Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
File: Pc9PDCdz75iQD5w1kHXMph0XwLM.mft (raw, json)
Hash identifier: 30ivaerXY3HQLkL3Okmubq2tdK1+8k+JekGk3a0gJiU=
Subject key identifier: 79:7B:51:BE:BA:0F:79:C9:A2:14:E5:2B:5F:A5:1E:05:86:75:EC:D8
Authority key identifier: 3D:CF:4F:0C:27:73:EF:98:90:0F:9C:35:90:75:CC:A6:1D:17:C0:B3
Certificate issuer: /CN=3dcf4f0c2773ef98900f9c359075cca61d17c0b3
Certificate serial: 019CAC4709FCBCADA88C072C1DB97C5F687E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
Manifest number: 1842
Signing time: Mon 02 Mar 2026 02:01:02 +0000
Manifest this update: Mon 02 Mar 2026 02:01:02 +0000
Manifest next update: Tue 03 Mar 2026 02:01:02 +0000
Files and hashes: 1: Pc9PDCdz75iQD5w1kHXMph0XwLM.crl (hash: KbkmRlHA9qBipjAeFAFMpOze9Ga5YXV9G1tIXupy08k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:09:fc:bc:ad:a8:8c:07:2c:1d:b9:7c:5f:68:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dcf4f0c2773ef98900f9c359075cca61d17c0b3
Validity
Not Before: Mar 2 02:01:02 2026 GMT
Not After : Mar 3 02:01:02 2026 GMT
Subject: CN=797b51beba0f79c9a214e52b5fa51e058675ecd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:39:e2:bf:cd:70:67:df:17:8e:e6:d4:57:b4:
f5:97:8f:05:bc:01:58:19:03:0c:cf:21:6b:42:b9:
16:75:86:8d:e1:a3:c6:ad:f7:d0:29:40:d2:c2:92:
37:75:ef:86:5d:71:1e:79:95:d0:0e:8b:1f:22:37:
16:0e:e5:0d:ef:c6:e0:b5:fa:80:67:fc:ae:bf:08:
b5:b9:c0:84:ec:40:0f:75:33:c3:66:c3:52:b4:af:
99:e6:16:1e:17:55:09:3e:ae:2c:5a:f6:95:5f:20:
56:52:c3:a2:0f:51:c7:70:62:00:c5:20:f8:5b:d5:
1c:1c:00:18:aa:8e:94:56:88:59:d2:b1:df:5b:d4:
79:1c:32:3c:56:f3:55:fd:43:5a:ae:29:96:53:50:
56:ae:f0:b8:b0:d6:e2:29:24:46:97:c1:e8:27:68:
41:cd:31:47:da:52:85:1e:d6:40:c2:c6:5e:61:36:
bd:48:d8:c5:d6:31:3e:da:de:c1:08:5a:64:53:a5:
ab:a5:e6:2c:b0:6c:2e:ca:5d:8c:92:5c:9f:9a:2a:
04:62:54:bc:1f:19:96:c7:eb:5c:ca:fa:4a:74:8e:
8e:2a:13:28:73:aa:03:bb:36:75:ba:15:7c:73:07:
b7:0d:e0:b5:9a:b4:b7:14:b3:df:2e:ba:cb:78:d3:
3a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7B:51:BE:BA:0F:79:C9:A2:14:E5:2B:5F:A5:1E:05:86:75:EC:D8
X509v3 Authority Key Identifier:
keyid:3D:CF:4F:0C:27:73:EF:98:90:0F:9C:35:90:75:CC:A6:1D:17:C0:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:62:74:92:24:0d:51:22:86:f5:9e:fe:5f:90:fc:59:9d:8f:
26:05:ae:27:ce:cc:ea:d6:e4:a4:d4:88:6c:2c:4d:58:c4:b9:
e8:89:24:37:cd:83:86:b6:21:f7:1a:ad:03:37:4a:c6:86:1e:
22:91:f5:87:9f:6e:9c:ea:91:e7:3f:13:33:4b:81:57:f7:77:
13:21:2c:98:0e:73:fd:f0:0c:8c:9d:d7:8f:4d:47:49:e3:88:
0d:bd:ce:f7:06:7e:bd:e6:14:40:84:63:00:81:4a:bf:18:3f:
e4:3d:59:44:24:37:57:f6:a8:f8:c8:3d:22:38:26:70:90:e4:
0b:1d:e9:fd:1b:f3:3b:04:d1:75:3d:08:bf:80:e7:d2:14:d8:
de:52:cd:1a:8c:f2:ea:fb:c0:7c:92:56:83:cf:3e:43:db:d5:
f7:e5:2e:95:ec:8f:45:7e:1a:63:f2:14:54:b3:94:52:32:d1:
45:88:8f:17:a3:35:22:84:8e:b8:f1:09:37:01:52:4b:1a:0a:
e1:3f:91:f8:e6:0b:98:bb:bc:f7:a4:b5:50:d7:b4:51:fe:45:
9e:03:1b:2c:6a:18:eb:c0:d1:75:04:be:a3:0b:3e:85:87:b7:
0d:2c:06:06:92:39:b8:c1:6a:e7:c7:ce:09:e6:95:3f:2a:ef:
fa:eb:71:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:39 2026 by rpki-client