Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
File: Pc9PDCdz75iQD5w1kHXMph0XwLM.mft (raw, json)
Hash identifier: yXzhgWi1ZcasSrSW+54vQDMKXnBiHA6g28qrgkbCeLw=
Subject key identifier: 24:29:8D:CF:73:EF:C4:BF:B2:19:4D:BD:8C:06:8B:E4:20:EB:CD:5A
Authority key identifier: 3D:CF:4F:0C:27:73:EF:98:90:0F:9C:35:90:75:CC:A6:1D:17:C0:B3
Certificate issuer: /CN=3dcf4f0c2773ef98900f9c359075cca61d17c0b3
Certificate serial: 019D97E1F4F9BCAF91952525397C36FB090C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
Manifest number: 18BC
Signing time: Thu 16 Apr 2026 20:01:00 +0000
Manifest this update: Thu 16 Apr 2026 20:01:00 +0000
Manifest next update: Fri 17 Apr 2026 20:01:00 +0000
Files and hashes: 1: Pc9PDCdz75iQD5w1kHXMph0XwLM.crl (hash: gu7gKSUZEtt4ssmMogjLD0pLEWa1X/QlI8e2e1S7Dtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:f4:f9:bc:af:91:95:25:25:39:7c:36:fb:09:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dcf4f0c2773ef98900f9c359075cca61d17c0b3
Validity
Not Before: Apr 16 20:01:00 2026 GMT
Not After : Apr 17 20:01:00 2026 GMT
Subject: CN=24298dcf73efc4bfb2194dbd8c068be420ebcd5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:98:d1:f9:39:0e:cb:50:bf:97:00:1d:a6:4c:
e7:3d:2e:3a:45:4e:bf:35:e0:b5:c4:6b:db:06:69:
d3:f4:5f:5e:18:19:e4:b9:4c:25:64:ff:a1:fe:cd:
f5:98:17:a9:93:c8:4f:94:61:2c:99:ae:98:ad:50:
83:85:dc:7f:79:46:79:d7:c0:7d:fa:d2:bb:98:fe:
db:26:22:af:eb:37:37:b0:66:55:e4:2b:41:00:c6:
e9:d1:5b:c6:04:af:db:c3:0d:f6:b7:36:72:71:1e:
8e:66:ee:40:24:33:24:22:d1:bb:00:fa:8c:b8:fe:
0d:73:97:1a:4d:3c:3f:eb:90:d1:92:07:48:ad:ed:
a9:0f:e7:f7:2f:b2:40:26:da:4e:d8:67:2c:3f:08:
e4:c4:66:f5:7f:57:63:47:6a:8c:72:a4:b0:83:dc:
33:4d:46:8b:ea:83:c3:29:9d:46:b6:0a:a9:e1:90:
27:6a:3c:22:8e:f9:ac:a6:7a:2b:af:95:62:e1:35:
62:9f:53:2a:e2:51:96:42:a5:fe:76:92:a3:27:19:
c3:cc:f9:10:b7:22:bf:e4:4e:1b:e9:c4:cc:04:42:
b0:e7:67:ca:b9:dc:59:c2:05:04:c4:91:3f:2c:99:
f8:c4:b3:65:89:90:48:2f:41:21:7e:43:da:da:5e:
95:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:29:8D:CF:73:EF:C4:BF:B2:19:4D:BD:8C:06:8B:E4:20:EB:CD:5A
X509v3 Authority Key Identifier:
keyid:3D:CF:4F:0C:27:73:EF:98:90:0F:9C:35:90:75:CC:A6:1D:17:C0:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:4b:88:1f:87:c5:bb:ba:a4:2e:c3:28:64:29:02:4d:53:4f:
58:b3:b8:25:9f:2c:dd:2b:75:bd:d1:84:78:fc:8e:51:b6:e5:
87:6f:d4:8c:95:f1:ed:70:cf:bb:af:37:37:79:8d:3e:43:a2:
1c:00:cb:fd:49:1c:be:8e:65:21:5e:fd:65:41:2d:da:c1:aa:
2a:ca:1b:dc:7a:d8:69:1a:41:bb:a6:3a:5f:57:af:2f:21:68:
d8:bb:4a:d7:ff:ca:78:04:b9:0b:7a:aa:ae:73:46:98:18:ea:
31:48:49:65:b0:f2:61:ba:c9:d5:a8:a0:93:6f:0b:e1:9d:dc:
0b:04:da:7f:2f:34:4d:18:2e:e1:d3:47:0f:df:56:5b:f8:c4:
1f:6e:80:58:1b:0f:3d:b8:53:c1:f9:a6:fa:e3:4e:2e:ef:c5:
ee:28:df:9c:1a:49:17:b6:ce:98:d1:df:b9:0f:6d:3b:58:46:
22:03:86:26:22:3d:60:b8:a2:d1:28:8c:05:8c:9c:70:70:08:
93:df:04:ac:2b:64:b9:ec:d1:9f:24:96:6b:98:da:14:89:aa:
ec:a0:a4:2f:3b:21:20:7d:72:4d:fc:81:50:76:e0:e4:f2:b6:
2f:58:bc:bc:60:e7:ae:80:25:99:03:07:78:11:ba:84:cc:0f:
f0:83:09:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:28:01 2026 by rpki-client