Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
File: PcI-io7JOWsbVM_7JxxVdm2UkZk.mft (raw, json)
Hash identifier: PSAd1ttnxRx9ubhKHmRihX57nnmU4O5JMrYR0AtVJ0c=
Subject key identifier: 7D:25:70:C7:B0:A9:F4:67:98:AD:60:16:03:95:A4:5C:A0:FB:72:43
Authority key identifier: 3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99
Certificate issuer: /CN=3dc23e8a8ec9396b1b54cffb271c55766d949199
Certificate serial: 019D265FB39A39BBE2A88D0A447B6F3D971C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
Manifest number: 13EF
Signing time: Wed 25 Mar 2026 19:01:39 +0000
Manifest this update: Wed 25 Mar 2026 19:01:39 +0000
Manifest next update: Thu 26 Mar 2026 19:01:39 +0000
Files and hashes: 1: PcI-io7JOWsbVM_7JxxVdm2UkZk.crl (hash: 8Gpk+jluo3q8jNQne+B/9rdtFqIR3HTBXrdNAdHPj6M=)
2: TonW-R-Zm7EJ5G4DyPorHXUfsQY.roa (hash: 4NWLdATC5TzLcy4vgySsRMRG+JcNTxLmpZ+bS7QNQno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:b3:9a:39:bb:e2:a8:8d:0a:44:7b:6f:3d:97:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc23e8a8ec9396b1b54cffb271c55766d949199
Validity
Not Before: Mar 25 19:01:39 2026 GMT
Not After : Mar 26 19:01:39 2026 GMT
Subject: CN=7d2570c7b0a9f46798ad60160395a45ca0fb7243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1f:56:80:0b:09:2e:02:7d:87:d0:f2:33:e8:
c2:84:c1:b4:1f:4c:6d:47:10:4f:36:33:af:64:7d:
a0:c6:38:3e:d1:96:10:88:7e:8f:ee:3f:ad:8a:c5:
35:ec:2a:28:a1:23:0e:f1:9d:e6:e0:fa:55:45:48:
5e:1b:15:d9:87:5d:e9:5c:45:f8:79:f1:60:b0:02:
44:6a:d2:82:dc:05:9b:86:f2:f3:20:b1:e5:01:64:
74:5a:72:00:56:89:71:05:9a:3a:aa:e2:c5:4b:c1:
0f:5f:12:88:db:fd:8c:c8:b1:f1:63:b9:f9:0f:b2:
a1:7e:41:7f:ee:18:e6:26:40:d9:ce:d3:a4:48:33:
cc:da:df:35:b5:3e:b5:ab:9e:4f:b9:f4:94:48:b6:
c3:76:4f:64:71:5e:63:08:36:5f:b2:0f:31:4e:df:
63:ad:8e:31:fa:e4:c6:a1:e2:7d:59:a7:0a:3c:c3:
fc:4b:54:8e:e9:da:fb:12:dc:a6:a0:f5:87:b9:ad:
96:a2:60:80:56:d5:a6:0e:ac:ba:ec:74:2d:c2:fa:
db:73:78:b7:16:75:e7:11:4a:6b:ee:44:87:98:47:
71:57:4a:7c:a3:e6:3d:74:9e:af:ba:18:2f:ed:94:
21:1e:d4:6a:21:07:2a:5a:b2:82:0d:19:ad:9c:ed:
20:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:25:70:C7:B0:A9:F4:67:98:AD:60:16:03:95:A4:5C:A0:FB:72:43
X509v3 Authority Key Identifier:
keyid:3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b6:55:99:45:9a:bd:70:93:76:41:ca:a3:11:c4:e1:d8:51:
52:4f:16:de:be:b4:08:26:01:48:c1:8d:4d:4d:81:ca:c5:51:
83:20:f5:a4:20:e2:1d:37:90:58:9b:b7:e8:8d:88:73:a9:ac:
f2:fa:47:51:ed:0e:cc:3c:9b:f4:c9:d3:54:6f:6d:dc:60:8e:
56:a5:a2:10:bb:b7:15:d3:fb:7b:06:1b:ee:7c:4d:39:99:87:
92:a2:76:87:45:ac:95:63:a0:17:b1:14:41:28:ea:e0:6d:31:
a0:d2:08:d7:8f:ae:d1:2d:37:9e:0f:7d:45:91:0d:af:23:93:
0c:de:61:d0:9d:5b:b5:dd:4b:a2:6d:94:b7:4b:13:cf:19:48:
2c:8e:5a:84:29:09:1c:04:80:af:56:2e:ef:c8:bf:72:aa:99:
41:00:99:30:17:15:63:ab:f2:71:09:aa:ef:6d:60:c6:a4:f9:
33:54:0a:39:14:28:b9:56:88:3f:de:60:46:46:ba:3a:23:a3:
be:8b:ec:33:8d:88:47:92:8b:61:48:f7:f2:e4:70:77:3a:13:
ed:e6:2f:3e:9a:57:74:a0:d5:2a:02:46:25:a9:7a:21:99:44:
e1:38:9c:15:f8:10:fb:0d:6b:97:d4:a4:95:3c:8a:ac:ad:98:
af:4a:69:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:31 2026 by rpki-client