Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
File: Pc9PDCdz75iQD5w1kHXMph0XwLM.mft (raw, json)
Hash identifier: dpnejW9INUAEiIiJ5BjYFHIzOqFDoVFpYVblKfBno9w=
Subject key identifier: 9C:D1:CF:35:09:B6:B6:EF:70:AA:0B:8D:2E:CB:D5:12:C6:57:60:D7
Authority key identifier: 3D:CF:4F:0C:27:73:EF:98:90:0F:9C:35:90:75:CC:A6:1D:17:C0:B3
Certificate issuer: /CN=3dcf4f0c2773ef98900f9c359075cca61d17c0b3
Certificate serial: 019D25F17E719C82A7CB5190936314CC8CF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
Manifest number: 1881
Signing time: Wed 25 Mar 2026 17:01:16 +0000
Manifest this update: Wed 25 Mar 2026 17:01:16 +0000
Manifest next update: Thu 26 Mar 2026 17:01:16 +0000
Files and hashes: 1: Pc9PDCdz75iQD5w1kHXMph0XwLM.crl (hash: P5leTghzmq5g7/GI/mR4SShaTZILgrTBR8nbFScvA40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:7e:71:9c:82:a7:cb:51:90:93:63:14:cc:8c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dcf4f0c2773ef98900f9c359075cca61d17c0b3
Validity
Not Before: Mar 25 17:01:16 2026 GMT
Not After : Mar 26 17:01:16 2026 GMT
Subject: CN=9cd1cf3509b6b6ef70aa0b8d2ecbd512c65760d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:18:83:09:b3:60:c2:6d:e3:7f:ed:96:9f:fc:
68:cb:bc:22:cb:08:3d:92:45:f2:d4:0d:f0:cd:0b:
a5:c2:95:cf:d9:3c:df:f7:75:2b:9a:14:d0:bb:ab:
8b:3e:43:18:bb:de:dd:e3:77:96:f9:5e:58:59:e7:
68:1c:1b:38:62:2d:03:c4:92:75:26:3c:41:9a:28:
64:9b:da:7e:72:fb:90:89:22:a7:89:bf:ce:8b:ae:
b7:5a:85:05:fc:20:bd:d3:f0:e4:20:7c:64:5c:aa:
81:47:d5:2a:91:ff:e1:15:15:33:2d:72:39:25:fb:
e9:65:3d:c0:b2:b5:74:cc:63:e7:dc:4f:7d:0f:60:
cc:37:16:c4:13:96:cf:41:1a:3c:63:34:15:04:67:
6a:b7:7b:50:82:b9:02:b2:03:48:3b:17:23:5e:94:
ed:d6:64:0a:23:a4:03:c2:6d:35:b4:83:67:ad:06:
7a:5e:4f:e0:c0:3e:6e:c9:c8:79:66:87:23:bf:2f:
c6:0f:71:5c:b9:41:98:21:c6:27:a1:49:f9:33:15:
f3:85:17:15:2c:80:dd:c6:22:45:26:dc:04:72:67:
4c:ae:03:49:7f:9c:ae:85:73:37:82:92:8a:92:0c:
fa:d9:7f:29:a4:4e:85:1b:01:7a:7b:18:91:47:fd:
4c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D1:CF:35:09:B6:B6:EF:70:AA:0B:8D:2E:CB:D5:12:C6:57:60:D7
X509v3 Authority Key Identifier:
keyid:3D:CF:4F:0C:27:73:EF:98:90:0F:9C:35:90:75:CC:A6:1D:17:C0:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:39:86:8b:e6:c0:a8:70:07:9a:03:a9:72:e4:91:14:73:3d:
f3:9b:72:27:b6:10:55:e1:c1:64:9c:52:c1:31:d1:7f:6c:e2:
