Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
File: PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft (raw, json)
Hash identifier: ri5CYkR0UZP6oTlHMCrcGTxFk8xqFrnmacXdB1FBaBQ=
Subject key identifier: EA:D5:4F:20:53:2D:B1:83:65:FA:82:8E:D5:DA:A1:18:7E:20:59:C0
Authority key identifier: 3C:FE:E2:EA:3C:DE:08:73:A1:91:BD:D7:95:22:73:99:B5:6A:43:BA
Certificate issuer: /CN=3cfee2ea3cde0873a191bdd795227399b56a43ba
Certificate serial: 019D28BB8DD3B74011BB8348D36F464F0339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
Manifest number: 01AC
Signing time: Thu 26 Mar 2026 06:01:13 +0000
Manifest this update: Thu 26 Mar 2026 06:01:13 +0000
Manifest next update: Fri 27 Mar 2026 06:01:13 +0000
Files and hashes: 1: PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl (hash: jKe0rWknO4Xv9SVnZWVp1LEOXvH8w4YApTerDO14LHE=)
2: U1VjosqpBiqy2ZFxYLqdYxKnum4.roa (hash: AvN5YNAvDxw0bLWGw+RbIchpQR/eRlfnMr+l8l+QHy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:8d:d3:b7:40:11:bb:83:48:d3:6f:46:4f:03:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cfee2ea3cde0873a191bdd795227399b56a43ba
Validity
Not Before: Mar 26 06:01:13 2026 GMT
Not After : Mar 27 06:01:13 2026 GMT
Subject: CN=ead54f20532db18365fa828ed5daa1187e2059c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0e:e5:f1:32:14:4a:af:cf:7d:73:8f:ca:d2:
2b:8a:39:bc:ad:ad:6f:4b:62:32:9e:17:7d:00:93:
86:3a:3c:ec:6c:fa:cd:b9:15:80:dd:ac:8a:97:c6:
16:55:ee:05:81:3f:f4:d1:b4:92:4d:d3:99:b9:d5:
d4:37:e6:35:d4:c5:6b:a7:1e:e0:e5:cd:2c:91:c8:
79:ed:44:8b:ba:80:d9:0b:47:7e:18:1b:b0:2c:88:
1d:a1:95:63:9d:70:75:be:6a:d4:28:4c:d9:63:c7:
34:cb:9d:16:2e:55:94:aa:55:c8:f0:49:42:2e:77:
9c:f0:b4:b6:8a:09:39:6a:28:0c:64:bd:50:8b:fb:
f6:40:c5:91:af:70:f5:0a:c2:a1:e5:70:b6:76:c1:
76:e0:32:26:31:f6:4e:ac:c0:a0:11:23:39:6c:2c:
7e:5a:a0:ee:89:51:70:03:a1:bc:0e:1d:0b:06:92:
7e:21:14:39:d5:23:c7:62:c3:56:7f:a9:44:e2:a9:
16:2a:6e:ed:01:1f:b2:de:78:78:4c:2e:8c:f4:9f:
2d:48:ed:65:a0:c4:5d:f5:68:92:d6:f5:df:12:7a:
bc:56:58:79:42:f1:06:d3:44:de:cf:da:71:78:fc:
64:00:1d:8a:b9:c3:f2:35:49:fc:b4:05:48:1b:8b:
21:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D5:4F:20:53:2D:B1:83:65:FA:82:8E:D5:DA:A1:18:7E:20:59:C0
X509v3 Authority Key Identifier:
keyid:3C:FE:E2:EA:3C:DE:08:73:A1:91:BD:D7:95:22:73:99:B5:6A:43:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:36:b7:6f:f2:8e:25:f7:36:83:b1:09:9d:50:26:d5:ae:40:
