Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.mft
File: PP7M1r9kBrDPRPaCuTzYbjNGUko.mft (raw, json)
Hash identifier: COhHcAJydIXdodzluDUvl2XucEp2j4X0z4UrKdOuijQ=
Subject key identifier: 33:ED:AD:B3:31:16:42:71:2E:23:F4:90:AB:A3:E1:1C:94:69:45:BF
Authority key identifier: 3C:FE:CC:D6:BF:64:06:B0:CF:44:F6:82:B9:3C:D8:6E:33:46:52:4A
Certificate issuer: /CN=3cfeccd6bf6406b0cf44f682b93cd86e3346524a
Certificate serial: 019D329B0EE0842D7F53AC1345190F118667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PP7M1r9kBrDPRPaCuTzYbjNGUko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.mft
Manifest number: 1402
Signing time: Sat 28 Mar 2026 04:01:55 +0000
Manifest this update: Sat 28 Mar 2026 04:01:55 +0000
Manifest next update: Sun 29 Mar 2026 04:01:55 +0000
Files and hashes: 1: PP7M1r9kBrDPRPaCuTzYbjNGUko.crl (hash: GuVZQqRFIoiDsF/KVrp9z4wmJB8mCF4tVuu5bByPsMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.mft
rsync://rpki.ripe.net/repository/DEFAULT/PP7M1r9kBrDPRPaCuTzYbjNGUko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9b:0e:e0:84:2d:7f:53:ac:13:45:19:0f:11:86:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cfeccd6bf6406b0cf44f682b93cd86e3346524a
Validity
Not Before: Mar 28 04:01:55 2026 GMT
Not After : Mar 29 04:01:55 2026 GMT
Subject: CN=33edadb3311642712e23f490aba3e11c946945bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a9:80:a2:73:26:4c:c0:18:20:f6:f8:34:3d:
48:b7:c9:da:66:fe:b2:4b:52:d7:dc:0a:64:ef:fd:
c7:42:22:ea:fe:aa:3d:22:d7:32:53:4f:5a:9f:c3:
26:33:0a:7b:b2:d3:cc:84:7e:f9:4b:1b:86:af:57:
2b:86:79:8b:bb:b0:48:cc:5a:0d:04:0d:b4:15:14:
5d:46:f3:9e:6f:30:19:4c:e9:9c:b3:59:70:95:00:
21:ea:f2:a7:0e:f3:98:16:e7:cf:96:d1:ab:19:a6:
32:3d:6e:94:8c:6a:27:ed:fc:c8:9c:dc:a7:2a:52:
fe:cc:06:36:1e:d7:d9:8a:75:51:46:7c:f6:50:a5:
b9:87:03:3f:fb:b0:23:d9:64:3f:7e:6a:5d:d2:a5:
98:96:80:de:7b:8b:73:e5:7d:0c:10:49:17:5d:96:
1c:b9:0f:f5:5d:eb:82:e3:2a:92:5e:cb:b0:d5:f5:
f4:ff:79:85:bd:55:80:52:01:33:6c:d0:f0:7c:de:
5a:55:c2:fc:11:86:cc:53:21:fa:b1:22:d2:ff:90:
56:26:31:be:c7:63:03:9c:47:14:48:99:a7:d0:b1:
6d:24:69:80:5c:5b:e9:f2:9b:53:43:21:e6:9a:55:
72:fb:37:78:6d:c3:4c:d6:de:36:be:ad:a7:6b:df:
4d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:ED:AD:B3:31:16:42:71:2E:23:F4:90:AB:A3:E1:1C:94:69:45:BF
X509v3 Authority Key Identifier:
keyid:3C:FE:CC:D6:BF:64:06:B0:CF:44:F6:82:B9:3C:D8:6E:33:46:52:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP7M1r9kBrDPRPaCuTzYbjNGUko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:98:4a:b9:ac:42:eb:ec:5d:28:9d:4c:78:64:dd:cd:16:28:
3f:cf:13:9e:8c:ce:fc:3f:d5:ae:eb:c7:ec:64:e0:d8:75:b7:
3e:13:64:d9:6d:aa:b5:9a:6a:3f:07:da:03:17:f1:c3:c0:cb:
91:99:84:97:aa:b7:39:ee:bc:6e:e5:fb:0a:3e:5e:98:51:b8:
db:f7:f2:1f:ff:32:b9:42:e8:3c:01:b1:4d:8d:4e:2b:ad:e9:
8e:b8:8a:4f:81:80:c1:f8:27:bc:ad:9e:6b:f8:9f:72:ff:36:
35:5e:dc:93:36:5f:7e:a2:c1:29:43:a7:d4:6a:02:9d:62:67:
02:6c:cc:b1:f2:06:80:f5:47:63:7d:61:8b:08:01:0b:51:16:
c4:3a:e7:66:b4:1e:e4:d9:c4:39:db:7a:99:e3:54:f8:4f:08:
58:37:c1:d0:0c:94:2f:43:2c:95:e6:0e:fd:d8:08:9b:16:11:
51:6e:b4:90:72:b7:e5:1b:fe:ce:04:76:03:1a:db:be:9e:22:
a5:8e:50:b9:a6:b4:40:65:87:63:ee:10:6b:3e:c4:c1:be:9f:
a3:2b:0b:12:17:79:dd:f6:d0:b9:21:c3:16:f0:90:84:7c:80:
a5:bf:99:df:7c:73:cd:3a:7d:fc:7d:cf:fc:39:de:a1:58:b3:
6a:88:49:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 14:29:14 2026 by rpki-client