Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
File: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft (raw, json)
Hash identifier: +yTo/llm+FWmb3iUihgYvkILBoHCs4MNV742X12YnnE=
Subject key identifier: F3:0A:53:49:4F:05:DA:0E:4E:9F:87:AC:8F:10:55:5B:F2:2B:0B:A4
Authority key identifier: 3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4
Certificate issuer: /CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
Certificate serial: 019D27E02E8E41CDFDEAD0EBEAD54069738B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
Manifest number: 0643
Signing time: Thu 26 Mar 2026 02:01:36 +0000
Manifest this update: Thu 26 Mar 2026 02:01:36 +0000
Manifest next update: Fri 27 Mar 2026 02:01:36 +0000
Files and hashes: 1: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl (hash: sAWkxext3P2cx5nmcYtdEoRV3x+hXllBe3Q8P0S51wA=)
2: vYMGfpWvYNZs02-62C7WJ9xAV3E.roa (hash: sKzGuqCRJukA31DoIxhryBDpKKKc57ySQcucjlkvX1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:2e:8e:41:cd:fd:ea:d0:eb:ea:d5:40:69:73:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
Validity
Not Before: Mar 26 02:01:36 2026 GMT
Not After : Mar 27 02:01:36 2026 GMT
Subject: CN=f30a53494f05da0e4e9f87ac8f10555bf22b0ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:81:31:59:a7:21:07:0e:d9:fd:7e:7f:3e:fe:
6d:41:8e:e7:3f:51:cd:a4:16:35:97:98:22:d7:e2:
b6:f8:80:7b:eb:ff:a9:9b:44:ce:02:da:5b:ab:70:
3e:41:19:da:bc:89:dd:d1:72:bd:99:c7:bc:29:cd:
f8:fc:29:56:6c:91:1f:3c:99:c7:ce:fa:14:5f:63:
2d:af:17:a1:b8:a2:b1:47:3a:4d:51:70:a8:be:19:
0f:1c:18:81:eb:da:ca:0d:a0:6c:98:f7:68:cd:9e:
75:68:f4:9c:bf:cf:4b:e3:eb:a4:da:4e:bd:fd:3f:
9b:4c:01:a6:bf:15:5a:81:76:fc:e0:51:1f:7d:3e:
d8:47:53:ae:1a:07:c6:70:b0:da:ac:03:bd:56:0c:
82:3b:89:d1:8a:6c:a4:4a:63:52:8f:9f:db:b6:19:
bd:a8:d7:5a:a4:6a:a1:ea:7b:b6:80:cb:12:15:4e:
80:83:fa:81:87:85:12:57:eb:9f:a1:44:80:f3:f8:
68:db:51:20:99:66:5d:70:79:b1:b1:54:6d:c6:22:
ad:e2:92:a7:b7:55:07:8c:4c:a0:26:29:d7:86:66:
19:6c:24:d3:f2:65:07:e7:09:fb:a4:02:36:cc:68:
a1:52:71:bc:9b:a3:8d:96:2c:2b:10:47:8b:a8:ac:
a0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0A:53:49:4F:05:DA:0E:4E:9F:87:AC:8F:10:55:5B:F2:2B:0B:A4
X509v3 Authority Key Identifier:
keyid:3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:38:6d:da:5c:4d:98:e0:6c:61:bc:aa:93:19:80:a3:2a:a8:
5c:ca:d9:d4:9b:d9:70:f4:eb:81:8a:4d:66:9b:a9:53:34:3e:
2d:e6:60:7d:1d:72:00:12:d9:34:b0:09:00:f8:78:e1:ed:4b:
6a:c6:7e:9f:96:29:7a:b6:6f:07:5d:a5:3b:8f:7f:43:b7:38:
44:6d:4d:ea:ac:4a:8e:fd:b8:38:84:eb:3c:72:1b:62:07:05:
e9:33:73:b4:96:f4:41:05:99:a5:12:e9:2c:f7:01:7c:3e:a4:
f9:a6:c9:6b:03:e3:f1:d3:be:61:0d:4e:2c:39:c3:f5:ce:98:
29:e3:2a:f9:5c:36:72:12:77:d8:eb:8c:b2:df:21:38:00:7f:
11:2c:a2:69:6a:48:11:2d:a3:14:8e:f8:6a:cc:34:90:f7:65:
16:51:45:78:38:78:29:85:18:f0:a3:26:05:88:e0:d2:87:0e:
23:7a:c5:0a:66:82:ef:3c:19:ae:8c:ac:fe:66:90:71:2a:fc:
02:3b:a1:f4:6d:70:a9:12:d3:84:4c:68:0f:a1:da:0b:9e:0e:
79:a6:7c:e7:c5:ea:49:37:70:23:c7:eb:2f:a3:0e:b0:69:7c:
d3:1c:47:92:94:70:fb:81:ec:4c:c2:e9:43:7e:1c:63:11:d1:
0b:08:19:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:37 2026 by rpki-client