Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
File: PcecfAfUNfoA8sfKCx5QZk2gTUg.mft (raw, json)
Hash identifier: T8NGwAIn86lHyz5PLdAHcVYE43q6BFr2SGPjJXWuxU8=
Subject key identifier: FB:64:65:11:54:14:38:C9:67:BB:27:75:BE:F7:6A:70:B8:E9:BD:D1
Authority key identifier: 3D:C7:9C:7C:07:D4:35:FA:00:F2:C7:CA:0B:1E:50:66:4D:A0:4D:48
Certificate issuer: /CN=3dc79c7c07d435fa00f2c7ca0b1e50664da04d48
Certificate serial: 019E1D22787ABAD0F8A8B93BB1BA46D89FE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcecfAfUNfoA8sfKCx5QZk2gTUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
Manifest number: 9C
Signing time: Tue 12 May 2026 17:00:58 +0000
Manifest this update: Tue 12 May 2026 17:00:58 +0000
Manifest next update: Wed 13 May 2026 17:00:58 +0000
Files and hashes: 1: PcecfAfUNfoA8sfKCx5QZk2gTUg.crl (hash: PNToW7h+8RmTd0jcXSXQ/R5TA5VYbtqGxFMFohSRL0A=)
2: Yv4GaEJIAdTbY-p5QqYedKqtIAM.roa (hash: tNr0fHXdSpSBz2ryPJ1QU5+Ji6Ji73iPqme/JR8I6kE=)
3: txmqo2Bw-3oeca5oupMNgLyAN0Y.asa (hash: Gbgy2oJEQGt6R6lx9qIzVv6nHbAWst+OpS/TWEhgvGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcecfAfUNfoA8sfKCx5QZk2gTUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:78:7a:ba:d0:f8:a8:b9:3b:b1:ba:46:d8:9f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc79c7c07d435fa00f2c7ca0b1e50664da04d48
Validity
Not Before: May 12 17:00:58 2026 GMT
Not After : May 13 17:00:58 2026 GMT
Subject: CN=fb646511541438c967bb2775bef76a70b8e9bdd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6b:6d:c4:7b:f4:2c:ca:66:8c:e6:5d:c2:06:
b0:da:f3:2d:33:d4:f7:3b:04:b4:e3:ad:ce:19:68:
03:04:16:2d:c0:28:ca:77:36:fa:fc:87:c1:9b:68:
ab:68:53:a9:97:ee:3c:f4:66:8f:2d:70:13:aa:ea:
c6:51:3a:0f:8e:85:05:fc:ba:69:95:9b:23:0c:e5:
35:aa:a3:d7:92:19:b3:38:6a:50:2e:26:84:6e:f2:
76:36:fe:80:db:1e:6a:bb:8b:2f:d7:e7:3e:98:a2:
07:28:b6:c3:e7:d4:50:b9:e2:74:92:ed:f2:d0:be:
43:10:97:8d:de:ef:f7:5c:71:8a:82:66:e4:9a:f7:
1a:6c:6f:3c:e9:b3:23:5f:05:c7:ee:d4:b8:6d:f7:
ef:42:08:53:19:03:09:33:31:4e:4e:06:d4:d0:84:
70:b0:55:b9:e0:90:c6:d0:c8:25:48:45:0d:50:12:
15:3d:6a:81:de:a6:c8:6d:6b:d6:08:22:e6:cd:93:
77:d0:13:92:26:4d:17:c5:75:4b:94:f6:17:ed:3a:
15:51:cc:36:0d:23:67:82:c2:1a:91:6b:ca:13:02:
3e:79:b1:25:e6:20:d7:23:22:c1:8d:f7:94:15:b9:
99:e9:48:53:7c:c8:4f:44:6d:35:4e:6d:57:1d:06:
6a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:64:65:11:54:14:38:C9:67:BB:27:75:BE:F7:6A:70:B8:E9:BD:D1
X509v3 Authority Key Identifier:
