Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
File: PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft (raw, json)
Hash identifier: P2uYvQA5ep1rX19j08NSfZHPkaW0x+ra7DDl61SUisU=
Subject key identifier: A9:33:B7:50:CD:61:0A:9A:93:1B:F7:42:11:CA:AE:FD:31:41:60:B3
Authority key identifier: 3C:FE:E2:EA:3C:DE:08:73:A1:91:BD:D7:95:22:73:99:B5:6A:43:BA
Certificate issuer: /CN=3cfee2ea3cde0873a191bdd795227399b56a43ba
Certificate serial: 019D2AA9652AAF6D39B37C045C9DBE12E678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
Manifest number: 01AD
Signing time: Thu 26 Mar 2026 15:00:37 +0000
Manifest this update: Thu 26 Mar 2026 15:00:37 +0000
Manifest next update: Fri 27 Mar 2026 15:00:37 +0000
Files and hashes: 1: PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl (hash: a8jhOeJw5fcj2tKDwZ/2JZC1fEitZ/no8xXlp3IHV+o=)
2: U1VjosqpBiqy2ZFxYLqdYxKnum4.roa (hash: AvN5YNAvDxw0bLWGw+RbIchpQR/eRlfnMr+l8l+QHy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:65:2a:af:6d:39:b3:7c:04:5c:9d:be:12:e6:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cfee2ea3cde0873a191bdd795227399b56a43ba
Validity
Not Before: Mar 26 15:00:37 2026 GMT
Not After : Mar 27 15:00:37 2026 GMT
Subject: CN=a933b750cd610a9a931bf74211caaefd314160b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:92:d7:cb:12:92:28:32:69:a0:64:cf:d4:88:
a9:eb:98:04:48:95:0c:3d:62:ff:d6:31:e2:4f:09:
d7:e5:5e:66:a1:37:4d:e8:60:bc:29:ac:1a:e5:7e:
d0:94:7f:63:01:95:ca:74:04:e8:ab:ae:dc:89:d6:
ab:b7:bf:d1:53:f7:0e:5d:6b:24:36:35:8a:7d:99:
80:71:42:74:ec:71:93:45:a7:a7:ed:3c:93:61:4d:
4f:72:5a:28:99:52:7e:bc:ab:a0:7c:0f:5b:a6:b9:
41:2d:1c:41:49:c0:8b:cf:98:6c:70:a0:88:0a:6b:
8d:37:96:85:6c:c0:62:23:d8:f5:23:81:39:11:42:
57:3f:90:ca:d0:c5:81:2c:fa:86:c8:21:9e:db:d0:
98:64:a7:b6:7e:70:5a:4a:07:23:75:94:1b:df:0e:
27:f5:b3:ef:c3:4a:a2:aa:41:19:ab:49:00:d6:27:
3f:58:55:bf:56:d0:d8:ed:9e:30:7c:d6:21:25:89:
54:1b:71:e7:cb:cd:04:2d:f5:2e:d7:70:d6:9c:13:
15:72:70:a8:7a:cb:d6:fe:b0:9a:90:40:d1:9a:e1:
11:9c:75:02:e2:62:3b:8c:34:e5:e0:1d:51:ed:41:
58:d7:66:76:93:27:95:69:2b:4c:a1:fb:14:1b:8c:
a9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:33:B7:50:CD:61:0A:9A:93:1B:F7:42:11:CA:AE:FD:31:41:60:B3
X509v3 Authority Key Identifier:
keyid:3C:FE:E2:EA:3C:DE:08:73:A1:91:BD:D7:95:22:73:99:B5:6A:43:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:11:25:56:72:8c:71:fe:16:f4:bf:f9:7c:42:1b:28:d5:98:
