Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
File: PcOGJxwOCo0B-xkNaNhf92TRatQ.mft (raw, json)
Hash identifier: /tMSO+SwXvBNkmS2RjMtI7xx0kOvz/7wF5fLW3RFrmA=
Subject key identifier: 7B:65:D0:A4:38:D4:DB:50:44:BD:D5:B6:AA:06:82:0D:F5:3E:FE:49
Authority key identifier: 3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4
Certificate issuer: /CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4
Certificate serial: 019D27726049007409145231A5D8FD9E0B6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
Manifest number: 0663
Signing time: Thu 26 Mar 2026 00:01:40 +0000
Manifest this update: Thu 26 Mar 2026 00:01:40 +0000
Manifest next update: Fri 27 Mar 2026 00:01:40 +0000
Files and hashes: 1: 6Nl-yKrSE7jmZ8LWgcVcWgQlgFg.roa (hash: /v6LQ7GwS5mzr12Ho4pwZqcEQ6oaSt3ITA8fvgcD220=)
2: PcOGJxwOCo0B-xkNaNhf92TRatQ.crl (hash: 4JbYnoPDp/CtCDRb+cLo/bjXc8l0JDVmXCgkM+Y0Xps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:60:49:00:74:09:14:52:31:a5:d8:fd:9e:0b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4
Validity
Not Before: Mar 26 00:01:40 2026 GMT
Not After : Mar 27 00:01:40 2026 GMT
Subject: CN=7b65d0a438d4db5044bdd5b6aa06820df53efe49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c0:44:6b:c7:f3:d6:13:82:16:61:51:1d:30:
70:32:cc:a0:f7:eb:b9:52:d9:05:6a:95:67:9c:13:
1a:4f:99:2b:31:f4:50:8b:6a:af:01:c6:c8:87:f7:
4b:7e:c4:ea:5f:02:12:fb:3e:25:2b:dd:57:1b:bd:
15:1f:84:7c:71:4d:16:b1:0d:41:f4:00:6c:c6:37:
d9:fa:ed:b4:a5:65:58:7b:86:90:25:54:79:38:55:
54:f5:f5:52:3f:84:34:20:1d:7b:57:d0:ee:55:f9:
f7:c0:a9:c7:35:a7:f9:5d:0a:c8:2f:2b:ba:2d:c7:
7b:2a:71:db:12:5c:0d:d9:11:59:ff:37:38:9b:66:
5f:fb:47:9d:c3:ba:48:d4:30:9f:3c:d2:fe:1b:70:
6b:d3:14:cf:cc:15:6c:d1:3a:b2:d1:ed:1c:23:1f:
49:9f:fd:c5:96:f4:c0:87:5a:8a:3e:3c:12:a0:90:
aa:98:5a:33:33:45:a2:66:34:eb:46:6b:27:7d:d0:
a8:10:95:f0:83:83:30:9e:3d:57:f0:21:50:17:03:
48:ce:88:51:43:b8:61:35:bc:2d:ec:d0:35:d2:a5:
43:e2:73:cc:ea:6e:68:28:85:94:91:4a:8b:0d:a2:
4e:c1:bc:a4:a7:65:e0:5c:09:d1:26:42:d2:e1:13:
29:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:65:D0:A4:38:D4:DB:50:44:BD:D5:B6:AA:06:82:0D:F5:3E:FE:49
X509v3 Authority Key Identifier:
keyid:3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3e:5f:94:62:01:90:e7:fe:6b:0e:91:44:6a:8f:16:84:5a:
0d:f8:fd:f0:ae:cf:f5:aa:4e:21:b8:0c:ad:b6:bb:12:73:3e:
4c:ad:26:9f:0b:bf:8b:02:4b:37:2f:7f:8d:c4:f6:07:64:c8:
f2:0e:fc:f3:ca:99:93:cf:66:7f:12:39:33:d1:c1:cf:7a:16:
4d:60:10:2e:d5:4f:c1:ef:a6:79:c8:df:b8:1e:62:27:26:3d:
c8:3c:93:32:52:81:ec:22:d6:0e:c7:82:74:b6:a6:ce:5f:24:
fc:6f:f3:0d:c3:46:2c:a9:63:46:78:d5:ed:ec:1a:c0:88:d1:
65:28:4e:f5:1c:56:b7:e2:df:b8:e6:58:45:8e:b6:50:0a:36:
e6:1a:dc:46:d1:f7:52:fe:ee:d9:f3:76:48:20:0a:d8:c0:2a:
11:c2:c7:e1:ea:32:13:40:ee:4b:f4:ea:ca:e6:0c:0b:a1:13:
e5:34:45:0c:0e:1c:53:e0:02:74:98:4b:d0:6b:bb:a8:92:13:
3d:34:da:7d:0b:07:23:f9:4e:a1:6a:fe:82:a8:55:55:59:18:
e2:9b:e4:13:24:d9:15:80:46:4c:86:f1:9f:f9:68:4f:f8:69:
11:4e:35:08:f7:e1:b0:29:10:ba:5a:b4:78:50:cf:38:38:53:
b7:3e:94:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:33 2026 by rpki-client