keyid:3D:C7:9C:7C:07:D4:35:FA:00:F2:C7:CA:0B:1E:50:66:4D:A0:4D:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcecfAfUNfoA8sfKCx5QZk2gTUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:b9:10:9b:b7:88:dd:3d:c9:13:3e:87:58:87:9f:7d:ce:73:
1c:cc:7a:44:db:5e:0a:31:71:5f:c8:a3:fb:d3:2f:69:b1:c4:
f4:3b:ec:b9:cb:a0:25:c1:2d:6d:37:fa:e2:70:8c:46:d4:b3:
85:30:29:b1:99:c0:75:0b:81:04:e0:a7:08:24:32:35:39:94:
17:92:e3:b8:d0:b1:b0:ea:17:54:bd:01:65:29:05:b5:b2:45:
55:e2:ea:41:db:73:83:2a:d5:df:31:2d:ee:d2:db:f4:ba:ea:
30:db:bf:16:74:0b:01:26:99:c6:49:1d:ce:6a:8a:be:ff:9b:
52:4f:13:e0:dd:aa:2a:f7:73:2a:01:bf:f5:a8:ec:74:6e:db:
3b:42:61:df:8c:eb:3a:54:31:87:3f:e6:a3:f0:60:18:3d:c4:
97:e3:14:c5:0e:fc:59:43:60:a1:d2:af:8a:aa:b0:f5:06:02:
11:c4:96:32:e7:f7:ae:91:ab:85:a5:af:0b:50:63:de:bf:1d:
18:b8:ec:93:fe:f3:e7:6d:06:f4:46:be:5d:7b:d5:64:55:ac:
87:3d:87:1c:78:25:41:1a:f0:45:f9:1c:b8:51:c0:d2:c1:f1:
f1:2c:3d:60:26:9e:61:b3:95:31:fe:71:f9:2b:4d:7a:50:89:
ae:fd:9b:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dInh6utD4qLk7sbpG2J/hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYzc5YzdjMDdkNDM1ZmEwMGYyYzdjYTBiMWU1MDY2NGRh
MDRkNDgwHhcNMjYwNTEyMTcwMDU4WhcNMjYwNTEzMTcwMDU4WjAzMTEwLwYDVQQD
EyhmYjY0NjUxMTU0MTQzOGM5NjdiYjI3NzViZWY3NmE3MGI4ZTliZGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6WttxHv0LMpmjOZdwgaw2vMtM9T3
OwS0463OGWgDBBYtwCjKdzb6/IfBm2iraFOpl+489GaPLXATqurGUToPjoUF/Lpp
lZsjDOU1qqPXkhmzOGpQLiaEbvJ2Nv6A2x5qu4sv1+c+mKIHKLbD59RQueJ0ku3y
0L5DEJeN3u/3XHGKgmbkmvcabG886bMjXwXH7tS4bffvQghTGQMJMzFOTgbU0IRw
sFW54JDG0MglSEUNUBIVPWqB3qbIbWvWCCLmzZN30BOSJk0XxXVLlPYX7ToVUcw2
DSNngsIakWvKEwI+ebEl5iDXIyLBjfeUFbmZ6UhTfMhPRG01Tm1XHQZqBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtkZRFUFDjJZ7sndb73anC46b3RMB8GA1UdIwQY
MBaAFD3HnHwH1DX6APLHygseUGZNoE1IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGNlY2ZBZlVOZm9BOHNmS0N4NVFaazJnVFVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8yMDdkYTMtOGE5ZS00YzFjLTkzYzkt
OGViODU0YzlmYzhkLzEvUGNlY2ZBZlVOZm9BOHNmS0N4NVFaazJnVFVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8yMDdkYTMtOGE5ZS00YzFjLTkzYzktOGViODU0YzlmYzhk
LzEvUGNlY2ZBZlVOZm9BOHNmS0N4NVFaazJnVFVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo7kQm7eI
3T3JEz6HWIeffc5zHMx6RNteCjFxX8ij+9MvabHE9DvsucugJcEtbTf64nCMRtSz
hTApsZnAdQuBBOCnCCQyNTmUF5LjuNCxsOoXVL0BZSkFtbJFVeLqQdtzgyrV3zEt
7tLb9LrqMNu/FnQLASaZxkkdzmqKvv+bUk8T4N2qKvdzKgG/9ajsdG7bO0Jh34zr
OlQxhz/mo/BgGD3El+MUxQ78WUNgodKviqqw9QYCEcSWMuf3rpGrhaWvC1Bj3r8d
GLjsk/7z520G9Ea+XXvVZFWshz2HHHglQRrwRfkcuFHA0sHx8Sw9YCaeYbOVMf5x
+StNelCJrv2bXA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:51:08 2026 by rpki-client