Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft
File: PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft (raw, json)
Hash identifier: OnvdKGovtZLqR7YIpjk8dhwKNgeGqm7p2FVFbMjYxsI=
Subject key identifier: 8A:29:9C:82:5C:D7:B0:F7:3D:51:68:8D:29:B8:A6:BD:26:FD:2D:2F
Authority key identifier: 3C:4E:E9:11:0B:85:FD:DE:3E:B6:E4:46:25:41:BA:BC:32:36:E8:BA
Certificate issuer: /CN=3c4ee9110b85fdde3eb6e4462541babc3236e8ba
Certificate serial: 019D273AE716872D7233B01D5B30A1510C2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7pEQuF_d4-tuRGJUG6vDI26Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft
Manifest number: 0FF8
Signing time: Wed 25 Mar 2026 23:01:04 +0000
Manifest this update: Wed 25 Mar 2026 23:01:04 +0000
Manifest next update: Thu 26 Mar 2026 23:01:04 +0000
Files and hashes: 1: PE7pEQuF_d4-tuRGJUG6vDI26Lo.crl (hash: 6RQ9hTv8L9aPkTx3HmTuL9O5kRX49SbrtR/arnaPDw8=)
2: R92c8_GawIo0zWCVe3KEMHOfXwg.roa (hash: 85SuJiAaE3EW56KnlIdwUAzGkX32KcSjQ5U5FCiJonM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PE7pEQuF_d4-tuRGJUG6vDI26Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:e7:16:87:2d:72:33:b0:1d:5b:30:a1:51:0c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ee9110b85fdde3eb6e4462541babc3236e8ba
Validity
Not Before: Mar 25 23:01:04 2026 GMT
Not After : Mar 26 23:01:04 2026 GMT
Subject: CN=8a299c825cd7b0f73d51688d29b8a6bd26fd2d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:86:b7:67:15:b0:92:84:5a:9d:ed:2d:5d:4d:
b1:9f:7a:e6:3c:7f:35:8e:dd:e2:9a:c0:a1:ff:1d:
b0:d7:03:0c:ea:63:50:b0:4e:c2:5f:af:82:b1:46:
a4:24:9a:b9:1f:2a:1d:3b:43:cc:3b:48:6c:05:de:
da:55:60:0c:a8:29:a3:90:a5:f0:21:f4:3d:74:f0:
45:5f:cc:b9:ae:1f:fd:0f:77:d0:df:ee:08:1c:b6:
8a:cb:4f:a9:ed:e8:f8:15:f7:ab:61:14:9e:49:bb:
d4:0a:8b:9c:55:01:1c:2c:d8:ff:3a:db:33:79:49:
19:fb:01:1e:fd:91:67:78:82:a5:96:d0:6e:be:0c:
9a:55:79:7b:ba:ca:9f:cb:5f:b4:f5:d7:29:0b:4c:
b4:44:d7:10:9f:fc:24:30:fa:63:c2:be:02:df:76:
e4:ff:ca:b3:1e:81:f9:05:d5:f1:80:55:40:1c:27:
76:19:82:72:e9:e1:13:24:23:ae:19:cd:ea:f3:0e:
ea:60:4a:bb:14:18:5c:91:09:ee:17:0e:a1:35:a7:
cf:14:33:a0:a9:bd:4d:52:8d:80:d2:a3:28:f7:76:
01:88:ef:e5:3f:b5:d9:5b:11:c2:5b:d8:05:9b:ea:
1a:2a:7e:e1:eb:4c:8b:5d:c7:3c:46:e4:ed:da:15:
5e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:29:9C:82:5C:D7:B0:F7:3D:51:68:8D:29:B8:A6:BD:26:FD:2D:2F
X509v3 Authority Key Identifier:
keyid:3C:4E:E9:11:0B:85:FD:DE:3E:B6:E4:46:25:41:BA:BC:32:36:E8:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7pEQuF_d4-tuRGJUG6vDI26Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:fd:72:e8:b1:3d:3e:ec:5a:d5:e0:b5:f5:df:93:97:c2:54:
99:ee:9c:c1:dd:2b:0d:24:96:cf:44:5f:20:55:68:27:9f:1d:
14:bb:0f:cc:90:ce:7f:33:96:ea:ab:77:3a:b0:45:0c:61:f9:
df:84:4a:4e:24:5c:a3:ea:20:58:54:e0:67:2c:54:bf:25:e3:
c9:e6:ad:9f:1b:8a:d0:e0:e2:9f:74:6c:15:5e:45:0a:21:3e:
d0:2a:0c:3e:a4:82:bb:ce:a8:43:30:ce:ca:46:2d:e5:ee:02:
82:5d:f5:5d:72:e8:57:4c:d9:c8:e8:3c:d4:43:5a:49:d9:0a:
6e:6c:6f:ea:17:b4:de:7c:cf:b1:c1:6f:5f:9f:28:d0:5a:12:
b2:24:fe:c3:5b:67:6e:45:36:12:32:ee:f9:b2:d2:81:d2:95:
43:b2:f1:48:83:38:49:71:03:dd:aa:2d:ba:05:79:64:7d:15:
a8:d7:f1:94:9f:d5:39:38:b0:53:e1:9b:63:4b:f7:45:85:63:
fa:0a:0b:01:85:56:92:37:33:c8:c1:12:60:1f:8b:4c:2d:93:
e0:33:ef:e1:86:1e:b9:d4:10:7c:4c:b2:cc:23:ee:aa:68:78:
a8:8b:c0:af:43:96:4a:94:5d:06:5e:c3:3c:b4:f2:4c:d3:60:
59:67:08:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:26:11 2026 by rpki-client