Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
File: PcI-io7JOWsbVM_7JxxVdm2UkZk.mft (raw, json)
Hash identifier: z+w4g9H+9SqTdHadDaS1B/wPNvzIqzOtGFApdqKsXVA=
Subject key identifier: B0:9F:AB:D0:29:EA:EA:53:90:9B:3D:95:53:9D:E8:A7:81:5A:CA:68
Authority key identifier: 3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99
Certificate issuer: /CN=3dc23e8a8ec9396b1b54cffb271c55766d949199
Certificate serial: 01A0CD10DC112EA8E03127FF141F0C170D48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
Manifest number: 15D3
Signing time: Wed 23 Sep 2026 07:00:28 +0000
Manifest this update: Wed 23 Sep 2026 07:00:28 +0000
Manifest next update: Thu 24 Sep 2026 07:00:28 +0000
Files and hashes: 1: PcI-io7JOWsbVM_7JxxVdm2UkZk.crl (hash: bQxJX3lUmxlTp2TspE8QonihsCxH018ZcFcDO7KbHL0=)
2: TonW-R-Zm7EJ5G4DyPorHXUfsQY.roa (hash: 4NWLdATC5TzLcy4vgySsRMRG+JcNTxLmpZ+bS7QNQno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:10:dc:11:2e:a8:e0:31:27:ff:14:1f:0c:17:0d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc23e8a8ec9396b1b54cffb271c55766d949199
Validity
Not Before: Sep 23 07:00:28 2026 GMT
Not After : Sep 24 07:00:28 2026 GMT
Subject: CN=b09fabd029eaea53909b3d95539de8a7815aca68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4f:bd:91:40:b2:3f:af:d8:80:41:5a:cf:fa:
26:c7:ca:c8:37:b2:69:0d:78:83:94:10:6d:a5:1c:
51:d8:c1:3c:71:f9:2f:63:d0:1c:af:14:27:a9:a0:
e0:2d:c5:e2:68:f7:2c:25:f1:74:5a:67:83:ca:75:
0d:0c:83:b7:27:9d:4d:66:66:53:4e:9e:59:9a:ee:
9a:25:34:f3:e1:87:02:4b:17:f5:d6:f6:a9:e6:75:
54:e8:ef:f7:18:56:40:a1:16:ee:fb:f8:49:3c:4f:
7c:38:30:22:f8:5a:b8:16:73:42:50:76:ab:f9:3f:
0d:13:70:d0:92:d0:c6:59:df:f5:51:42:79:41:f5:
95:72:de:06:d8:f3:a8:6f:35:8f:6e:f1:da:c2:45:
ce:9b:43:25:60:a6:3c:d4:5b:5c:4d:fc:49:b5:bc:
e1:21:98:f9:fa:13:cd:be:b8:4a:21:68:8b:ae:23:
f6:36:71:a8:0a:86:a9:1d:eb:7a:00:38:c0:db:f8:
4e:b3:12:1d:ea:1d:f9:f2:1d:c2:6d:5f:3b:88:fe:
ad:5f:3e:79:71:fc:72:7f:38:f4:bd:f2:d2:c5:60:
e1:fc:e8:c0:4f:a3:f4:7f:cf:22:68:bb:6a:e5:6e:
80:7b:ef:ea:2b:73:2c:d4:b6:cc:96:d1:88:cb:15:
10:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9F:AB:D0:29:EA:EA:53:90:9B:3D:95:53:9D:E8:A7:81:5A:CA:68
X509v3 Authority Key Identifier:
keyid:3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:15:31:b4:09:44:4d:f1:c9:da:b7:0a:2b:c4:a6:49:83:52:
a8:15:cd:9a:d1:8b:29:9d:1e:d5:24:6d:f7:fa:26:47:ae:75:
68:b7:fd:1b:ab:50:a1:48:f8:c4:f1:67:db:7d:78:ae:42:19:
53:48:ef:3c:43:82:5a:7a:eb:cb:4d:d6:9e:0c:64:4a:1e:34:
45:d4:92:9f:82:31:47:15:bd:9c:6a:44:68:b7:0e:3a:ab:60:
71:3f:cb:34:2f:13:80:6d:d7:c9:f3:17:6c:9c:2b:04:54:25:
2a:ad:21:08:fa:27:e2:9c:fe:98:36:41:9e:2b:92:69:a4:4c:
20:d6:be:f1:0c:0e:94:11:be:f1:98:bd:f2:61:96:b3:ed:b0:
67:57:e2:4b:d7:47:f5:b1:9f:99:c0:dd:62:29:2e:ca:7f:d0:
41:3f:db:d0:e1:41:8e:5a:29:b7:c5:a4:66:7f:51:c8:71:81:
f8:a8:03:c6:fc:6c:2b:8d:8b:59:62:53:fa:04:fc:b8:97:a9:
83:d9:55:c9:4d:f6:fb:12:81:ef:fd:61:97:78:78:aa:df:dc:
69:76:8f:14:8f:68:82:b0:3f:80:8a:71:ea:2d:b7:1e:18:ac:
ed:79:6a:56:50:3e:9c:67:68:1b:fe:da:31:8a:21:e3:83:3c:
70:28:ec:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:26:53 2026 by rpki-client