Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
File: pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft (raw, json)
Hash identifier: H5UFZa0VfJKx+PtPnMErREHKW23ZEH8xmVyVkCldTwg=
Subject key identifier: 96:38:C8:14:73:0F:D6:6A:2D:86:D2:A9:AB:71:D1:8E:D3:8D:C3:9E
Authority key identifier: A5:C2:28:64:E3:92:0E:16:0A:D9:B8:4F:F0:1D:A8:66:AA:40:97:85
Certificate issuer: /CN=a5c22864e3920e160ad9b84ff01da866aa409785
Certificate serial: 019D29CDB4E3DD27A80555DA62FEF8846EAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
Manifest number: 075B
Signing time: Thu 26 Mar 2026 11:00:40 +0000
Manifest this update: Thu 26 Mar 2026 11:00:40 +0000
Manifest next update: Fri 27 Mar 2026 11:00:40 +0000
Files and hashes: 1: pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl (hash: 6rqZXrQpaMxQFA3MZ2HQeHheTfb/EpXHCkw5MGF8t0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:b4:e3:dd:27:a8:05:55:da:62:fe:f8:84:6e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c22864e3920e160ad9b84ff01da866aa409785
Validity
Not Before: Mar 26 11:00:40 2026 GMT
Not After : Mar 27 11:00:40 2026 GMT
Subject: CN=9638c814730fd66a2d86d2a9ab71d18ed38dc39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:16:c4:c2:27:2c:50:32:7d:04:c6:1a:db:4f:
9a:28:a9:14:54:c6:e0:d5:9e:c3:5e:ef:0a:a1:e4:
78:78:62:25:84:8e:d7:df:ea:2a:77:06:ff:55:d7:
9d:73:3c:1c:7f:70:73:f2:2d:5d:7c:f3:65:4a:53:
87:27:97:f6:66:a3:f2:95:e5:9a:ed:66:4e:e6:34:
fc:7f:c9:bf:8e:f4:fa:e5:08:0e:a4:6f:40:8f:39:
05:bd:48:6d:70:97:90:9c:15:83:ed:d6:87:f2:8f:
fc:1c:df:f4:7f:70:7a:69:70:da:49:1e:8c:e7:a2:
4c:46:01:0d:ca:1f:87:80:76:bf:a7:65:f2:6b:d4:
30:ca:99:42:c6:b9:ef:43:fc:14:32:94:07:fe:73:
a2:ab:62:ec:5f:8b:8b:69:f5:e9:50:a8:a3:2d:5c:
1a:56:32:9a:d4:49:4b:e2:30:89:af:02:51:aa:2a:
fb:cf:90:a7:15:60:0e:a9:14:59:ad:44:17:7f:49:
4f:48:60:3b:29:47:90:5a:a1:8d:c1:84:2b:1f:2d:
a0:98:d4:c5:a0:dd:ea:9e:cc:de:56:17:02:8f:44:
49:cc:c8:eb:6f:a9:34:b0:7f:38:ac:9a:4c:7e:b4:
8b:7d:40:fa:a9:ad:b0:72:37:5e:41:8f:4d:7c:f6:
6d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:38:C8:14:73:0F:D6:6A:2D:86:D2:A9:AB:71:D1:8E:D3:8D:C3:9E
X509v3 Authority Key Identifier:
keyid:A5:C2:28:64:E3:92:0E:16:0A:D9:B8:4F:F0:1D:A8:66:AA:40:97:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:4c:59:5b:29:a6:95:d7:be:07:e2:2c:32:71:3a:96:9f:70:
df:70:86:ab:bb:df:e8:6c:88:a5:99:3a:15:93:a9:39:42:e6:
83:bc:ef:dc:a0:a7:60:cb:40:ec:8d:bd:20:dc:c8:7f:33:f9:
0e:83:33:73:91:5b:f4:ad:14:e3:90:93:04:5f:4c:e3:c9:12:
d9:ba:d6:ca:2e:27:d7:a9:00:60:fb:47:70:21:f7:7c:60:96:
47:36:10:02:61:16:40:34:a7:6b:8b:f9:d4:12:e9:7f:c8:07:
dc:d0:e1:92:ac:34:21:16:19:37:39:4b:0d:cb:a1:39:22:95:
16:40:15:7e:53:aa:8d:81:d5:99:e2:51:28:9c:06:d6:66:72:
9d:b9:7a:b3:01:d0:7a:30:2c:0f:5c:cc:57:2b:b4:77:4e:39:
f8:d7:64:91:e7:7c:ef:76:9e:1a:ba:66:c5:da:0c:84:9c:ac:
89:15:f0:48:78:cc:a1:67:a4:49:77:3e:7d:f4:2b:57:9e:9f:
64:84:5a:38:93:63:c5:57:68:29:d3:56:ed:aa:1a:1d:62:14:
d6:27:1c:ab:03:ca:b3:31:94:74:4d:7d:f7:d5:ab:e2:28:0c:
c4:ec:55:7d:16:1d:d5:85:02:ed:06:b3:23:b4:f5:8d:19:ef:
82:64:d5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:13 2026 by rpki-client