fb:7d:4b:a5:f0:ef:2d:45:e9:cc:07:a7:76:2d:63:03:0d:1a:
f0:65:39:ce:f8:6b:19:46:99:7c:d7:e7:89:d7:89:92:3a:c3:
01:15:d0:17:ce:4d:05:04:29:08:f2:72:9f:d5:83:fe:8b:6c:
f1:41:c0:17:16:d4:06:b4:e1:ac:2e:a7:a0:00:3d:aa:5f:0c:
57:ff:6b:da:d8:e3:fb:0c:e6:75:aa:eb:03:e0:32:84:1a:9d:
cc:13:8e:e4:a7:1c:9f:ac:0e:76:1d:65:ed:c7:16:02:82:c3:
4a:82:3a:1f:1f:20:34:1b:39:9a:c4:bc:0f:8c:33:9c:27:c8:
ea:7d:cb:18:0e:33:6c:13:fa:f8:78:f5:8a:ad:a5:b4:c8:3b:
88:e0:f2:c7:0f:2b:76:d1:e5:fb:55:b2:c3:5f:30:d2:21:14:
4e:50:62:e3:26:cf:00:e7:cb:16:a1:cc:e6:47:c8:c7:48:e0:
e1:76:2b:19:73:e2:ed:86:ff:05:bd:ca:ff:06:b1:ae:80:9d:
e2:c5:2d:ba:6e:16:4b:41:b0:a6:00:39:12:24:60:55:63:56:
a3:c6:76:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8X5xnIKny1GQk2MUzIzyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkY2Y0ZjBjMjc3M2VmOTg5MDBmOWMzNTkwNzVjY2E2MWQx
N2MwYjMwHhcNMjYwMzI1MTcwMTE2WhcNMjYwMzI2MTcwMTE2WjAzMTEwLwYDVQQD
Eyg5Y2QxY2YzNTA5YjZiNmVmNzBhYTBiOGQyZWNiZDUxMmM2NTc2MGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBiDCbNgwm3jf+2Wn/xoy7wiywg9
kkXy1A3wzQulwpXP2Tzf93UrmhTQu6uLPkMYu97d43eW+V5YWedoHBs4Yi0DxJJ1
JjxBmihkm9p+cvuQiSKnib/Oi663WoUF/CC90/DkIHxkXKqBR9Uqkf/hFRUzLXI5
JfvpZT3AsrV0zGPn3E99D2DMNxbEE5bPQRo8YzQVBGdqt3tQgrkCsgNIOxcjXpTt
1mQKI6QDwm01tINnrQZ6Xk/gwD5uych5Zocjvy/GD3FcuUGYIcYnoUn5MxXzhRcV
LIDdxiJFJtwEcmdMrgNJf5yuhXM3gpKKkgz62X8ppE6FGwF6exiRR/1MCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzRzzUJtrbvcKoLjS7L1RLGV2DXMB8GA1UdIwQY
MBaAFD3PTwwnc++YkA+cNZB1zKYdF8CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGM5UERDZHo3NWlRRDV3MWtIWE1waDBYd0xNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wOTgxNzItYzk4YS00OGZjLWFmYzYt
M2JkZTczOTZiN2I0LzEvUGM5UERDZHo3NWlRRDV3MWtIWE1waDBYd0xNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8wOTgxNzItYzk4YS00OGZjLWFmYzYtM2JkZTczOTZiN2I0
LzEvUGM5UERDZHo3NWlRRDV3MWtIWE1waDBYd0xNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXTmGi+bA
qHAHmgOpcuSRFHM985tyJ7YQVeHBZJxSwTHRf2zi+31LpfDvLUXpzAendi1jAw0a
8GU5zvhrGUaZfNfnideJkjrDARXQF85NBQQpCPJyn9WD/ots8UHAFxbUBrThrC6n
oAA9ql8MV/9r2tjj+wzmdarrA+AyhBqdzBOO5Kccn6wOdh1l7ccWAoLDSoI6Hx8g
NBs5msS8D4wznCfI6n3LGA4zbBP6+Hj1iq2ltMg7iODyxw8rdtHl+1Wyw18w0iEU
TlBi4ybPAOfLFqHM5kfIx0jg4XYrGXPi7Yb/Bb3K/waxroCd4sUtum4WS0GwpgA5
EiRgVWNWo8Z2YQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:35:08 2026 by rpki-client