Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft
File: PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft (raw, json)
Hash identifier: KaryD94ikGiz0Tv5vJcYq6W8+j8EY58+ibFDfbHmDgM=
Subject key identifier: 30:D6:25:DC:36:6D:0B:DD:22:A7:A7:74:73:81:50:AC:C2:23:69:7B
Authority key identifier: 3C:48:B9:2E:80:94:D7:78:02:17:E3:25:4C:59:72:0B:C2:A9:76:38
Certificate issuer: /CN=3c48b92e8094d7780217e3254c59720bc2a97638
Certificate serial: 019CA945C9386D736F33CCF1F8C9B427C289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEi5LoCU13gCF-MlTFlyC8Kpdjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft
Manifest number: 015E
Signing time: Sun 01 Mar 2026 12:00:48 +0000
Manifest this update: Sun 01 Mar 2026 12:00:48 +0000
Manifest next update: Mon 02 Mar 2026 12:00:48 +0000
Files and hashes: 1: PEi5LoCU13gCF-MlTFlyC8Kpdjg.crl (hash: FI0TtZBvNNbwIJgclBdtm76zLeoSmrPfVUUjvTqxfr8=)
2: Xu6LJ5NwOjulzYk7ThddVSSoUcw.roa (hash: lwbMkRX85sGp49MdbyhTOstP4KWwGOTsiskzrGm1TQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEi5LoCU13gCF-MlTFlyC8Kpdjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:c9:38:6d:73:6f:33:cc:f1:f8:c9:b4:27:c2:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c48b92e8094d7780217e3254c59720bc2a97638
Validity
Not Before: Mar 1 12:00:48 2026 GMT
Not After : Mar 2 12:00:48 2026 GMT
Subject: CN=30d625dc366d0bdd22a7a774738150acc223697b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bf:01:14:a9:03:b2:e5:54:35:7d:d3:bb:87:
76:a1:77:c8:f3:de:54:54:5f:24:ee:45:bf:9b:cd:
ab:f0:a3:54:2f:4f:12:8a:84:85:7c:dd:25:4d:27:
b9:28:e1:7a:69:1a:34:53:49:4a:95:83:6b:e2:b7:
23:cd:10:c7:91:d1:67:fc:9b:91:77:71:b3:a7:3e:
6b:f7:4e:8e:8e:92:66:c4:85:1b:bb:cc:7a:2b:43:
44:9d:7d:1c:68:97:89:a3:f2:ef:60:fb:9e:15:d0:
fd:dd:4a:28:6d:a0:49:5d:ec:3b:50:e2:2a:14:12:
48:78:e8:22:23:df:e7:14:e1:55:ba:01:ed:e8:19:
84:19:6b:16:6d:e6:f5:cb:8f:d4:d9:7a:3f:23:72:
14:83:db:3e:16:26:8c:29:5e:35:ae:e3:9e:c8:26:
8a:26:79:c4:5e:28:c4:23:62:5b:80:ee:2d:c1:68:
bc:d4:db:89:36:03:1b:1d:06:5e:f8:52:8e:33:5a:
f1:42:cd:4d:23:e6:f8:f5:9a:d6:15:17:bf:98:84:
e0:e2:4d:7b:a7:39:97:fb:8c:18:fc:a3:78:10:a4:
43:ea:6d:5a:54:bd:ab:12:3e:65:22:76:db:af:e8:
80:bc:ad:c6:c6:c6:9c:81:86:a8:9c:60:18:aa:3e:
ba:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D6:25:DC:36:6D:0B:DD:22:A7:A7:74:73:81:50:AC:C2:23:69:7B
X509v3 Authority Key Identifier:
keyid:3C:48:B9:2E:80:94:D7:78:02:17:E3:25:4C:59:72:0B:C2:A9:76:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEi5LoCU13gCF-MlTFlyC8Kpdjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:90:c8:6c:24:a9:69:c4:fb:cb:09:43:9e:d2:38:2f:43:52:
c0:f5:fb:3c:6f:1b:c1:99:7d:59:56:bf:94:40:91:45:80:d9:
e7:fa:b6:55:79:cc:3e:b3:62:60:d5:5a:26:97:68:70:1a:16:
0f:bc:48:ba:86:fb:e1:94:dc:eb:86:49:17:be:12:60:e2:21:
2a:bd:94:9e:76:27:88:09:57:b0:b9:67:11:d5:e3:b9:3e:44:
38:ea:94:b6:f6:26:66:8f:ac:14:1f:ab:57:7d:f8:eb:9a:93:
67:c5:5e:14:8f:46:86:5e:47:95:c8:91:7b:01:e6:45:0e:cd:
fe:c9:3c:27:e0:6b:b8:49:86:02:bf:a3:a6:b3:b5:92:06:bb:
5b:32:bf:5a:15:0f:ce:25:9d:1e:a0:58:97:73:dc:00:18:cd:
13:4e:36:7f:75:9c:2b:0c:b5:7b:38:93:be:01:9a:25:98:d5:
33:32:b7:fd:0b:ff:00:fc:f1:3a:ea:ea:fe:27:61:09:e4:f6:
4f:44:aa:f9:03:07:88:7a:f1:34:56:05:04:5d:78:33:2a:ab:
d8:12:41:c7:7d:22:2c:b9:2b:f3:ac:f6:fe:f3:44:f5:56:48:
9e:93:60:79:10:b6:30:cc:f8:73:91:be:bc:ce:f3:e0:cc:dd:
7c:85:39:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:12:29 2026 by rpki-client