Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
File: PCr6XHBtPrCpLaibXUG5NutJzLg.mft (raw, json)
Hash identifier: XxwioEoiAXzWP18Qec3mt5mgbhrgaDNIFtjmFvVp1Bs=
Subject key identifier: C2:46:55:92:2D:F3:44:C9:E2:02:93:D4:C8:19:D3:CE:B7:AF:85:5F
Authority key identifier: 3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8
Certificate issuer: /CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8
Certificate serial: 019D28841E41D15EA612D88056A58D08408B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
Manifest number: 133F
Signing time: Thu 26 Mar 2026 05:00:40 +0000
Manifest this update: Thu 26 Mar 2026 05:00:40 +0000
Manifest next update: Fri 27 Mar 2026 05:00:40 +0000
Files and hashes: 1: MKEGaibdVBKo4Y86kBLFEKWntWc.roa (hash: wEDcZmG8dZd0uCd7pZvA4Qd89Tl1qRGRFYmO0DbhcdI=)
2: PCr6XHBtPrCpLaibXUG5NutJzLg.crl (hash: Tx1q/ZZgbFUc191mFR9wfYTZjGwsQXwgYB3Vu/xEngg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:1e:41:d1:5e:a6:12:d8:80:56:a5:8d:08:40:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8
Validity
Not Before: Mar 26 05:00:40 2026 GMT
Not After : Mar 27 05:00:40 2026 GMT
Subject: CN=c24655922df344c9e20293d4c819d3ceb7af855f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fa:bd:77:f7:c5:11:45:e8:fb:6a:90:46:17:
6a:82:9c:6b:40:17:60:ef:96:f7:11:91:60:6a:81:
8e:a3:8d:d9:3f:33:a8:ee:58:83:e1:f7:0d:24:cd:
88:dc:b5:0d:3c:51:ea:54:c5:f4:30:04:a8:b0:24:
ac:21:b7:08:67:ec:8d:68:77:a8:8b:4b:ab:16:5f:
a8:38:9d:a2:28:43:5f:0d:45:80:52:bf:c3:76:0c:
6e:ab:21:f1:11:a4:2e:76:6b:1e:31:58:c6:9c:d3:
dd:1b:50:32:e2:b2:c0:53:4e:ba:db:80:6a:f8:91:
00:9b:39:09:a6:03:c3:17:1e:74:cf:cf:41:f8:de:
13:8b:32:45:e3:5c:7c:3b:71:59:ea:d2:61:06:44:
25:58:f9:67:c7:d9:05:ec:07:0d:23:e2:32:9c:82:
68:2c:b7:15:35:91:f7:97:9f:c9:bd:66:73:7f:47:
86:2a:89:f0:41:64:af:1a:56:d0:7a:d2:f3:fd:65:
20:1f:78:8a:ad:7f:6a:97:9d:01:18:45:f5:f0:2f:
fb:df:0b:cc:a0:46:3f:bb:38:72:70:84:63:0b:69:
b6:7e:a1:b8:a6:ed:d4:17:cf:a1:ea:52:55:97:8d:
7c:89:b7:b6:51:b6:de:c0:9a:1e:99:db:ac:bd:30:
1a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:46:55:92:2D:F3:44:C9:E2:02:93:D4:C8:19:D3:CE:B7:AF:85:5F
X509v3 Authority Key Identifier:
keyid:3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a8:a9:5c:b9:21:ad:13:37:4f:62:0b:9a:c8:fd:e8:4c:ae:
f9:6f:7d:b6:85:88:fd:38:40:f4:f1:6e:dc:5a:85:b8:cf:aa:
6b:de:18:46:a4:54:66:93:d0:67:c6:b6:fe:0f:3c:20:e7:d0:
36:e7:a3:bd:01:77:51:4b:9d:87:3b:41:50:0d:37:91:48:c8:
de:e3:2d:6f:51:e1:4d:b0:70:e2:f0:b7:32:0d:aa:fc:93:cd:
5e:7b:f5:d6:98:bd:b6:fc:3d:fa:82:b4:ab:ed:08:1c:83:52:
91:d5:41:1c:ea:21:11:74:b8:86:1f:d9:a3:fc:06:27:c1:70:
8b:1a:9d:55:74:dc:5f:3f:0d:f3:6b:2b:55:8e:cb:c1:2d:1a:
1d:42:a3:96:dd:d3:2e:8d:74:95:12:69:31:9d:75:20:a8:01:
d6:8a:17:9c:9a:45:a2:ae:ba:e3:87:df:28:61:3c:3a:eb:66:
72:75:21:79:53:27:3e:9f:c0:0a:f8:01:7c:b7:fe:d8:d1:dd:
ef:00:6f:4f:ee:ad:88:d8:eb:67:6f:79:51:55:a2:7d:fc:b1:
23:f4:54:3f:b6:70:15:30:28:93:2b:41:9e:b2:ae:2f:88:c1:
84:7d:eb:37:1d:61:5a:84:0e:0a:e7:53:01:1a:36:29:8d:e7:
26:f5:17:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:10:07 2026 by rpki-client