Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/67b254-56f4-4e89-a99d-caa329181964/1/PnpcKTN0JfqBOVVRcmyMK35MUIc.mft
File: PnpcKTN0JfqBOVVRcmyMK35MUIc.mft (raw, json)
Hash identifier: hSxQAO1O9aYnYP/ILYCmZlOeja3uMTDOajdtKoQzxLU=
Subject key identifier: 6B:35:F5:42:5D:27:4F:DE:C6:AD:19:7E:25:CE:03:2A:B7:9B:BC:AC
Authority key identifier: 3E:7A:5C:29:33:74:25:FA:81:39:55:51:72:6C:8C:2B:7E:4C:50:87
Certificate issuer: /CN=3e7a5c29337425fa81395551726c8c2b7e4c5087
Certificate serial: 019D99629FB77F5FED08FB372B4F1CF1684A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnpcKTN0JfqBOVVRcmyMK35MUIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/67b254-56f4-4e89-a99d-caa329181964/1/PnpcKTN0JfqBOVVRcmyMK35MUIc.mft
Manifest number: 0609
Signing time: Fri 17 Apr 2026 03:01:10 +0000
Manifest this update: Fri 17 Apr 2026 03:01:10 +0000
Manifest next update: Sat 18 Apr 2026 03:01:10 +0000
Files and hashes: 1: PnpcKTN0JfqBOVVRcmyMK35MUIc.crl (hash: EznLEZPpThk4OSJhybOKt2BaxUg1Z5eydlHkTmB+2rU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/67b254-56f4-4e89-a99d-caa329181964/1/PnpcKTN0JfqBOVVRcmyMK35MUIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/67b254-56f4-4e89-a99d-caa329181964/1/PnpcKTN0JfqBOVVRcmyMK35MUIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnpcKTN0JfqBOVVRcmyMK35MUIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:9f:b7:7f:5f:ed:08:fb:37:2b:4f:1c:f1:68:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e7a5c29337425fa81395551726c8c2b7e4c5087
Validity
Not Before: Apr 17 03:01:10 2026 GMT
Not After : Apr 18 03:01:10 2026 GMT
Subject: CN=6b35f5425d274fdec6ad197e25ce032ab79bbcac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bc:58:49:81:52:24:e0:93:59:dd:1d:9f:5f:
a0:68:b6:ee:d0:85:6e:83:df:9a:25:c2:31:22:0a:
5b:f6:2c:52:7e:d7:5e:d5:65:cd:4d:9b:c5:d2:80:
e4:c3:21:4e:56:08:11:a8:79:3b:01:22:48:5e:6b:
9f:5d:ec:68:eb:e0:db:52:34:87:fb:61:b3:c5:57:
84:b2:b9:ea:07:fe:1b:37:0e:09:98:45:6a:ed:4e:
ac:49:d0:7e:83:8c:0c:e7:eb:9f:cb:bf:f4:57:20:
03:5b:59:35:c5:0f:cc:1e:56:61:ac:2e:9d:c0:8a:
c0:d1:4e:9a:b4:79:a7:9a:9c:32:15:44:fe:34:f8:
2c:12:73:12:5d:f6:8a:b0:96:19:ef:67:03:1f:2e:
36:f4:d4:07:b1:82:52:ea:3b:40:00:8a:f1:64:d6:
17:37:72:ad:71:3a:e6:ab:0b:93:0f:b2:c2:c8:6f:
76:53:a6:3a:67:ef:90:b1:fe:66:34:8a:0e:94:55:
27:22:84:87:25:a4:07:94:0e:c8:7d:46:8e:12:02:
23:97:d3:05:d0:cc:9f:60:96:c1:a7:6c:bf:61:76:
51:04:65:8e:b5:b5:08:29:f4:35:62:ac:54:25:3a:
60:58:a9:59:88:f3:86:94:1c:ed:bb:89:06:8d:76:
41:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:35:F5:42:5D:27:4F:DE:C6:AD:19:7E:25:CE:03:2A:B7:9B:BC:AC
X509v3 Authority Key Identifier:
keyid:3E:7A:5C:29:33:74:25:FA:81:39:55:51:72:6C:8C:2B:7E:4C:50:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnpcKTN0JfqBOVVRcmyMK35MUIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/67b254-56f4-4e89-a99d-caa329181964/1/PnpcKTN0JfqBOVVRcmyMK35MUIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/67b254-56f4-4e89-a99d-caa329181964/1/PnpcKTN0JfqBOVVRcmyMK35MUIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:65:89:62:0d:3a:ee:46:7c:fc:2f:d4:6a:68:9f:ee:95:fb:
97:b8:3e:53:d6:ef:80:a7:ee:46:82:ef:25:8a:9a:dd:7a:d2:
9c:87:e6:91:bc:0e:a4:5f:40:f7:f5:00:bd:73:98:1a:04:a7:
86:c2:90:4c:52:43:ee:e0:32:f5:32:be:2e:76:fb:91:61:69:
29:e9:bc:58:96:13:ed:02:32:ff:4f:0b:f8:0e:11:b0:43:07:
3c:7e:48:6c:3b:1c:e3:4f:59:19:84:0c:e8:83:de:bb:57:70:
8d:9f:1c:7a:16:23:09:5f:df:67:c6:37:1f:7f:a0:e4:9a:9d:
dd:79:fe:76:a9:5e:0b:06:65:eb:47:1a:06:af:13:83:25:c5:
ab:4a:7e:2b:2b:d1:f2:b5:f0:70:3a:1f:7a:9f:66:9f:c5:ab:
4a:9f:7a:5b:0d:44:e3:18:dd:17:26:9a:b4:a7:a3:5f:c3:87:
af:fb:15:0d:4e:85:8a:fc:b5:07:ad:c2:9d:3d:69:1a:a6:83:
e3:ec:de:fd:2e:81:cd:7e:31:1b:3b:ba:04:83:88:72:36:e8:
c9:89:ec:6c:f7:ea:3e:96:56:29:a1:d6:2c:f0:5e:1c:35:f0:
a1:ed:88:a9:e8:9d:59:cf:97:cc:2d:c3:da:e4:18:8a:6d:2e:
19:7f:1a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:32:44 2026 by rpki-client