Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
File: PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft (raw, json)
Hash identifier: Ve8JxqQDgz/rh0CJRKEzn8iS1j8dXrjoYKgLSl5GFTg=
Subject key identifier: 3C:42:22:3D:F3:ED:4E:CD:88:54:55:C0:D5:DD:0E:24:0C:39:D2:7E
Authority key identifier: 3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44
Certificate issuer: /CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44
Certificate serial: 019D273B04EBC5D9C4B34B68DE08117ABE8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
Manifest number: 01C2
Signing time: Wed 25 Mar 2026 23:01:12 +0000
Manifest this update: Wed 25 Mar 2026 23:01:12 +0000
Manifest next update: Thu 26 Mar 2026 23:01:12 +0000
Files and hashes: 1: AjOeFVcLciinUkSYuM-ivopf7bY.roa (hash: dujHfSK3JJ1Up1sejLmok+P4uElPn9XkqC3TePll1TY=)
2: PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl (hash: ABUYVBj61BxScgBAc4d+JRbJ/nw8uMnSMClBseBKWLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:04:eb:c5:d9:c4:b3:4b:68:de:08:11:7a:be:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44
Validity
Not Before: Mar 25 23:01:12 2026 GMT
Not After : Mar 26 23:01:12 2026 GMT
Subject: CN=3c42223df3ed4ecd885455c0d5dd0e240c39d27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a4:5e:bc:92:1e:28:6c:da:39:1a:33:82:52:
06:23:a0:3c:99:7c:ad:dd:b8:a9:8b:71:ca:c6:e4:
0a:ca:be:19:41:2d:8f:f2:51:c0:bd:c3:ce:ea:97:
88:6d:1e:d4:8b:31:d0:d4:34:15:be:f5:d8:5e:0d:
b1:e8:c0:b1:f3:59:2d:be:1d:4b:ae:d9:2f:18:05:
87:09:ac:63:2d:03:a7:54:1f:f1:e2:9e:79:d3:51:
0c:02:56:f7:4f:33:91:55:ec:51:c7:e6:9a:21:50:
08:a1:44:75:9b:3e:cc:bf:ef:bb:d9:3e:65:2c:66:
d1:01:a4:93:e1:2b:00:af:d4:49:0c:c3:21:2f:a7:
09:7d:55:87:d6:0a:e3:45:fe:9c:ee:92:06:dc:2c:
5c:7c:92:72:76:db:6f:33:f9:cc:18:c9:ea:63:c2:
79:ca:df:8e:b2:bb:0c:83:ef:1d:ad:de:70:55:70:
85:38:51:38:38:67:63:35:9d:f6:bd:fa:3a:1a:71:
d9:dd:48:df:84:fb:36:02:b2:83:12:65:2c:1e:06:
70:83:65:af:a5:39:88:de:41:a9:a1:cf:a8:30:0f:
0d:52:22:91:64:be:26:91:97:ae:87:81:20:8e:59:
8e:f4:a5:f5:25:54:11:9a:71:48:fa:82:28:76:55:
a7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:42:22:3D:F3:ED:4E:CD:88:54:55:C0:D5:DD:0E:24:0C:39:D2:7E
X509v3 Authority Key Identifier:
keyid:3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:b8:fb:0a:e6:07:f9:38:37:b9:44:09:78:38:3e:de:12:c9:
95:66:27:7f:c9:79:9d:2a:3d:aa:8b:4d:33:4c:a9:eb:a1:d7:
b2:1c:04:ec:3f:e5:66:76:f7:24:74:8c:35:79:e6:dc:af:d7:
9d:c9:d1:24:71:f0:48:8c:a2:a6:d8:5d:f0:b3:83:bb:03:d3:
9e:92:d0:e0:a6:99:d9:a6:b6:02:e8:db:5f:39:61:da:ab:96:
12:13:0c:df:40:52:3d:78:10:3a:40:23:fc:62:1a:b6:68:41:
27:ea:ac:f3:4a:e7:50:cb:f2:05:c1:01:5d:a4:c9:bc:f9:16:
27:58:87:12:00:93:d7:3f:00:77:19:c7:af:14:2a:da:30:0d:
19:f0:19:82:1d:dc:3a:03:d8:67:9a:5e:56:bf:84:0f:4c:07:
ad:b4:1c:c5:02:4d:2e:48:f7:52:3b:47:5c:f1:66:8a:3a:3e:
30:ac:3f:d4:bc:c1:b0:45:11:c8:53:f2:c1:2e:1b:0c:94:e8:
f7:35:ad:a2:87:7e:90:8e:66:fc:fd:81:02:c9:e3:24:bb:4d:
48:ca:e6:81:1b:e8:22:4c:ee:34:ce:96:79:eb:3f:c6:5d:0b:
9d:ac:3b:24:20:df:34:24:b0:73:a3:5b:2a:0f:ac:3b:73:4e:
b2:e1:82:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:02 2026 by rpki-client