Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
File: PP8fKxF18GBdAl5RAXNpwcqLGkY.mft (raw, json)
Hash identifier: irRGvf0TeSxGynpuVFmKNRHjtkYrXDlic0otVAkG7WE=
Subject key identifier: 1F:14:5C:A4:D2:36:5A:7A:56:CF:E5:08:9E:3D:69:0A:F4:B6:79:2A
Authority key identifier: 3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46
Certificate issuer: /CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46
Certificate serial: 019D27DF79370C70D0BFB4414CCE69357700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 02:00:50 +0000
Manifest this update: Thu 26 Mar 2026 02:00:50 +0000
Manifest next update: Fri 27 Mar 2026 02:00:50 +0000
Files and hashes: 1: PP8fKxF18GBdAl5RAXNpwcqLGkY.crl (hash: KRTrbrveQM8mn2oulQNCrmY6MuJdxouHO4iKp0GMx54=)
2: wXINTHM3KqkNQiOuyaFEznGq6_I.roa (hash: CBrAjvZnvJ+pznTkA8zKPHX79jqdqYinxbkP2/HU+Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:79:37:0c:70:d0:bf:b4:41:4c:ce:69:35:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46
Validity
Not Before: Mar 26 02:00:50 2026 GMT
Not After : Mar 27 02:00:50 2026 GMT
Subject: CN=1f145ca4d2365a7a56cfe5089e3d690af4b6792a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0f:6f:f0:45:fa:ac:ef:27:53:3b:2d:18:00:
3a:32:40:4c:19:4f:31:07:76:de:dd:bc:6c:fb:06:
85:4a:77:0a:7d:f6:7c:d5:b9:1d:40:a4:f0:18:08:
03:6e:22:36:51:0b:b6:f9:b3:16:e2:46:76:80:59:
27:9b:2e:ea:73:82:68:41:08:6c:6a:ed:86:f2:c5:
c1:1a:86:b8:4a:49:eb:9f:f1:2c:21:c2:94:33:fd:
d9:83:90:84:30:a3:3b:70:7c:34:b6:e6:d6:b9:31:
d5:43:c8:97:1c:25:9c:5c:ff:d6:3e:f3:00:a4:db:
23:b7:6c:af:2a:a6:a9:a4:9e:23:c1:eb:98:74:3e:
fd:ac:30:df:50:1c:7d:a7:4f:b4:ef:0c:66:7e:42:
d2:d3:12:7e:09:9a:65:13:e0:e9:cb:a1:59:77:a9:
26:d7:23:5f:82:02:07:20:4c:a0:88:05:aa:b5:21:
0a:e1:25:d1:66:ed:f1:22:ee:30:4d:55:67:0f:69:
09:35:38:31:10:11:28:59:7d:0a:0f:ea:6e:c6:18:
22:e5:ce:1f:25:9d:de:f6:e2:46:36:ed:66:26:59:
2f:a1:c0:3f:64:b2:6f:28:47:8b:cc:29:47:f9:29:
63:0f:1f:1e:ae:9f:31:ab:2e:06:15:d4:73:db:ed:
e2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:14:5C:A4:D2:36:5A:7A:56:CF:E5:08:9E:3D:69:0A:F4:B6:79:2A
X509v3 Authority Key Identifier:
keyid:3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:5e:98:15:31:b8:a2:49:ea:63:a8:59:db:42:59:37:33:f3:
9c:2b:56:11:0b:e5:27:8e:0e:ef:55:d1:61:52:67:45:f1:73:
a0:32:6d:bf:f6:cf:d9:b2:45:6c:61:b0:1e:2c:95:40:fa:2e:
c6:c8:f1:2b:4e:85:14:50:72:f1:97:0f:d9:8d:ab:11:f3:59:
3f:81:3c:90:09:26:96:c6:e6:da:a9:c6:b0:7f:fc:8e:be:ea:
12:ca:d7:82:eb:35:25:5f:d7:65:85:4f:7f:25:43:8d:9a:d9:
61:d6:b9:26:fd:62:18:10:c1:6f:87:a2:56:16:7c:39:e4:65:
31:69:4c:54:5a:f3:d1:98:82:e3:a3:e8:27:d7:19:90:e8:48:
15:4f:fe:75:d1:f1:7c:fc:89:c7:42:6b:fd:6f:c6:d9:c1:a1:
07:c5:d9:3a:e5:ed:0f:b8:84:06:8a:62:89:a7:83:7a:cf:50:
aa:71:b4:51:2e:d2:ce:52:b3:1c:0e:90:33:6a:3b:ad:fe:0a:
c4:2e:49:a2:9e:71:8c:e3:ed:3a:05:8b:87:ea:27:74:d1:b3:
de:22:64:48:08:bd:cf:eb:2b:1c:5f:b1:e1:6a:9c:1d:d0:b7:
ef:11:43:6f:25:73:68:f0:c9:04:6b:c5:3b:0d:37:6b:84:b0:
02:cf:51:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:58:54 2026 by rpki-client