Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
File: PCKK_HA7a--nNfIhKGH9b6REh80.mft (raw, json)
Hash identifier: a012B1KxRLQEJKEMCVmc1ycCAFm3AOrdELO+N4Hueu0=
Subject key identifier: F1:0F:0D:5A:97:F6:46:AC:80:B3:D0:F3:15:3C:2A:61:30:42:49:DF
Authority key identifier: 3C:22:8A:FC:70:3B:6B:EF:A7:35:F2:21:28:61:FD:6F:A4:44:87:CD
Certificate issuer: /CN=3c228afc703b6befa735f2212861fd6fa44487cd
Certificate serial: 019D27E0688A91A2E932E5524569957CBB29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
Manifest number: 135B
Signing time: Thu 26 Mar 2026 02:01:51 +0000
Manifest this update: Thu 26 Mar 2026 02:01:51 +0000
Manifest next update: Fri 27 Mar 2026 02:01:51 +0000
Files and hashes: 1: PCKK_HA7a--nNfIhKGH9b6REh80.crl (hash: POMEQVKD1XV5AeZ/e3em8EPMtVrqL1xZyN2PsfPMZHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:68:8a:91:a2:e9:32:e5:52:45:69:95:7c:bb:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c228afc703b6befa735f2212861fd6fa44487cd
Validity
Not Before: Mar 26 02:01:51 2026 GMT
Not After : Mar 27 02:01:51 2026 GMT
Subject: CN=f10f0d5a97f646ac80b3d0f3153c2a61304249df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:89:d5:31:5d:30:ab:03:12:d4:9d:a2:ca:ec:
84:67:56:36:7a:f2:6c:62:1d:ba:31:36:5f:97:36:
32:a5:44:a1:67:cb:53:20:dd:e4:75:09:c3:96:6e:
07:20:d4:a4:6f:ca:8a:b3:19:ca:08:20:39:44:f1:
1c:f0:aa:6f:bf:e1:35:58:c7:84:2d:b4:55:1d:c8:
e4:94:cd:d4:50:3c:91:23:a8:38:2d:eb:36:cf:a3:
ad:97:d4:65:7d:da:ba:53:62:96:96:ab:70:95:93:
c8:d5:ff:fa:76:8d:8b:6e:0b:c2:e0:b0:65:dd:a0:
30:3e:96:4d:37:71:aa:d2:4b:07:4b:55:b1:f7:11:
f1:29:90:f8:f3:1d:f7:3e:c2:e7:17:fc:c8:35:6f:
6d:a6:89:7b:13:15:4a:74:9d:1f:56:b1:b6:e9:63:
12:68:8c:eb:63:19:cf:77:07:e9:4a:19:91:4e:e7:
69:ad:d7:62:8b:c4:08:38:7b:2d:a9:c6:b9:e4:f9:
b1:80:73:d7:87:bc:9d:c4:37:a7:eb:9e:0c:35:09:
2d:4f:bd:8b:10:9d:07:8b:42:78:3b:c3:f9:fb:4b:
cc:2f:fe:5a:88:ba:24:03:40:6d:5b:2a:40:d9:29:
90:09:87:b7:37:37:ed:9d:40:f4:7e:a3:c4:b2:b5:
32:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0F:0D:5A:97:F6:46:AC:80:B3:D0:F3:15:3C:2A:61:30:42:49:DF
X509v3 Authority Key Identifier:
keyid:3C:22:8A:FC:70:3B:6B:EF:A7:35:F2:21:28:61:FD:6F:A4:44:87:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e6:ce:6c:ab:31:8d:fe:c2:d6:fb:18:28:ec:b9:d6:8e:28:
f3:ac:be:5d:93:e8:15:38:57:98:60:e3:cb:44:49:ea:25:07:
89:59:39:08:94:74:7f:39:82:21:f5:69:b6:82:07:ad:4b:25:
56:88:f5:89:8f:ca:65:2f:a7:4f:3a:18:48:64:eb:96:f7:5f:
05:ed:bd:3e:18:3d:c1:ac:91:d3:c2:91:5f:a3:46:fc:2e:c1:
a7:a1:c8:2d:64:ea:49:33:6d:a5:61:c6:02:55:fe:6d:2f:3a:
29:66:41:b9:5e:79:42:ab:c6:df:f4:8c:36:99:39:ca:73:b6:
9d:aa:9c:c0:3c:b4:84:e6:5f:cc:b5:6e:93:e1:34:4c:5e:f7:
44:46:6e:e7:3c:b3:8b:13:19:84:62:10:60:51:c9:ab:7e:28:
31:53:97:87:e5:63:1c:04:8a:43:94:9a:96:e4:db:5e:be:c3:
25:cb:8a:33:e0:34:46:7c:6c:d6:71:72:53:82:82:2c:eb:db:
f6:b3:32:23:95:93:9a:31:d4:51:40:cc:5d:a0:89:4c:e6:ff:
7d:94:d8:a1:e6:3a:e1:a7:d8:ce:22:1e:72:bc:05:03:b7:5f:
a3:88:c8:fd:0c:4b:09:21:e2:e1:d8:6d:cc:08:64:e7:3c:1a:
b4:fa:40:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:23 2026 by rpki-client