c7:24:e7:70:9f:35:22:98:c3:e8:8d:a8:44:93:33:df:52:17:
31:39:71:a6:22:2f:45:d6:2c:7a:74:cc:31:8f:5a:10:e9:ed:
27:66:5d:f4:2c:ee:03:59:95:10:59:61:70:1b:64:97:f4:04:
db:12:17:c6:bf:4a:52:b4:31:3c:41:16:53:17:f7:8f:2d:e7:
3b:93:a1:22:8a:d7:a7:59:74:2b:de:9f:f0:4c:82:64:ce:fc:
cd:ea:e6:ed:ed:d7:a2:35:7f:57:8e:47:b1:a3:28:54:fc:0a:
fc:8c:28:98:1b:20:7b:a6:15:2e:d3:73:fb:5b:da:89:95:71:
4a:77:b3:fa:d8:75:d1:45:39:a6:02:94:9d:bc:69:6c:ed:fa:
2e:61:a3:b1:32:c0:55:51:38:53:db:8a:1c:b5:f0:db:8c:ef:
6e:85:e3:a1:d3:a3:89:94:e7:c6:3f:8d:3e:37:4a:10:9e:5d:
60:03:4e:ef:d5:52:0d:b9:bf:77:6c:8d:41:e8:7b:f6:88:e2:
25:46:b9:a4:fa:65:22:ae:86:4d:e9:06:67:3e:b8:93:37:6d:
63:04:8d:03:32:68:86:39:53:43:36:76:ec:6e:1a:45:bd:de:
58:a9:53:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou43Tt0ARu4NI029GTwM5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZmVlMmVhM2NkZTA4NzNhMTkxYmRkNzk1MjI3Mzk5YjU2
YTQzYmEwHhcNMjYwMzI2MDYwMTEzWhcNMjYwMzI3MDYwMTEzWjAzMTEwLwYDVQQD
EyhlYWQ1NGYyMDUzMmRiMTgzNjVmYTgyOGVkNWRhYTExODdlMjA1OWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg7l8TIUSq/PfXOPytIrijm8ra1v
S2Iynhd9AJOGOjzsbPrNuRWA3ayKl8YWVe4FgT/00bSSTdOZudXUN+Y11MVrpx7g
5c0skch57USLuoDZC0d+GBuwLIgdoZVjnXB1vmrUKEzZY8c0y50WLlWUqlXI8ElC
Lnec8LS2igk5aigMZL1Qi/v2QMWRr3D1CsKh5XC2dsF24DImMfZOrMCgESM5bCx+
WqDuiVFwA6G8Dh0LBpJ+IRQ51SPHYsNWf6lE4qkWKm7tAR+y3nh4TC6M9J8tSO1l
oMRd9WiS1vXfEnq8Vlh5QvEG00Tez9pxePxkAB2KucPyNUn8tAVIG4shawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOrVTyBTLbGDZfqCjtXaoRh+IFnAMB8GA1UdIwQY
MBaAFDz+4uo83ghzoZG915Uic5m1akO6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFA3aTZqemVDSE9oa2IzWGxTSnptYlZxUTdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9mNjY4ZTAtZmIzNi00NWEwLTk3MWYt
NmIyZjlkMTUxNTE5LzEvUFA3aTZqemVDSE9oa2IzWGxTSnptYlZxUTdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9mNjY4ZTAtZmIzNi00NWEwLTk3MWYtNmIyZjlkMTUxNTE5
LzEvUFA3aTZqemVDSE9oa2IzWGxTSnptYlZxUTdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARja3b/KO
Jfc2g7EJnVAm1a5AxyTncJ81IpjD6I2oRJMz31IXMTlxpiIvRdYsenTMMY9aEOnt
J2Zd9CzuA1mVEFlhcBtkl/QE2xIXxr9KUrQxPEEWUxf3jy3nO5OhIorXp1l0K96f
8EyCZM78zerm7e3XojV/V45HsaMoVPwK/IwomBsge6YVLtNz+1vaiZVxSnez+th1
0UU5pgKUnbxpbO36LmGjsTLAVVE4U9uKHLXw24zvboXjodOjiZTnxj+NPjdKEJ5d
YANO79VSDbm/d2yNQeh79ojiJUa5pPplIq6GTekGZz64kzdtYwSNAzJohjlTQzZ2
7G4aRb3eWKlTew==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:37:59 2026 by rpki-client