Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3e0a-902e-4c80-83c6-7bc2f9cc1851/1/pc3iBKNmn5KB7h_B1fJIVCqAXgA.mft
File: pc3iBKNmn5KB7h_B1fJIVCqAXgA.mft (raw, json)
Hash identifier: dd++mK/eBfNC15yVHF1oUGZ1wGwpFJE1CGgNWA9A21c=
Subject key identifier: C7:5E:33:07:51:12:22:44:5F:6B:FF:DC:D8:0E:7A:A4:76:53:82:67
Authority key identifier: A5:CD:E2:04:A3:66:9F:92:81:EE:1F:C1:D5:F2:48:54:2A:80:5E:00
Certificate issuer: /CN=a5cde204a3669f9281ee1fc1d5f248542a805e00
Certificate serial: 019D2772683B31F367CCBFD353D017BC07EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pc3iBKNmn5KB7h_B1fJIVCqAXgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3e0a-902e-4c80-83c6-7bc2f9cc1851/1/pc3iBKNmn5KB7h_B1fJIVCqAXgA.mft
Manifest number: 01B3
Signing time: Thu 26 Mar 2026 00:01:42 +0000
Manifest this update: Thu 26 Mar 2026 00:01:42 +0000
Manifest next update: Fri 27 Mar 2026 00:01:42 +0000
Files and hashes: 1: cOQzX0ZgdC95fwEhMGOJPgzc7pQ.roa (hash: eeOGfbWU7at9s1wv4++gVcvwFwwdlNK8hImsrJAnmsQ=)
2: pc3iBKNmn5KB7h_B1fJIVCqAXgA.crl (hash: ERTNAif5lWM+ox1388QR6FDOEu+f2c6nE6XZdVbY6DM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3e0a-902e-4c80-83c6-7bc2f9cc1851/1/pc3iBKNmn5KB7h_B1fJIVCqAXgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1a3e0a-902e-4c80-83c6-7bc2f9cc1851/1/pc3iBKNmn5KB7h_B1fJIVCqAXgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pc3iBKNmn5KB7h_B1fJIVCqAXgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:68:3b:31:f3:67:cc:bf:d3:53:d0:17:bc:07:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5cde204a3669f9281ee1fc1d5f248542a805e00
Validity
Not Before: Mar 26 00:01:42 2026 GMT
Not After : Mar 27 00:01:42 2026 GMT
Subject: CN=c75e3307511222445f6bffdcd80e7aa476538267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:98:a5:9f:88:d9:33:55:a3:3d:1b:78:b8:48:
d5:4a:13:3d:ce:52:9d:d6:95:24:e9:37:30:68:1b:
98:a1:ba:4d:e4:fb:37:19:bc:dc:ea:63:69:d8:50:
8c:63:52:56:a4:a6:21:ac:2d:ca:15:89:c7:4c:75:
0b:20:ad:4a:76:81:2e:dc:df:2e:24:c2:88:2d:39:
a3:0d:a1:40:de:27:cc:6f:0e:ed:55:9f:73:19:c7:
bb:76:6f:f1:37:12:94:f5:37:43:28:cb:d3:04:88:
86:8e:18:8c:95:4a:62:4d:82:5d:9e:f5:cd:9d:d0:
08:9b:47:2a:4b:a4:53:d5:10:bb:f3:96:ed:5d:32:
94:6d:66:8f:20:a5:44:69:d8:7a:36:2b:cd:36:17:
3e:ef:a0:07:65:b8:8c:95:96:fc:27:78:b0:8e:64:
5c:2b:37:f6:bd:73:cf:0e:30:c9:ad:0b:af:4d:75:
54:ab:c9:3a:f9:61:dd:ba:91:a6:53:d1:29:42:bf:
31:72:3f:99:a5:e2:34:a3:e1:9e:dd:bf:01:e8:17:
70:68:4a:06:a5:3d:f0:c4:ad:8c:5e:f6:7f:d6:8f:
15:c8:6d:0d:68:e7:e9:67:15:d0:56:67:b5:8f:6d:
b9:83:22:f5:90:69:c5:de:65:e8:01:26:ec:85:be:
fe:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5E:33:07:51:12:22:44:5F:6B:FF:DC:D8:0E:7A:A4:76:53:82:67
X509v3 Authority Key Identifier:
keyid:A5:CD:E2:04:A3:66:9F:92:81:EE:1F:C1:D5:F2:48:54:2A:80:5E:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pc3iBKNmn5KB7h_B1fJIVCqAXgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3e0a-902e-4c80-83c6-7bc2f9cc1851/1/pc3iBKNmn5KB7h_B1fJIVCqAXgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3e0a-902e-4c80-83c6-7bc2f9cc1851/1/pc3iBKNmn5KB7h_B1fJIVCqAXgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:4d:09:57:4c:e0:21:57:e7:ed:13:08:6c:6f:76:59:70:8a:
c1:75:9d:39:cc:ef:c5:eb:97:fe:54:30:67:14:3a:86:7d:d4:
7c:23:a7:8a:7e:b6:61:0f:56:ea:dd:25:34:28:3b:19:bd:ab:
b5:a2:b5:32:e5:36:f5:d8:b6:d4:02:7d:7e:82:6b:84:49:6a:
c0:a5:3f:21:3e:7d:72:a5:2b:b4:7c:2a:fe:6a:6a:f5:8e:1b:
2e:1f:6e:92:e1:6a:46:ed:b6:ad:19:06:73:14:1f:b0:fa:7c:
46:1b:9b:30:69:cd:0a:51:b4:f3:13:31:e3:2e:87:52:49:12:
62:88:78:c6:e4:5b:dd:26:2e:a2:10:84:19:29:01:8c:df:88:
c7:8e:1c:3f:cd:ed:30:70:5a:d0:ef:70:c8:e4:50:c3:b7:21:
f0:23:19:b1:9d:35:06:85:e0:50:21:8d:b2:d9:8f:05:0a:f3:
13:1b:d8:db:3f:83:9a:88:59:55:0c:92:c0:45:db:06:8d:96:
92:8a:cf:35:8a:fb:1e:a7:0f:a2:91:c4:29:e6:24:99:6b:3d:
37:6f:14:75:2d:b2:93:89:b8:2c:62:66:53:96:8e:07:6b:da:
93:cc:0e:e7:c8:c1:44:7a:1c:bf:3a:73:18:05:a3:74:07:91:
c9:82:d1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:53:59 2026 by rpki-client