
Validity
Not Before: Mar 2 07:01:16 2026 GMT
Not After : Mar 3 07:01:16 2026 GMT
Subject: CN=25acf6517a4e5fadb33b259266171fc8efca4b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2a:64:46:40:c1:af:c4:44:c7:b2:55:ef:83:
35:5c:63:cb:0d:b1:aa:a0:28:b1:9a:62:58:20:78:
d4:5f:9e:5c:c6:12:30:ea:ec:01:ee:07:12:bc:7e:
df:74:2c:6a:db:87:f8:52:14:7d:16:9b:4a:e4:17:
00:b0:52:8e:f2:06:f7:21:a0:ab:37:54:26:dc:87:
2c:5a:14:81:99:62:51:42:da:f7:08:e5:28:66:a2:
85:4d:4c:9e:7d:44:fc:88:d8:27:c8:da:cf:40:90:
4b:af:e3:fc:be:55:ff:b1:58:a7:aa:4a:40:24:d3:
63:ea:a6:7f:8c:29:60:6a:86:85:b8:8b:b5:00:2f:
8e:f0:85:33:12:f8:46:26:68:21:46:bc:68:aa:e6:
53:b5:60:02:a2:b4:f1:67:16:21:86:31:47:34:7f:
30:5f:6b:7f:d6:41:c7:ca:69:53:0d:98:c1:2f:8f:
b8:45:4b:2e:f9:56:9f:9c:86:c1:58:86:d1:3f:1d:
3e:c5:91:75:d1:e9:5a:02:00:f5:10:65:4a:3a:3c:
0a:30:24:88:f1:66:55:eb:29:c9:29:43:35:17:9c:
32:3c:9b:7b:ea:ec:cb:85:0e:98:ce:01:8a:ba:b8:
c5:9c:6d:71:5e:2c:2b:28:58:60:0e:0d:d3:4e:b1:
bd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AC:F6:51:7A:4E:5F:AD:B3:3B:25:92:66:17:1F:C8:EF:CA:4B:71
X509v3 Authority Key Identifier:
keyid:3D:02:63:C9:57:5C:BD:01:12:63:AE:88:83:9A:78:88:B7:4F:A0:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQJjyVdcvQESY66Ig5p4iLdPoHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:fb:ac:f9:5b:6d:7d:e7:d0:2c:fb:39:db:06:7d:60:54:d2:
90:58:2a:f6:b9:ad:eb:fa:9a:88:15:33:e6:95:0f:3b:27:54:
c0:b1:4a:b2:85:11:36:e7:67:67:30:f5:19:f9:83:41:15:15:
a2:e0:c5:35:10:74:1e:89:aa:87:95:d8:cf:b5:e1:65:ec:dd:
e9:92:5b:7b:3d:4d:3e:9f:e5:39:49:70:12:3b:21:9b:f9:2b:
29:d6:67:fd:e8:70:66:06:40:15:2e:1d:de:5c:e4:e2:78:87:
3f:81:2c:02:4d:6b:a7:d8:9c:40:fa:a7:7e:bc:05:93:86:18:
c7:1e:ce:27:54:72:0b:40:79:66:0d:37:37:e1:6e:39:db:a2:
64:15:0f:28:19:ae:3c:e7:f3:0d:ca:b4:6d:00:ab:7e:8f:5e:
25:b6:37:b6:e6:31:12:bd:2f:c3:31:9f:05:67:03:c5:42:27:
2f:3e:60:31:0f:ec:fd:00:d6:1a:07:fc:e9:44:40:0d:dd:e5:
7e:03:1f:cd:86:54:aa:9c:78:1e:44:9e:5c:69:af:ce:b3:69:
8c:6d:df:0b:d3:e4:96:a6:6b:76:90:5f:e5:ac:23:a9:35:23:
0a:41:f1:bf:b7:ef:ab:09:f1:75:db:0d:2b:e0:a8:c4:53:e2:
c7:f3:3b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:57:30 2026 by rpki-client