Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
File: PtQqBIdwVgYBXlow2h5w9Aflnpk.mft (raw, json)
Hash identifier: SjbPXIrmyuwr7GH63XPJJ9SJbZzX9nLHwYTC1ljZA0E=
Subject key identifier: F4:74:34:22:7B:C8:6E:3F:D3:58:83:D1:52:FD:E3:E1:3D:30:B7:EF
Authority key identifier: 3E:D4:2A:04:87:70:56:06:01:5E:5A:30:DA:1E:70:F4:07:E5:9E:99
Certificate issuer: /CN=3ed42a0487705606015e5a30da1e70f407e59e99
Certificate serial: 019D9A3EE6526C0A70BBEA6EC5E327D8B80F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 07:01:46 +0000
Manifest this update: Fri 17 Apr 2026 07:01:46 +0000
Manifest next update: Sat 18 Apr 2026 07:01:46 +0000
Files and hashes: 1: PtQqBIdwVgYBXlow2h5w9Aflnpk.crl (hash: +ITQjOq0bFIBA4HTaAEd+S8mgzRi1iQzJ2Wg1k7qpes=)
2: odBM4SC03fv9qvg4-_DkLC3ibmA.roa (hash: NMg6E7qAz0hV7HQf0d2bJZ/M9xt0HNBTnuvRtP4cu6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:e6:52:6c:0a:70:bb:ea:6e:c5:e3:27:d8:b8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ed42a0487705606015e5a30da1e70f407e59e99
Validity
Not Before: Apr 17 07:01:46 2026 GMT
Not After : Apr 18 07:01:46 2026 GMT
Subject: CN=f47434227bc86e3fd35883d152fde3e13d30b7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d3:9d:37:51:16:4e:94:1b:21:a7:47:0d:46:
e9:56:69:bd:20:55:49:6c:73:db:4d:66:cc:cc:98:
bb:b4:02:2a:fa:69:50:22:1e:ce:dc:9f:f6:e1:1d:
b1:59:95:fa:ad:e3:a8:07:a3:7a:a8:30:28:97:66:
a0:89:76:6d:d6:b8:bc:30:e8:75:b7:b3:92:82:a9:
14:62:0c:85:99:5d:14:06:84:fb:1f:b2:4e:3c:3d:
64:6e:19:44:c6:8d:f5:e3:38:df:6d:48:32:cc:29:
13:95:a7:b1:58:ad:2b:77:b7:56:16:5e:40:09:83:
65:29:9a:d4:73:2b:99:d0:1e:19:46:0e:7e:e2:a6:
c0:bd:80:74:65:92:d6:b3:4c:c1:9e:13:6e:41:35:
8a:e1:4e:80:48:0a:6a:44:a6:c7:09:85:18:fc:34:
48:77:de:b7:d5:b7:1a:44:1d:00:18:bb:be:0a:d3:
5e:61:41:75:f9:06:e9:22:5d:d2:d6:71:64:25:bc:
c9:6d:00:de:5b:9c:2e:bf:9c:12:09:0b:f8:64:de:
aa:b2:cf:70:ec:30:e3:09:45:23:df:88:6d:ad:0c:
d8:b8:ff:a1:b1:73:8b:72:97:cf:70:91:1a:c1:6a:
6b:2a:d0:11:da:ab:83:43:38:1d:16:d2:2a:35:f5:
fc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:74:34:22:7B:C8:6E:3F:D3:58:83:D1:52:FD:E3:E1:3D:30:B7:EF
X509v3 Authority Key Identifier:
keyid:3E:D4:2A:04:87:70:56:06:01:5E:5A:30:DA:1E:70:F4:07:E5:9E:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:04:6e:1f:ef:7f:0e:54:0c:60:4b:84:9d:2b:8f:e6:93:1c:
f1:29:fa:3c:04:ed:37:10:03:ec:58:4c:f3:d9:82:b0:77:89:
cc:da:4f:47:cf:bb:a5:27:d8:aa:48:6e:ae:bf:a9:95:da:53:
1b:03:b6:9b:60:83:d3:61:49:d7:ae:a8:ff:24:e5:94:c6:e0:
95:da:a6:3e:15:49:8b:93:b6:62:69:5d:20:cb:bd:8a:9b:9f:
0b:52:9f:c0:a0:4b:5d:3b:dd:da:0c:5e:76:56:01:b4:f8:74:
37:44:24:53:51:d8:16:29:95:f7:08:78:18:54:60:82:f2:04:
4b:38:ec:df:15:a5:56:8b:ab:35:4f:c5:d0:ab:62:1d:57:2d:
1a:a2:ea:11:ef:8f:ae:e6:eb:b8:b3:5b:e8:b2:0b:81:f9:81:
fb:10:2b:e8:c8:69:86:cb:5e:86:a7:91:c7:5d:e4:53:42:4c:
ba:35:38:dd:c8:61:f3:18:07:ba:5a:bc:87:7d:e8:ce:f5:1c:
e8:34:a8:7c:84:3e:8a:76:fc:a0:20:2d:ce:4b:10:0b:c5:fd:
9a:9c:e3:88:de:bc:9f:16:2b:f4:b6:76:53:d6:96:ea:e2:a9:
fb:ee:45:fe:37:2e:7b:77:29:68:25:06:a5:86:22:d3:56:ea:
d5:84:a6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:14:41 2026 by rpki-client