Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
File: PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft (raw, json)
Hash identifier: 0G+zTXLogVRZUx9UDLQngkTYob0Qo+ApGOC3XN6kGLA=
Subject key identifier: 27:0D:2B:10:A7:8E:A0:D1:DF:E3:AF:7F:36:72:B8:46:2B:EE:FA:C1
Authority key identifier: 3C:FE:E2:EA:3C:DE:08:73:A1:91:BD:D7:95:22:73:99:B5:6A:43:BA
Certificate issuer: /CN=3cfee2ea3cde0873a191bdd795227399b56a43ba
Certificate serial: 019E1FECFE2188AD611CEB38EB4A53AC7EEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
Manifest number: 022C
Signing time: Wed 13 May 2026 06:01:25 +0000
Manifest this update: Wed 13 May 2026 06:01:25 +0000
Manifest next update: Thu 14 May 2026 06:01:25 +0000
Files and hashes: 1: PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl (hash: KT4xsNJlSJxPuolRCMYQ9n0NKTnr3iejyqaMpxnmHdc=)
2: U1VjosqpBiqy2ZFxYLqdYxKnum4.roa (hash: AvN5YNAvDxw0bLWGw+RbIchpQR/eRlfnMr+l8l+QHy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:fe:21:88:ad:61:1c:eb:38:eb:4a:53:ac:7e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cfee2ea3cde0873a191bdd795227399b56a43ba
Validity
Not Before: May 13 06:01:25 2026 GMT
Not After : May 14 06:01:25 2026 GMT
Subject: CN=270d2b10a78ea0d1dfe3af7f3672b8462beefac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e6:32:cf:90:30:af:af:42:33:33:ff:d8:cb:
2f:12:d5:ef:83:65:08:6e:e6:f4:4e:6b:28:09:1c:
51:eb:af:f8:44:34:fc:d3:d8:d0:2d:cb:15:64:86:
a1:b6:97:8b:19:6b:df:4a:f5:3d:01:14:cc:08:e4:
41:b9:55:db:ff:6e:29:26:4b:1c:67:76:8e:2b:4d:
05:4a:f2:3d:3f:ae:11:c4:c9:b2:d4:cf:f5:14:ae:
80:c8:e4:b3:66:57:d8:de:5b:b8:4f:09:dd:55:1c:
d2:e1:c8:d5:64:93:5d:6c:1d:f1:45:00:c2:f5:bd:
cf:79:7b:2b:bc:c0:66:4f:91:36:50:1a:42:e7:dd:
5c:f8:24:be:18:09:da:0a:41:30:1a:21:1a:d0:ce:
c3:a8:84:56:b2:f1:e5:d9:e3:1a:cc:ae:1e:dc:a3:
fd:ea:fb:ce:22:9b:a6:6b:97:69:e3:d0:5b:73:87:
63:94:21:49:5d:53:37:ec:5d:f7:7b:0e:9b:33:60:
73:b6:f8:f6:b1:95:33:f2:6b:72:8c:17:d9:04:c7:
d4:35:fa:eb:7c:10:55:7c:dd:67:67:61:5d:8d:f6:
b5:fd:a3:99:f6:3e:ee:06:f9:9c:87:86:6b:77:e9:
ef:9e:38:9b:cd:ab:b3:be:ec:d4:cd:53:5e:aa:b2:
02:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0D:2B:10:A7:8E:A0:D1:DF:E3:AF:7F:36:72:B8:46:2B:EE:FA:C1
X509v3 Authority Key Identifier:
keyid:3C:FE:E2:EA:3C:DE:08:73:A1:91:BD:D7:95:22:73:99:B5:6A:43:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a7:ea:0a:09:55:de:5a:b7:68:72:7e:5e:3c:66:bc:85:01:
54:74:e9:ca:4e:63:45:77:32:71:b9:8e:59:4d:82:26:50:01:
e7:00:af:14:72:39:79:4e:5b:f1:75:9b:3e:cb:48:25:5a:83:
a0:58:d0:83:91:c2:09:87:fd:28:37:c7:a5:63:57:47:9b:5f:
89:37:3f:47:e5:04:b6:18:4a:57:af:a1:f4:04:55:85:32:9a:
85:e1:a3:32:59:19:d5:79:49:55:5a:41:e9:64:7f:c7:0d:55:
17:25:a5:90:c3:c6:9c:9b:15:b4:f6:4c:da:ef:59:3d:b6:1c:
34:58:94:bc:76:fb:17:a6:b6:78:8a:04:3e:32:61:ea:bc:f2:
ae:7a:bd:5a:66:d3:8a:89:ef:2c:c1:bf:90:68:a5:31:77:46:
db:e3:e6:89:68:61:90:ea:f7:76:a9:c0:5a:ab:d8:e5:80:9c:
b4:86:78:d2:87:a6:8f:ea:6f:36:be:e9:be:7b:d6:cc:d7:5f:
e1:d6:aa:ba:47:b6:f9:69:7f:3d:e6:f2:ca:57:ae:8e:98:b2:
f1:9e:47:11:48:0e:d5:c5:9d:3e:ab:a3:c1:fc:2d:6f:02:79:
0f:7d:5f:f2:3c:9a:5c:6d:03:fb:cd:53:74:f4:07:eb:00:06:
e2:16:53:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:20:52 2026 by rpki-client