Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
File: PGu5kW2QqkR3ctA_Ce37or3PN5I.mft (raw, json)
Hash identifier: WHAhNun7+lz6xewWX72mXEApjLULdCbML1SsLBCarIY=
Subject key identifier: 32:7A:C0:6A:5F:15:5D:C1:3C:52:02:72:D5:B4:8B:48:F0:CB:0D:6C
Authority key identifier: 3C:6B:B9:91:6D:90:AA:44:77:72:D0:3F:09:ED:FB:A2:BD:CF:37:92
Certificate issuer: /CN=3c6bb9916d90aa447772d03f09edfba2bdcf3792
Certificate serial: 019D27DF91CC6C7F95ED068C5E66440EAF1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
Manifest number: 096B
Signing time: Thu 26 Mar 2026 02:00:56 +0000
Manifest this update: Thu 26 Mar 2026 02:00:56 +0000
Manifest next update: Fri 27 Mar 2026 02:00:56 +0000
Files and hashes: 1: PGu5kW2QqkR3ctA_Ce37or3PN5I.crl (hash: U/jVAipnYUrnGpGqZYDnhrQfxe9URiNUTWCLNYv09Bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:91:cc:6c:7f:95:ed:06:8c:5e:66:44:0e:af:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c6bb9916d90aa447772d03f09edfba2bdcf3792
Validity
Not Before: Mar 26 02:00:56 2026 GMT
Not After : Mar 27 02:00:56 2026 GMT
Subject: CN=327ac06a5f155dc13c520272d5b48b48f0cb0d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ba:de:a8:f4:8e:51:2e:9b:82:48:1a:88:2e:
08:e6:7d:6e:45:26:48:c3:cb:24:78:1c:9c:ad:9c:
d2:08:93:be:d2:fe:07:99:f6:5d:23:fa:1e:34:63:
80:3e:f9:7b:c0:98:cf:83:c5:4f:d1:fa:2f:64:a6:
ec:7d:61:e4:ef:90:79:68:5d:2d:0f:db:ba:5b:9f:
38:8f:28:5b:fe:50:7a:a2:45:01:b2:78:5c:62:75:
cb:c3:6d:b1:c1:c0:2b:b9:2c:97:86:a0:66:4f:c9:
ac:ee:e1:3d:e6:9b:24:11:15:9e:4c:d5:ad:4b:ed:
bb:94:a1:df:d9:d7:7c:c6:14:2c:b6:d1:95:de:0f:
5d:68:d9:fb:d3:ce:e8:21:bb:27:8e:1d:fa:fa:43:
64:29:ac:3a:c4:b5:48:ef:ff:9c:e0:4a:d7:a9:45:
35:10:c3:54:3d:6d:7a:fd:bf:ce:55:3d:71:4b:36:
83:ab:8a:7d:ba:63:04:d4:d1:a6:4e:6c:7b:cd:23:
7e:3e:0f:c6:6c:b0:14:74:a6:3d:3c:29:86:04:98:
88:d7:22:8f:ea:20:e1:70:e8:8d:92:0f:01:47:b4:
97:1c:12:65:49:02:f4:e1:a9:ed:86:a5:8b:29:f2:
62:bc:8a:09:c3:2e:ae:35:cc:61:a6:39:a6:1a:0d:
82:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7A:C0:6A:5F:15:5D:C1:3C:52:02:72:D5:B4:8B:48:F0:CB:0D:6C
X509v3 Authority Key Identifier:
keyid:3C:6B:B9:91:6D:90:AA:44:77:72:D0:3F:09:ED:FB:A2:BD:CF:37:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:77:ba:4c:b5:4c:6b:97:4c:35:1f:68:41:17:26:ff:55:9c:
a6:21:55:47:5f:ad:28:ab:11:9b:49:9a:6f:cc:f0:c4:ef:b3:
58:98:cd:a3:50:da:0e:b9:63:7c:af:32:ef:e3:8c:b9:42:65:
89:c2:b2:16:59:af:2d:97:c9:68:ab:07:8a:6c:61:fd:45:b5:
35:eb:eb:91:52:88:57:82:bc:5e:5d:b4:c3:b3:44:1a:9e:30:
7d:20:13:2a:41:c4:d0:db:76:e1:fe:52:71:f5:2c:32:f6:17:
c3:b2:14:b4:77:e5:a6:b3:1d:ba:f7:13:14:1a:4b:38:42:0a:
ac:9f:39:2a:d8:1d:49:ae:7c:e8:d7:66:1b:9c:3f:a3:a5:9e:
a4:67:f7:e4:45:6e:43:90:8a:58:d0:fe:13:e9:8c:23:84:9c:
14:02:b9:1d:94:28:fe:23:d3:21:b4:3a:79:9a:4c:69:e9:33:
52:14:26:ba:b4:e4:5f:04:70:2a:b8:a4:47:50:24:5e:75:9e:
6b:46:f8:4f:4b:02:27:89:ad:63:7a:9d:53:87:47:0a:da:01:
bb:2e:bc:56:de:6c:a2:25:a5:09:35:2c:00:e1:0b:87:32:2a:
84:5e:04:c2:25:1b:88:ea:d8:93:28:4e:81:59:3a:a7:53:41:
b4:81:2d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:55:37 2026 by rpki-client