Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
File: PcI-io7JOWsbVM_7JxxVdm2UkZk.mft (raw, json)
Hash identifier: /SJmolqMGu/LVWM7UAXE5KHQ+ArWCPe5ofniwC+OkNg=
Subject key identifier: A6:D9:36:5E:1A:53:E9:FE:71:1A:A0:27:EE:E8:68:55:75:B5:DB:28
Authority key identifier: 3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99
Certificate issuer: /CN=3dc23e8a8ec9396b1b54cffb271c55766d949199
Certificate serial: 01A0D0EE4D9C6E6B489FDE5D84A04D1F34CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
Manifest number: 15D5
Signing time: Thu 24 Sep 2026 01:01:13 +0000
Manifest this update: Thu 24 Sep 2026 01:01:13 +0000
Manifest next update: Fri 25 Sep 2026 01:01:13 +0000
Files and hashes: 1: PcI-io7JOWsbVM_7JxxVdm2UkZk.crl (hash: XTHTc7B0YhXCCEMecpNJeDvK90SNKWcV0E3xKEkl7YA=)
2: TonW-R-Zm7EJ5G4DyPorHXUfsQY.roa (hash: 4NWLdATC5TzLcy4vgySsRMRG+JcNTxLmpZ+bS7QNQno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ee:4d:9c:6e:6b:48:9f:de:5d:84:a0:4d:1f:34:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc23e8a8ec9396b1b54cffb271c55766d949199
Validity
Not Before: Sep 24 01:01:13 2026 GMT
Not After : Sep 25 01:01:13 2026 GMT
Subject: CN=a6d9365e1a53e9fe711aa027eee8685575b5db28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b6:73:fe:82:bc:1a:2f:0f:4d:b4:37:28:7c:
a2:8a:d8:7e:3b:00:c5:d3:52:65:6e:f3:80:96:d2:
1f:d9:d9:b8:4a:87:af:d0:f9:c4:1c:13:d3:dd:4b:
77:65:e6:34:ea:51:2e:89:97:c4:8a:1b:e9:4c:40:
4a:43:a9:a7:e8:dc:e5:3a:ff:9e:3c:74:de:c6:7c:
6e:cc:37:46:a2:16:2a:da:b2:99:7b:c5:8d:a8:ac:
60:a7:25:16:f3:78:6a:f8:0b:ce:a8:ae:35:eb:5a:
4a:58:88:0e:e6:08:72:09:fa:13:2a:ce:3e:3d:3a:
f0:5c:d4:85:d4:27:f0:0c:1e:97:d0:31:82:a3:cf:
eb:86:15:e1:6e:cc:e0:60:c4:60:1c:5f:a8:67:b8:
67:eb:04:85:4c:ca:c9:3c:77:7b:7c:14:b5:c2:2b:
1b:59:87:50:c0:50:aa:2c:50:f1:38:89:ca:c4:02:
ca:1b:a4:e8:46:f1:1d:16:11:b3:b5:64:3f:c0:9b:
cf:4a:3b:96:86:ba:37:e6:ce:26:2c:a6:c5:c7:ea:
f8:35:ec:28:b5:b9:9c:66:db:d1:e2:ad:66:30:9c:
86:72:de:fc:f3:e9:a9:1b:2b:bf:5a:c9:b6:99:a6:
22:15:3c:cd:34:af:0b:bf:ee:a7:c4:f8:a3:bd:4d:
8e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D9:36:5E:1A:53:E9:FE:71:1A:A0:27:EE:E8:68:55:75:B5:DB:28
X509v3 Authority Key Identifier:
keyid:3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c1:d3:a1:eb:31:e2:db:1c:f1:06:f3:79:ac:77:6e:f2:18:
d7:54:29:99:f3:00:f7:c7:23:62:70:66:98:ab:c9:ac:9b:c0:
ad:09:dd:03:1b:5d:c2:55:37:a6:75:b0:dc:0d:fc:a9:8d:de:
a2:9f:d3:59:0d:f8:55:e0:9a:24:e3:b9:02:57:3d:05:d9:6b:
c1:59:b9:11:5d:9f:b1:b7:3b:25:00:01:df:f9:20:a6:41:e5:
ab:c9:6f:32:43:03:a2:a9:c8:7a:de:4e:ce:10:20:3f:f9:30:
ff:17:3f:57:3b:66:36:a4:49:ef:4d:06:a4:a1:1e:eb:60:1b:
e6:b2:77:36:f8:86:50:ad:99:19:f4:28:7d:c7:36:5a:ca:6e:
aa:45:0f:4f:6e:5d:8e:07:e8:b1:01:3d:7a:b4:0c:e6:cf:f1:
d0:70:30:c2:0e:fe:7c:64:5e:25:b5:67:8f:27:75:0f:65:69:
63:6b:c7:0f:35:eb:48:34:ac:16:51:55:9d:64:09:b2:8e:bf:
1b:e5:37:d5:f7:91:7c:10:56:eb:99:49:9c:6a:e2:e9:3b:a9:
f6:bd:bd:41:52:96:99:33:68:10:f8:63:4b:97:ec:53:25:28:
17:34:72:87:bf:87:c1:ee:82:ee:0f:fd:55:e6:9e:47:9f:57:
68:e1:18:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:28:15 2026 by rpki-client