Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
File: PcecfAfUNfoA8sfKCx5QZk2gTUg.mft (raw, json)
Hash identifier: XSSpA94DLq7Fk/xx0ZnQWqOtyYYEa0kvVUQwb2lKLTo=
Subject key identifier: 67:E4:1C:29:FC:B2:84:93:79:88:73:C8:18:89:27:62:C4:CC:34:86
Authority key identifier: 3D:C7:9C:7C:07:D4:35:FA:00:F2:C7:CA:0B:1E:50:66:4D:A0:4D:48
Certificate issuer: /CN=3dc79c7c07d435fa00f2c7ca0b1e50664da04d48
Certificate serial: 019F8FEC986B449DBBF8CDF22B398CB1A2DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcecfAfUNfoA8sfKCx5QZk2gTUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
Manifest number: 015C
Signing time: Thu 23 Jul 2026 17:01:15 +0000
Manifest this update: Thu 23 Jul 2026 17:01:15 +0000
Manifest next update: Fri 24 Jul 2026 17:01:15 +0000
Files and hashes: 1: PcecfAfUNfoA8sfKCx5QZk2gTUg.crl (hash: h0UZ8Ej2G1aWVjvuVzY45JAl40zQu4ilgTOx776cCD8=)
2: Yv4GaEJIAdTbY-p5QqYedKqtIAM.roa (hash: tNr0fHXdSpSBz2ryPJ1QU5+Ji6Ji73iPqme/JR8I6kE=)
3: txmqo2Bw-3oeca5oupMNgLyAN0Y.asa (hash: Gbgy2oJEQGt6R6lx9qIzVv6nHbAWst+OpS/TWEhgvGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcecfAfUNfoA8sfKCx5QZk2gTUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:98:6b:44:9d:bb:f8:cd:f2:2b:39:8c:b1:a2:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc79c7c07d435fa00f2c7ca0b1e50664da04d48
Validity
Not Before: Jul 23 17:01:15 2026 GMT
Not After : Jul 24 17:01:15 2026 GMT
Subject: CN=67e41c29fcb28493798873c818892762c4cc3486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c0:c1:02:3e:02:8b:12:27:11:73:71:2c:4e:
f4:c0:92:f6:e6:b5:e6:95:bf:fd:60:1d:43:c0:e0:
7d:d0:3c:62:99:c8:4f:8b:f0:76:a5:4b:ec:e5:0a:
bb:4b:54:f7:bc:59:a5:ef:f4:02:7d:b8:f0:b1:39:
83:72:5d:e6:f1:fd:e4:df:0f:7e:6c:5b:f8:94:ff:
1c:ec:59:82:bb:08:af:5c:3d:9c:07:41:0c:d8:b4:
15:ca:d1:cd:08:10:33:6f:32:9a:51:67:3e:5e:a3:
d6:89:df:1a:0d:20:7f:e0:a4:0b:63:1d:30:3f:2a:
4e:0d:2a:c9:df:84:16:7a:67:12:92:44:6c:13:19:
0a:ba:9d:e4:75:73:cf:ee:55:1f:41:0e:13:95:15:
c7:5d:c5:f8:41:31:18:35:a1:f2:cd:db:e9:02:c8:
42:a9:ff:92:56:23:bb:cd:c1:7d:50:bb:7e:f9:06:
5c:25:66:0f:12:66:f3:8c:2a:a2:de:30:80:ba:ca:
86:fb:de:fa:71:e4:ff:ce:ee:ae:b1:a5:dc:a2:20:
78:fe:01:1c:a7:ea:8e:f6:a3:2b:11:cb:ca:84:76:
26:36:57:9c:ce:2a:78:76:7b:80:65:2b:72:aa:4e:
b3:7d:8c:27:62:0b:c1:5d:06:e0:53:fb:a2:43:f1:
d4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E4:1C:29:FC:B2:84:93:79:88:73:C8:18:89:27:62:C4:CC:34:86
X509v3 Authority Key Identifier:
keyid:3D:C7:9C:7C:07:D4:35:FA:00:F2:C7:CA:0B:1E:50:66:4D:A0:4D:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcecfAfUNfoA8sfKCx5QZk2gTUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f1:01:c9:6c:d3:79:af:38:71:c7:8e:6c:d8:01:4b:70:35:
32:0a:ee:fd:de:11:9f:87:31:cc:03:4e:77:ad:88:26:76:72:
f6:2e:44:01:68:91:69:b9:f4:b9:a0:9e:dd:40:f4:d8:ff:2c:
b1:ca:25:ff:90:6c:32:da:8a:07:d4:78:29:4d:dc:da:b8:25:
7e:23:17:8d:3c:51:e4:88:ac:e4:27:be:24:e0:bb:3a:50:d9:
8b:d1:17:48:b8:8a:d6:5f:28:b4:aa:cc:15:86:1f:7c:33:b9:
54:21:55:64:86:0c:e9:f7:94:7d:1f:07:b9:e4:db:6a:23:ff:
39:42:58:87:47:02:17:75:67:97:a0:af:ec:52:9b:76:b4:6c:
d8:fc:7a:00:bc:1d:97:c6:8c:b7:ea:3d:15:c0:7d:74:93:5a:
3c:12:cf:96:e2:d1:f2:b2:f6:b1:44:06:29:27:be:a9:8f:1b:
c4:5a:4c:c2:78:e2:fe:6b:0c:70:39:82:a2:cc:87:ca:a1:e1:
94:d3:4e:ab:f9:df:6e:9d:ac:6c:62:0c:e0:22:3e:73:18:e3:
af:a5:c4:37:36:a3:00:b9:c2:88:05:c8:7a:8b:bd:b7:78:8f:
2a:aa:5a:bc:f2:c7:1d:49:d9:2f:3a:88:33:1b:96:be:b9:c9:
76:aa:1c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:47 2026 by rpki-client