Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/67b254-56f4-4e89-a99d-caa329181964/1/PnpcKTN0JfqBOVVRcmyMK35MUIc.mft
File: PnpcKTN0JfqBOVVRcmyMK35MUIc.mft (raw, json)
Hash identifier: obgpu2sX2WcB7xJytiiPNdmJjBYEQgXR0uAvENAPYJU=
Subject key identifier: EE:D3:E4:49:56:73:4A:E8:2A:22:09:45:BB:C3:82:55:95:10:2D:54
Authority key identifier: 3E:7A:5C:29:33:74:25:FA:81:39:55:51:72:6C:8C:2B:7E:4C:50:87
Certificate issuer: /CN=3e7a5c29337425fa81395551726c8c2b7e4c5087
Certificate serial: 019CABD9D01461B417523243B6ADB20B25A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnpcKTN0JfqBOVVRcmyMK35MUIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/67b254-56f4-4e89-a99d-caa329181964/1/PnpcKTN0JfqBOVVRcmyMK35MUIc.mft
Manifest number: 058E
Signing time: Mon 02 Mar 2026 00:01:44 +0000
Manifest this update: Mon 02 Mar 2026 00:01:44 +0000
Manifest next update: Tue 03 Mar 2026 00:01:44 +0000
Files and hashes: 1: PnpcKTN0JfqBOVVRcmyMK35MUIc.crl (hash: 7OzjDnYpdb71Q0DHoLSmOBZcNBf8AW2XuNWpgClyOvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/67b254-56f4-4e89-a99d-caa329181964/1/PnpcKTN0JfqBOVVRcmyMK35MUIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/67b254-56f4-4e89-a99d-caa329181964/1/PnpcKTN0JfqBOVVRcmyMK35MUIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnpcKTN0JfqBOVVRcmyMK35MUIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:d0:14:61:b4:17:52:32:43:b6:ad:b2:0b:25:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e7a5c29337425fa81395551726c8c2b7e4c5087
Validity
Not Before: Mar 2 00:01:44 2026 GMT
Not After : Mar 3 00:01:44 2026 GMT
Subject: CN=eed3e44956734ae82a220945bbc3825595102d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2d:af:40:70:e6:38:83:6d:58:a4:9a:ce:4f:
14:f3:04:6c:b1:fb:37:b8:e9:6b:96:1b:0a:90:96:
86:0f:aa:9c:dd:51:eb:77:ce:50:e0:f9:96:70:b0:
07:b1:e0:6f:c7:d8:32:10:b6:7c:ba:77:0d:6a:d9:
f9:e7:b5:88:52:6d:a1:36:a4:34:f1:c1:eb:21:cb:
90:0a:eb:51:0f:65:71:37:68:e2:c5:c2:5a:c1:61:
09:5c:22:27:af:07:32:d3:72:1e:c7:30:27:c4:50:
97:91:25:10:1d:be:3b:a0:18:3f:5e:70:a2:61:be:
9d:b6:cf:0d:e6:a8:0e:34:65:d0:5c:58:e7:1c:54:
1c:a4:3f:8b:3f:cd:26:e0:fa:9e:00:0d:22:1b:47:
db:d1:2e:28:49:d2:85:4e:52:71:2f:9e:47:5d:a2:
06:71:55:b9:b8:d7:35:65:a2:f3:26:92:80:00:7d:
ac:c0:87:71:5b:c6:90:4d:95:11:31:bd:77:6c:30:
25:fd:d5:ff:32:0b:e7:70:16:be:97:0e:f4:15:a6:
3b:24:27:c4:05:e6:81:6e:bd:79:7d:ba:8f:5f:9c:
dd:18:05:aa:35:b6:02:e8:7e:e2:b4:be:3d:6b:da:
97:84:a6:de:8b:60:c0:83:67:b5:f0:37:6e:a6:d8:
60:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D3:E4:49:56:73:4A:E8:2A:22:09:45:BB:C3:82:55:95:10:2D:54
X509v3 Authority Key Identifier:
keyid:3E:7A:5C:29:33:74:25:FA:81:39:55:51:72:6C:8C:2B:7E:4C:50:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnpcKTN0JfqBOVVRcmyMK35MUIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/67b254-56f4-4e89-a99d-caa329181964/1/PnpcKTN0JfqBOVVRcmyMK35MUIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/67b254-56f4-4e89-a99d-caa329181964/1/PnpcKTN0JfqBOVVRcmyMK35MUIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c2:a1:32:08:5d:3f:ef:7c:54:8f:59:dc:ea:2e:94:af:b0:
be:76:4b:13:b9:ed:5d:db:02:2b:d8:c7:14:36:7a:7d:2c:31:
9c:3b:1e:a8:9d:64:e9:fb:d0:a3:9a:bf:06:3c:16:bd:b2:12:
24:81:66:1e:41:ed:00:dd:1a:4c:bf:b8:dd:ab:b8:da:a5:94:
85:48:75:87:b0:3e:38:94:f5:a4:10:06:54:af:1f:14:2f:a8:
e3:39:10:dc:02:05:73:c8:c3:64:5d:02:78:61:17:ef:7c:01:
cb:b1:f3:23:b9:df:1c:54:3b:9c:19:bd:e3:d8:bc:b1:7c:2f:
10:80:78:01:b4:e4:6d:ab:0f:ef:d6:e8:00:7f:04:c7:d6:9d:
1c:27:2c:8c:e8:a7:f2:b2:bd:b1:1f:53:92:12:aa:0e:8c:6b:
0e:c3:d4:31:d2:ce:c5:5b:22:fd:34:b3:5f:21:fc:58:61:38:
66:40:6b:6d:57:f8:b6:21:d9:8b:d8:e5:70:83:11:98:9c:06:
b1:98:13:4f:3b:31:f7:76:c9:02:df:3d:cf:89:ea:01:56:14:
cd:46:72:4b:c5:8f:a9:ba:5a:4c:db:68:73:28:08:66:75:50:
48:67:e8:db:d9:4f:f5:db:1c:ec:9c:09:40:f7:19:32:fd:5b:
a4:ed:16:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:50 2026 by rpki-client