Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
File: PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft (raw, json)
Hash identifier: hJ3KU2mBA3gMGoCElJkyg6aX/tVf/2c5MjOjVcform4=
Subject key identifier: 0F:0B:00:43:FC:E8:A7:5A:7D:72:5F:52:CD:73:52:48:6C:88:25:92
Authority key identifier: 3C:FE:E2:EA:3C:DE:08:73:A1:91:BD:D7:95:22:73:99:B5:6A:43:BA
Certificate issuer: /CN=3cfee2ea3cde0873a191bdd795227399b56a43ba
Certificate serial: 01A0DB04A3E98B695A7285421794F1859F3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
Manifest number: 0396
Signing time: Sat 26 Sep 2026 00:01:49 +0000
Manifest this update: Sat 26 Sep 2026 00:01:49 +0000
Manifest next update: Sun 27 Sep 2026 00:01:49 +0000
Files and hashes: 1: PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl (hash: t/bI7YO2emtqWUcfznNvSEsMHUCmg1k4pX+Sd8bi2yk=)
2: U1VjosqpBiqy2ZFxYLqdYxKnum4.roa (hash: AvN5YNAvDxw0bLWGw+RbIchpQR/eRlfnMr+l8l+QHy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:04:a3:e9:8b:69:5a:72:85:42:17:94:f1:85:9f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cfee2ea3cde0873a191bdd795227399b56a43ba
Validity
Not Before: Sep 26 00:01:49 2026 GMT
Not After : Sep 27 00:01:49 2026 GMT
Subject: CN=0f0b0043fce8a75a7d725f52cd7352486c882592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:93:6d:8b:b0:60:95:f4:7f:4d:71:e4:f9:0f:
8d:60:7f:a1:ce:60:7b:08:22:8b:9a:bd:73:f8:3f:
dd:1b:c7:f9:d3:b3:61:65:6d:40:e2:11:ed:de:72:
4b:db:dc:6e:31:52:8c:fc:a9:65:8c:74:fa:78:ff:
b9:0a:75:16:11:d0:ed:48:5b:60:18:33:0f:2e:5c:
57:0d:83:eb:06:63:de:1d:5f:b3:c8:75:8e:95:58:
18:06:5a:27:f2:8b:2e:af:c1:da:9d:39:be:6e:69:
0c:5f:d9:08:13:57:7f:a8:1a:22:d3:29:ef:5b:3f:
60:ff:11:80:9a:87:77:07:bd:f2:50:58:f6:be:06:
3d:d5:50:fc:66:12:43:b8:e8:fa:3a:fb:24:6c:43:
5f:d1:11:4c:9e:f0:8f:0b:18:51:32:2f:77:c9:04:
50:6e:f4:9e:a9:83:43:28:89:2a:96:de:ff:8c:9b:
7d:a0:bf:42:fb:a5:1e:74:69:a2:4f:06:6d:a2:92:
e7:a4:25:ba:8a:29:2d:24:34:3a:90:f2:fe:a8:3f:
02:d2:ca:71:56:3b:1c:7f:7e:c3:6f:6a:b5:53:87:
f4:6e:b5:5f:8b:c5:dd:42:86:50:dc:cd:10:fa:b7:
39:9b:d2:0c:88:0c:fe:91:77:05:31:48:8f:22:e2:
5e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0B:00:43:FC:E8:A7:5A:7D:72:5F:52:CD:73:52:48:6C:88:25:92
X509v3 Authority Key Identifier:
keyid:3C:FE:E2:EA:3C:DE:08:73:A1:91:BD:D7:95:22:73:99:B5:6A:43:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:91:8e:72:eb:34:fc:1e:12:d2:ad:1e:4e:d8:ea:9d:90:7e:
cd:01:8c:4d:d4:99:89:5e:5a:ed:0d:ff:2a:f3:59:53:cb:81:
db:a1:90:04:95:c3:7c:65:44:b1:5b:32:59:10:d5:a7:a7:3b:
9b:2a:55:95:ec:c1:b2:d6:9a:07:20:81:16:a5:fe:dd:87:dd:
44:bb:c4:07:1f:a8:37:cd:d5:78:c9:ca:2b:8e:e7:31:87:b0:
37:cb:b4:8a:1f:49:c1:36:0a:d1:97:50:8b:c1:aa:eb:99:f2:
de:9f:05:4e:fc:4c:00:7e:87:6a:b5:58:9f:37:3d:f3:88:0b:
ba:e7:df:d5:38:f3:ac:03:91:6a:8f:5f:c3:b9:a4:22:54:54:
64:94:d9:c4:a7:e8:03:19:d5:f9:d1:21:e5:d9:8a:ce:e4:c6:
db:4b:38:e8:2c:ca:3e:c0:8e:00:06:a2:f3:67:47:63:ee:47:
4f:67:59:df:7c:bd:35:7e:e4:08:cf:70:7c:96:7a:33:c0:9b:
d8:a8:11:94:6d:31:12:9a:73:b2:3d:fc:5e:19:a8:a1:a8:0f:
8b:10:e4:90:e4:d6:72:30:48:3a:7d:5a:f3:ab:65:df:be:a3:
40:28:71:59:45:86:6a:af:05:a2:c3:54:73:65:0f:04:33:fa:
e1:97:73:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:47:33 2026 by rpki-client