Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
File: PtQqBIdwVgYBXlow2h5w9Aflnpk.mft (raw, json)
Hash identifier: z6/0tNaRqV9Mh3tJzCSpYomO/wECU++OYrjZ5IpYqNM=
Subject key identifier: 76:1B:F5:98:FE:9B:58:A0:B2:65:1D:BE:15:8E:CD:98:B5:61:6A:D5
Authority key identifier: 3E:D4:2A:04:87:70:56:06:01:5E:5A:30:DA:1E:70:F4:07:E5:9E:99
Certificate issuer: /CN=3ed42a0487705606015e5a30da1e70f407e59e99
Certificate serial: 019CAAC63F1C9733E447EB658BDF4F9127B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 19:00:44 +0000
Manifest this update: Sun 01 Mar 2026 19:00:44 +0000
Manifest next update: Mon 02 Mar 2026 19:00:44 +0000
Files and hashes: 1: PtQqBIdwVgYBXlow2h5w9Aflnpk.crl (hash: QmXT6k/3ZfyZiccLPeg//kr5X+oFTnKW1+P2RY/yczA=)
2: odBM4SC03fv9qvg4-_DkLC3ibmA.roa (hash: NMg6E7qAz0hV7HQf0d2bJZ/M9xt0HNBTnuvRtP4cu6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:3f:1c:97:33:e4:47:eb:65:8b:df:4f:91:27:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ed42a0487705606015e5a30da1e70f407e59e99
Validity
Not Before: Mar 1 19:00:44 2026 GMT
Not After : Mar 2 19:00:44 2026 GMT
Subject: CN=761bf598fe9b58a0b2651dbe158ecd98b5616ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7c:eb:2a:6b:2d:0d:8a:ed:c1:af:2e:5e:9a:
6a:f5:e9:5c:23:0e:f1:6c:8e:fa:14:d4:ab:93:e1:
4e:b8:2e:cc:8d:e5:8f:cc:06:5a:62:ca:3c:6d:66:
20:3b:22:14:78:4c:32:70:cd:71:7f:d7:9c:9a:9b:
0e:8b:9f:c8:16:47:c9:68:a8:63:b9:8a:01:64:ce:
bd:e1:d5:dc:93:dd:b1:b3:3d:a7:28:9c:88:5f:dc:
c4:ae:c3:04:57:ab:dc:d7:b6:13:9e:32:fb:4a:e5:
3f:66:ce:48:ad:db:bb:ed:30:a0:b6:b4:90:b0:2e:
32:17:b4:f0:6e:43:dd:21:3e:e0:18:93:3c:40:8a:
cd:d8:4d:8f:83:1a:90:3c:f5:8e:b4:fd:14:32:64:
6f:db:d0:66:88:25:49:3f:ee:d6:68:cd:88:95:86:
9c:63:47:0b:91:17:4d:8a:95:b4:87:85:43:bc:db:
01:00:08:cf:6c:5b:15:c1:0d:83:47:f4:08:a4:d0:
fe:c6:cc:1d:3f:92:7d:4c:7a:36:33:2f:f9:96:6e:
cc:38:d5:6b:df:d2:40:f0:05:42:6d:57:90:6f:bd:
b9:de:be:6d:0d:8b:b0:46:67:96:01:ef:3a:ed:1d:
f7:fa:ce:14:99:d0:11:52:27:c8:a0:c6:69:e8:e8:
0c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1B:F5:98:FE:9B:58:A0:B2:65:1D:BE:15:8E:CD:98:B5:61:6A:D5
X509v3 Authority Key Identifier:
keyid:3E:D4:2A:04:87:70:56:06:01:5E:5A:30:DA:1E:70:F4:07:E5:9E:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:46:ae:d7:7c:1b:cc:f3:5f:fb:18:3e:3a:26:60:ff:78:92:
aa:31:80:b0:80:47:5b:f3:07:3a:e7:4f:20:e1:e6:d6:5a:e8:
9a:2d:87:4b:86:13:5c:92:f9:ec:93:bb:12:fe:39:ae:ac:23:
a8:6a:08:d8:32:9f:93:79:75:24:f3:b3:3d:6f:5a:dc:2f:43:
df:42:fa:4a:9b:49:cb:dd:88:1b:64:1e:6c:78:2d:a7:0b:fb:
b4:5d:b2:90:0e:09:f7:4c:0f:ba:6b:b5:fe:cb:94:4e:90:4e:
c8:02:7c:af:44:f1:4f:06:8d:67:b2:9f:5e:49:34:ea:42:65:
7e:c2:d9:69:56:31:76:8f:1e:88:59:4e:b8:68:6f:e3:1e:ab:
c3:22:c2:c8:de:fc:0c:69:e8:37:16:6e:70:76:29:17:59:cf:
96:e3:3a:7f:db:a5:78:23:44:bd:f6:ae:b0:0b:74:fb:e9:92:
55:10:70:27:0c:be:92:e1:c0:18:6b:0c:58:b1:df:d7:74:da:
21:82:ba:13:10:35:29:ab:47:88:1b:8f:ea:d1:28:1a:08:96:
b3:5f:24:64:28:b0:5d:17:ff:91:90:2a:4d:c9:eb:ce:98:25:
bc:3b:ed:90:c5:c5:b0:bd:26:00:a8:30:28:15:55:70:25:b3:
c9:f4:67:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:02:59 2026 by rpki-client