5d:83:50:4a:af:ad:7d:8f:cf:3e:8b:a2:63:d8:55:c2:7b:25:
bd:ac:47:61:6b:f8:03:ca:1f:e7:46:49:59:44:19:72:19:ab:
57:da:7c:d1:5c:9c:0f:1f:b3:fc:4b:27:51:e4:c4:56:ec:77:
11:c7:36:5f:db:e8:a6:d5:f3:c8:82:4c:4d:23:b8:5c:6f:cd:
4f:ac:39:c0:92:1a:7c:2d:ce:dd:c1:d2:89:ef:f4:90:98:5c:
40:1a:69:aa:12:fb:68:4a:3c:65:29:79:9f:f2:e8:cd:48:86:
b5:87:7b:a5:bd:82:b7:6a:69:9e:91:65:a5:8e:5d:d4:d0:81:
a6:c5:85:97:b3:c4:b5:7d:4a:f5:c9:36:c9:fc:c3:53:19:95:
98:ca:56:cb:e9:f3:07:8b:20:5f:13:34:47:3f:97:ed:86:1d:
07:5a:ad:a4:e1:16:a4:8d:0f:2f:d9:75:4b:a5:e0:df:3f:c4:
57:33:8a:da:39:5f:ff:51:89:5c:ad:75:39:8f:4a:03:4f:e6:
4c:d1:9d:23:01:7c:78:fa:30:68:fa:57:c0:a8:86:94:b1:06:
d9:94:80:7e:2e:61:c3:40:0c:d9:7d:66:97:18:38:61:24:8f:
2a:c3:9b:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qqWUqr205s3wEXJ2+EuZ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZmVlMmVhM2NkZTA4NzNhMTkxYmRkNzk1MjI3Mzk5YjU2
YTQzYmEwHhcNMjYwMzI2MTUwMDM3WhcNMjYwMzI3MTUwMDM3WjAzMTEwLwYDVQQD
EyhhOTMzYjc1MGNkNjEwYTlhOTMxYmY3NDIxMWNhYWVmZDMxNDE2MGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJLXyxKSKDJpoGTP1Iip65gESJUM
PWL/1jHiTwnX5V5moTdN6GC8Kawa5X7QlH9jAZXKdAToq67cidart7/RU/cOXWsk
NjWKfZmAcUJ07HGTRaen7TyTYU1PcloomVJ+vKugfA9bprlBLRxBScCLz5hscKCI
CmuNN5aFbMBiI9j1I4E5EUJXP5DK0MWBLPqGyCGe29CYZKe2fnBaSgcjdZQb3w4n
9bPvw0qiqkEZq0kA1ic/WFW/VtDY7Z4wfNYhJYlUG3Hny80ELfUu13DWnBMVcnCo
esvW/rCakEDRmuERnHUC4mI7jDTl4B1R7UFY12Z2kyeVaStMofsUG4ypDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkzt1DNYQqakxv3QhHKrv0xQWCzMB8GA1UdIwQY
MBaAFDz+4uo83ghzoZG915Uic5m1akO6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFA3aTZqemVDSE9oa2IzWGxTSnptYlZxUTdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9mNjY4ZTAtZmIzNi00NWEwLTk3MWYt
NmIyZjlkMTUxNTE5LzEvUFA3aTZqemVDSE9oa2IzWGxTSnptYlZxUTdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9mNjY4ZTAtZmIzNi00NWEwLTk3MWYtNmIyZjlkMTUxNTE5
LzEvUFA3aTZqemVDSE9oa2IzWGxTSnptYlZxUTdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAShElVnKM
cf4W9L/5fEIbKNWYXYNQSq+tfY/PPouiY9hVwnslvaxHYWv4A8of50ZJWUQZchmr
V9p80VycDx+z/EsnUeTEVux3Ecc2X9voptXzyIJMTSO4XG/NT6w5wJIafC3O3cHS
ie/0kJhcQBppqhL7aEo8ZSl5n/LozUiGtYd7pb2Ct2ppnpFlpY5d1NCBpsWFl7PE
tX1K9ck2yfzDUxmVmMpWy+nzB4sgXxM0Rz+X7YYdB1qtpOEWpI0PL9l1S6Xg3z/E
VzOK2jlf/1GJXK11OY9KA0/mTNGdIwF8ePowaPpXwKiGlLEG2ZSAfi5hw0AM2X1m
lxg4YSSPKsObOw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:38:07 2026 by rpki-client