Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/00a593-a382-4f66-a36a-ebce980324f0/1/PQh2wA4DdvdzPbJEMAEg0xQL290.mft
File: PQh2wA4DdvdzPbJEMAEg0xQL290.mft (raw, json)
Hash identifier: lyCH4Kst6iJ0vHnYJcO/9yXIdf0DPqMDprmooHfsl8s=
Subject key identifier: 1C:3C:CC:EB:5E:BC:FF:DB:E8:63:52:B8:12:67:53:AD:CE:AE:5F:59
Authority key identifier: 3D:08:76:C0:0E:03:76:F7:73:3D:B2:44:30:01:20:D3:14:0B:DB:DD
Certificate issuer: /CN=3d0876c00e0376f7733db244300120d3140bdbdd
Certificate serial: 01A0C067B156B44FBD6C29EC329837D2EA81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQh2wA4DdvdzPbJEMAEg0xQL290.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/00a593-a382-4f66-a36a-ebce980324f0/1/PQh2wA4DdvdzPbJEMAEg0xQL290.mft
Manifest number: 27
Signing time: Sun 20 Sep 2026 20:00:16 +0000
Manifest this update: Sun 20 Sep 2026 20:00:16 +0000
Manifest next update: Mon 21 Sep 2026 20:00:16 +0000
Files and hashes: 1: PQh2wA4DdvdzPbJEMAEg0xQL290.crl (hash: cxh1OxXY6vUYnKzNZ4qw5scLUiZZgaJsi+LS1Ar4IRU=)
2: nq9bgSbvA0TB3aKoI2LSbdxmVpY.roa (hash: pKofBy3cQfkluUFTKQ828uE/AR/hkHrzVvjmkrkzCnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/00a593-a382-4f66-a36a-ebce980324f0/1/PQh2wA4DdvdzPbJEMAEg0xQL290.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/00a593-a382-4f66-a36a-ebce980324f0/1/PQh2wA4DdvdzPbJEMAEg0xQL290.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQh2wA4DdvdzPbJEMAEg0xQL290.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 20:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:67:b1:56:b4:4f:bd:6c:29:ec:32:98:37:d2:ea:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0876c00e0376f7733db244300120d3140bdbdd
Validity
Not Before: Sep 20 20:00:16 2026 GMT
Not After : Sep 21 20:00:16 2026 GMT
Subject: CN=1c3ccceb5ebcffdbe86352b8126753adceae5f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2d:ad:7a:39:f2:3a:06:0e:1f:50:52:c4:98:
1f:d9:a0:4b:63:78:a7:09:92:7c:06:2a:89:a5:b5:
61:e3:8b:c7:df:d6:a3:ca:4d:09:bd:c1:d0:1b:d9:
2f:15:00:20:3a:91:26:66:c2:c5:18:ca:56:0a:56:
11:c8:06:d6:f7:5c:3d:58:ce:81:96:8b:ff:11:a3:
96:5f:c3:dd:d8:91:69:1c:7d:d2:33:0c:6b:6c:a5:
0e:51:2f:5d:48:b6:82:7d:c4:78:90:60:1c:8c:fa:
5c:d0:f2:27:c9:c9:6a:03:f4:c7:77:b1:91:08:6a:
06:21:f2:6e:61:3b:16:ca:bc:3e:52:b2:8b:49:1f:
e8:41:da:63:45:f5:24:88:12:6f:ee:9d:39:7e:58:
27:57:83:a3:15:94:8f:a9:d6:0c:8e:85:29:c2:13:
e4:d6:22:99:4e:35:26:e0:af:30:4f:72:3a:40:91:
12:45:37:9a:8b:d5:6b:70:59:b7:a7:6e:68:71:44:
e8:09:33:cb:74:30:5a:ce:33:80:8e:5c:8a:2d:a8:
e8:14:3c:fa:cf:d2:2a:fd:33:4b:d3:7e:76:cc:76:
d4:fb:4f:d1:ac:f8:99:74:a6:14:e9:55:90:3d:95:
e5:a5:f3:0a:f5:10:48:d6:28:9e:c6:d2:ca:3e:cc:
32:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3C:CC:EB:5E:BC:FF:DB:E8:63:52:B8:12:67:53:AD:CE:AE:5F:59
X509v3 Authority Key Identifier:
keyid:3D:08:76:C0:0E:03:76:F7:73:3D:B2:44:30:01:20:D3:14:0B:DB:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQh2wA4DdvdzPbJEMAEg0xQL290.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00a593-a382-4f66-a36a-ebce980324f0/1/PQh2wA4DdvdzPbJEMAEg0xQL290.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00a593-a382-4f66-a36a-ebce980324f0/1/PQh2wA4DdvdzPbJEMAEg0xQL290.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b0:f3:bc:eb:67:da:c6:ce:e4:87:08:97:c2:48:ee:65:00:
0b:32:ce:0c:6f:5e:ce:7c:58:e1:d0:de:68:96:71:74:ca:31:
53:71:0c:ed:ed:8c:63:5c:6e:f1:91:d5:7e:e3:a5:b3:1e:46:
24:fd:12:fb:ce:6d:65:b4:c9:5d:82:1c:b9:47:d1:78:51:d9:
62:f9:fa:45:81:09:be:b5:f9:06:d6:f6:be:30:4a:c4:a7:92:
ed:11:87:2b:fb:b2:2e:dc:98:e5:9d:78:4a:47:ea:75:b4:79:
e2:10:87:03:67:53:75:f8:36:c6:f4:17:06:ab:dc:2d:dc:68:
b8:fc:73:89:30:18:5b:dc:c8:bd:5e:8c:2b:ee:59:4d:be:96:
16:e0:85:71:5b:5b:2e:61:70:74:5f:5b:4a:ae:b6:05:f7:a2:
6a:57:bf:3c:c7:34:03:81:51:99:b7:aa:71:12:d7:b5:a6:73:
03:2e:b3:fb:d4:b0:23:44:5a:e1:7e:c7:e7:37:b9:4b:75:dd:
c5:e0:ca:c2:de:e7:65:a1:78:d7:5b:7a:99:1b:4d:ba:3b:6d:
66:31:34:27:79:cc:94:57:70:55:e9:16:5d:42:c5:7e:27:73:
0c:92:f2:d0:93:77:47:b1:9f:6b:30:c4:ed:66:1e:9f:c5:5d:
56:4c:c2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:10:40 2026 by rpki-client