Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
File: PcecfAfUNfoA8sfKCx5QZk2gTUg.mft (raw, json)
Hash identifier: DtdrmIdfvQnB3gIsNJWsNo2e3tqrLSUiYHliCvjNcrs=
Subject key identifier: 96:A4:63:9C:E8:B9:F6:2D:43:71:01:71:B3:AE:EF:24:F2:AC:55:B6
Authority key identifier: 3D:C7:9C:7C:07:D4:35:FA:00:F2:C7:CA:0B:1E:50:66:4D:A0:4D:48
Certificate issuer: /CN=3dc79c7c07d435fa00f2c7ca0b1e50664da04d48
Certificate serial: 01A0D08047CA4482DE8E042E0E323839032C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcecfAfUNfoA8sfKCx5QZk2gTUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
Manifest number: 0202
Signing time: Wed 23 Sep 2026 23:01:02 +0000
Manifest this update: Wed 23 Sep 2026 23:01:02 +0000
Manifest next update: Thu 24 Sep 2026 23:01:02 +0000
Files and hashes: 1: PcecfAfUNfoA8sfKCx5QZk2gTUg.crl (hash: vaCNQ+a2aROUnVUa8rl2hJ05JTuo91Wof41RIUtl08w=)
2: Yv4GaEJIAdTbY-p5QqYedKqtIAM.roa (hash: tNr0fHXdSpSBz2ryPJ1QU5+Ji6Ji73iPqme/JR8I6kE=)
3: txmqo2Bw-3oeca5oupMNgLyAN0Y.asa (hash: Gbgy2oJEQGt6R6lx9qIzVv6nHbAWst+OpS/TWEhgvGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcecfAfUNfoA8sfKCx5QZk2gTUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:80:47:ca:44:82:de:8e:04:2e:0e:32:38:39:03:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc79c7c07d435fa00f2c7ca0b1e50664da04d48
Validity
Not Before: Sep 23 23:01:02 2026 GMT
Not After : Sep 24 23:01:02 2026 GMT
Subject: CN=96a4639ce8b9f62d43710171b3aeef24f2ac55b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:91:57:47:e1:2a:d2:ae:f3:25:99:49:5a:35:
f8:5a:c6:8f:05:2e:2a:f5:dc:c1:02:a0:cb:89:9a:
5d:8e:81:27:47:ca:8f:b1:64:46:9a:d0:91:23:70:
c0:93:18:3b:46:a7:b6:f2:61:a4:e3:bc:5d:ef:3a:
7c:4f:fd:d4:43:4a:c3:7a:89:80:52:a7:93:c8:da:
57:bf:3e:79:02:f2:c4:65:87:9d:d8:da:9c:9b:f2:
db:e6:81:54:84:c3:c6:2c:50:90:02:75:c6:74:a2:
45:3f:57:0d:fb:8f:77:55:8d:9e:81:e9:6c:f6:7f:
83:d3:20:45:7d:e0:1d:a0:57:dd:2d:93:66:37:15:
49:9f:2f:7c:00:08:3b:02:98:3c:f8:d8:d7:e1:7b:
b2:d5:dd:52:e9:e0:17:f8:2d:92:fc:50:f4:0e:4a:
b1:a2:00:1f:9f:22:9f:e3:44:a2:7b:d3:37:7b:32:
66:48:60:33:8d:19:37:2c:9d:ab:cf:c3:59:5f:93:
f0:48:e0:58:64:08:71:b4:7b:97:85:58:5b:bd:50:
0f:83:53:2b:8f:1a:03:44:b3:87:34:b3:98:55:6d:
3d:8e:ce:4f:fe:b9:bf:b0:27:c6:14:b9:87:fd:95:
72:07:5f:67:de:22:a2:fa:bd:ee:bb:1d:62:a7:fd:
aa:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A4:63:9C:E8:B9:F6:2D:43:71:01:71:B3:AE:EF:24:F2:AC:55:B6
X509v3 Authority Key Identifier:
keyid:3D:C7:9C:7C:07:D4:35:FA:00:F2:C7:CA:0B:1E:50:66:4D:A0:4D:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcecfAfUNfoA8sfKCx5QZk2gTUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:21:fe:a5:eb:ff:f8:05:c7:2c:1c:a8:48:95:7f:2a:d1:1f:
91:33:e7:5b:87:24:33:ef:41:e4:35:df:9f:74:90:fb:25:e0:
d4:c6:0a:c8:8f:e0:73:8a:7e:e3:71:c5:3c:7d:ee:99:26:c5:
7e:bb:a7:b2:33:5b:ff:54:dc:ff:d2:c7:b0:a6:9e:e4:36:cd:
7c:4a:b1:29:63:e1:9c:5c:ac:5e:bc:af:92:71:59:42:fd:02:
7b:eb:f1:d7:a3:c1:d8:6e:1e:35:28:a3:f7:e0:31:35:ce:b2:
5a:2c:76:0a:a3:35:82:c3:56:39:a4:ed:99:b8:58:05:40:e5:
71:10:04:46:75:8b:95:e1:37:fc:2a:96:bc:ae:89:f2:d4:c0:
bf:e4:9f:db:e1:1a:63:57:7b:c8:5c:d0:7f:a1:84:ba:91:89:
9f:81:ea:4e:fd:8e:c8:72:f0:3e:52:f0:b4:7a:12:f1:5f:40:
9b:c9:c9:6c:a6:e6:37:35:04:15:5a:ef:07:95:da:30:03:bd:
00:e3:65:cf:0d:eb:2c:3c:a0:db:64:1e:4a:57:18:62:a2:b3:
de:82:78:7d:75:aa:4c:61:8b:80:74:4e:e8:c0:23:49:d7:d6:
2f:8d:eb:f3:28:65:27:3b:c0:b3:fa:8d:88:df:9d:4b:6b:bf:
02:82:7a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:08:36 2026 by rpki-client