Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft
File: PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft (raw, json)
Hash identifier: v0tM89Tvy49QPdQ7VhkYwZnj6CV2gHrOH2sRQpsbLJE=
Subject key identifier: D3:C7:20:56:4D:64:DB:B8:5E:C0:45:50:FF:B5:71:67:DD:CA:E0:AB
Authority key identifier: 3C:48:B9:2E:80:94:D7:78:02:17:E3:25:4C:59:72:0B:C2:A9:76:38
Certificate issuer: /CN=3c48b92e8094d7780217e3254c59720bc2a97638
Certificate serial: 019DA453BBE344030FD15B2F737D9D894AA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEi5LoCU13gCF-MlTFlyC8Kpdjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft
Manifest number: 01E0
Signing time: Sun 19 Apr 2026 06:00:44 +0000
Manifest this update: Sun 19 Apr 2026 06:00:44 +0000
Manifest next update: Mon 20 Apr 2026 06:00:44 +0000
Files and hashes: 1: PEi5LoCU13gCF-MlTFlyC8Kpdjg.crl (hash: L4ABE5L/9TYNpMnAscrCx8VAS3cFblTGdYvX6I3EFrc=)
2: Xu6LJ5NwOjulzYk7ThddVSSoUcw.roa (hash: lwbMkRX85sGp49MdbyhTOstP4KWwGOTsiskzrGm1TQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEi5LoCU13gCF-MlTFlyC8Kpdjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:bb:e3:44:03:0f:d1:5b:2f:73:7d:9d:89:4a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c48b92e8094d7780217e3254c59720bc2a97638
Validity
Not Before: Apr 19 06:00:44 2026 GMT
Not After : Apr 20 06:00:44 2026 GMT
Subject: CN=d3c720564d64dbb85ec04550ffb57167ddcae0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e8:ba:37:5b:84:a2:56:cc:b2:7a:a5:98:89:
fc:55:ae:ed:c7:6c:39:22:d9:0a:3d:7e:e3:67:f4:
33:b1:ef:69:e4:ba:44:4b:ed:e3:47:13:a3:62:0c:
80:61:88:f9:2b:4e:4f:1e:1a:f1:fd:c5:04:61:2a:
73:e1:59:e2:e5:8b:d5:cd:b1:2e:e3:73:10:9c:e6:
72:be:2e:77:65:8b:01:a5:13:cf:f7:a7:97:70:b2:
96:6f:11:77:43:c1:f6:e7:95:02:b3:60:34:f4:c0:
1f:a6:1b:4f:23:1c:60:a3:f4:90:ea:cc:06:a7:af:
b5:3e:5c:26:7b:31:ee:6b:db:bc:b7:39:c8:46:cb:
5b:60:4f:f8:ca:a9:ea:1c:30:73:6b:59:3a:07:df:
a4:db:9a:46:11:c7:1d:fe:a6:c5:d3:dc:25:c8:4e:
b5:f5:d5:ca:ae:26:0b:4e:17:6c:d5:59:c7:39:a8:
96:c8:28:14:5e:54:93:35:3c:fe:d3:4c:53:75:82:
c9:cd:2e:db:e4:83:f3:de:42:c8:86:f1:8a:59:5e:
73:b2:70:63:17:5c:61:34:22:20:3a:6d:73:6d:9d:
d7:44:73:16:a1:b7:cf:f0:c7:ce:12:47:78:43:bd:
8e:32:3f:2b:ef:a8:05:30:84:c9:4c:6b:ae:30:42:
ea:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C7:20:56:4D:64:DB:B8:5E:C0:45:50:FF:B5:71:67:DD:CA:E0:AB
X509v3 Authority Key Identifier:
keyid:3C:48:B9:2E:80:94:D7:78:02:17:E3:25:4C:59:72:0B:C2:A9:76:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEi5LoCU13gCF-MlTFlyC8Kpdjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:7e:9f:b3:69:2d:fc:83:b3:3b:0e:d7:8d:b2:6b:02:aa:10:
29:8d:29:d9:2c:c9:42:1c:8e:57:f6:63:ac:38:bb:4d:db:b5:
54:e3:70:51:58:7f:a7:c7:25:1a:93:1c:26:80:77:19:26:d0:
9d:a0:b4:f5:b3:bf:5d:ef:b5:93:1f:e3:bf:50:b7:5b:09:ec:
6f:c9:ed:8f:3c:8d:2a:b8:cb:9f:94:71:bb:fb:a9:03:98:4e:
97:97:81:b4:43:d7:51:c4:51:3f:ec:ba:72:5b:00:08:2f:1a:
d8:11:e8:97:90:28:5f:e7:d9:fe:98:63:ee:60:62:65:34:69:
cf:2a:30:2b:65:de:9b:95:4a:e6:17:bb:46:f1:71:7f:f9:a7:
ff:29:52:cc:a6:8a:12:bc:8f:5a:25:dd:88:72:7f:49:bc:74:
bf:3b:d7:85:41:31:30:07:6c:7e:2e:e7:1f:bf:c0:1e:13:66:
8f:62:0e:88:2a:82:08:fc:28:92:00:ff:2d:c1:32:64:f3:c7:
0c:91:f8:0c:75:be:90:f9:c7:81:d7:af:b4:fb:65:61:ee:29:
0f:a0:e9:ad:83:40:2d:14:dd:73:00:f2:ea:aa:91:00:93:a6:
57:f6:d3:65:3d:a3:ce:e7:a6:b5:e4:dc:3e:0d:8a:96:f6:85:
0c:26:39:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 17:24:54 2026 by rpki-client