Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
File: PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft (raw, json)
Hash identifier: nBE2EuKa7MXDxBPM0zmRC2C8YE9WjqhOMhDKzP7OPJc=
Subject key identifier: 0F:52:96:29:D8:5E:57:87:C6:47:01:19:19:24:25:00:68:41:6B:4C
Authority key identifier: 3C:CA:84:9B:37:50:15:F4:33:E9:A2:40:EC:AB:F0:3C:F1:52:C7:81
Certificate issuer: /CN=3cca849b375015f433e9a240ecabf03cf152c781
Certificate serial: 019CABA1F9EFF0F854D549387E25A191FA2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 23:00:45 +0000
Manifest this update: Sun 01 Mar 2026 23:00:45 +0000
Manifest next update: Mon 02 Mar 2026 23:00:45 +0000
Files and hashes: 1: PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl (hash: Y60Ji9PHmI73t1O98t8KjssdDTvsgpEtwzB+fugOJ9U=)
2: ZF9EAOYUL63fX_K72Oa83qsiY90.roa (hash: qJmN8WRTqe/THyiR/N1Q9A4OK8XBEhImcFksk6kb4Ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:f9:ef:f0:f8:54:d5:49:38:7e:25:a1:91:fa:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cca849b375015f433e9a240ecabf03cf152c781
Validity
Not Before: Mar 1 23:00:45 2026 GMT
Not After : Mar 2 23:00:45 2026 GMT
Subject: CN=0f529629d85e5787c64701191924250068416b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6c:f2:c8:7a:70:e2:1a:28:de:94:18:4a:72:
22:c7:73:a3:82:41:be:66:be:0a:2f:4c:9e:95:fe:
ad:b9:6b:56:f6:83:ec:6f:ac:db:fe:d9:85:e4:e2:
ff:da:5b:5b:7d:9a:fc:b8:73:94:58:ad:62:90:f2:
74:4d:aa:c0:0e:24:99:10:cb:c4:6e:bc:37:49:ee:
74:fb:8d:24:6d:62:cb:05:47:95:76:76:f3:3a:3f:
db:c4:18:79:0f:4d:2d:02:3d:49:ca:06:1b:4f:9e:
34:e5:92:63:c1:c1:e6:31:58:b6:dc:91:4f:d3:8d:
a4:42:e1:8c:d4:87:e8:71:52:4e:34:86:74:f3:d4:
01:04:0b:08:d7:99:54:bf:a8:6b:ed:a1:f8:5c:cf:
03:16:5e:7a:55:20:6d:df:f5:9f:90:e5:bf:27:c3:
42:c4:8c:63:bd:f4:55:1a:0e:a3:00:f6:2f:60:a9:
29:cd:d6:ae:ca:0b:1a:98:88:7a:7b:58:ea:03:91:
67:a2:21:1b:84:d0:5d:9a:e8:36:29:af:3d:cc:b9:
ec:40:c3:bf:3c:c3:bc:ef:76:b4:aa:2d:fd:a6:bb:
66:bf:16:f8:df:a3:b6:ce:db:51:ec:ed:ac:bc:84:
cb:14:48:c5:ef:38:7b:c4:c5:f7:93:45:9d:ea:c7:
15:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:52:96:29:D8:5E:57:87:C6:47:01:19:19:24:25:00:68:41:6B:4C
X509v3 Authority Key Identifier:
keyid:3C:CA:84:9B:37:50:15:F4:33:E9:A2:40:EC:AB:F0:3C:F1:52:C7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b1:0c:9c:92:24:af:55:94:5f:3d:37:4e:7f:c7:c0:e8:a9:
86:05:0e:11:77:fc:bd:ee:86:24:be:46:80:aa:cd:cf:fc:96:
b3:6e:44:95:0a:48:8f:57:1e:58:65:3d:d7:e7:a2:ad:7f:09:
05:a1:78:67:27:45:c3:25:85:d4:4c:d2:6a:1c:31:75:6f:72:
7b:23:fd:f1:28:cb:b5:fc:7a:b1:f7:57:e4:d7:e3:92:63:92:
e5:16:58:0c:4c:5e:87:79:ab:a0:2e:6e:a2:d2:5e:00:06:4c:
9b:3c:25:db:c9:b3:59:d5:27:9c:11:78:76:b0:24:b3:a2:3a:
57:1f:e0:3e:1d:5c:63:ba:31:ca:49:49:6b:9f:d8:4c:3e:28:
bd:48:71:c6:0a:8e:d3:98:fa:e0:8d:5a:af:f0:3e:a0:61:4e:
2b:4e:c5:5c:6c:fa:2d:aa:63:82:1e:ce:90:15:e1:ad:c3:ba:
15:cc:ee:9b:e9:b8:c1:2b:d2:2d:52:71:ab:bd:03:d5:c3:73:
ed:8a:c4:ff:08:3b:73:4a:52:af:f2:82:57:7a:03:15:ff:cf:
4d:af:9a:f9:03:c4:e4:bc:ae:5d:3c:1b:80:08:f5:d7:5d:6f:
61:45:3e:fb:62:22:92:ef:ef:17:58:8e:46:af:39:4f:6b:a8:
d2:4b:26:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:43 2026 by rpki-client