Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
File: d-PCkAtZl1QoPyfztOjX9sRRCXI.mft (raw, json)
Hash identifier: Jpuja1Syw/eHgCEPwD01khR1BXz9lnbj0x5iBWhJ+Mk=
Subject key identifier: 35:E7:B5:2F:BF:90:1D:59:8F:48:84:7F:22:EA:E4:17:18:92:DB:DF
Authority key identifier: 77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72
Certificate issuer: /CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
Certificate serial: 019D98F4951532B0433CCC4B44E42064DEED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
Manifest number: 1014
Signing time: Fri 17 Apr 2026 01:00:58 +0000
Manifest this update: Fri 17 Apr 2026 01:00:58 +0000
Manifest next update: Sat 18 Apr 2026 01:00:58 +0000
Files and hashes: 1: EGK4nb9z9VfWmRRiWLjjvzCPL0k.roa (hash: 6m0dtYv3ZvmHrMVqOYfbNP/IRoFizFOn4VneAK9Wapo=)
2: d-PCkAtZl1QoPyfztOjX9sRRCXI.crl (hash: zTOA8ZBiR6aMZf9Og2WUbKHlOqOpFvhUOr/3zMNZvC8=)
3: ebEe0KFXRt6CKgcr6dQsEMc5q2I.roa (hash: npVCU+u49BuM8enRn8nrbB2PIwcLlnC6iNP5aZaAass=)
4: zvfze04wd9Ww6fC_EKoJBvHb03A.roa (hash: hqV4t/kgHH9kucLz+TkShbpTOt1VzgMM/WaloxQJWb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:95:15:32:b0:43:3c:cc:4b:44:e4:20:64:de:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
Validity
Not Before: Apr 17 01:00:58 2026 GMT
Not After : Apr 18 01:00:58 2026 GMT
Subject: CN=35e7b52fbf901d598f48847f22eae4171892dbdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5b:6d:d5:b7:cb:83:d3:d7:76:a5:d4:e5:87:
1e:1d:cf:82:23:69:26:ce:52:6f:5b:46:82:ee:9d:
4e:30:13:42:dd:2d:a3:67:2c:7a:80:f1:9b:8f:21:
b0:d4:7b:be:c0:b5:42:2a:b6:38:c2:42:7f:79:ab:
9f:bb:f3:eb:c7:ff:a3:a7:25:14:7a:4c:eb:71:4c:
be:c0:a1:58:c8:f8:a4:27:55:76:5c:7e:0a:db:d2:
23:ba:4a:f9:1c:d1:77:e8:17:3a:fc:92:17:69:b8:
75:a3:28:c2:4c:d9:5a:a3:a1:5d:b5:e5:43:32:31:
d3:c3:73:db:ca:80:91:f5:65:e9:65:fe:96:81:4c:
33:8f:7a:ed:79:57:0c:fb:d4:36:01:2c:08:b4:cf:
e2:f0:5a:6e:3d:43:dc:2a:12:77:54:c5:8f:2f:eb:
20:ac:f5:65:6b:b5:90:f6:e8:0b:23:03:6f:4e:d1:
a9:80:1c:3e:32:58:c7:d3:6c:45:15:f0:a4:5c:40:
f4:ef:06:5e:8c:3a:fc:2e:e5:c7:b0:08:45:5c:30:
6e:7a:28:1e:5a:5c:ac:8e:88:93:62:d1:a1:0b:6c:
65:47:83:91:86:6c:c3:c9:e9:1b:e3:6a:d6:5f:c9:
bf:ba:19:d6:fb:e7:19:ba:b1:2b:db:75:32:6b:8b:
1a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E7:B5:2F:BF:90:1D:59:8F:48:84:7F:22:EA:E4:17:18:92:DB:DF
X509v3 Authority Key Identifier:
keyid:77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:00:f2:2c:2e:d1:fe:21:29:20:dc:db:bd:eb:af:f6:e0:40:
c1:cb:21:5c:b6:e0:9c:32:9d:1d:c0:fd:b1:05:96:f2:2e:49:
6e:a1:2f:21:1e:44:5d:c7:89:d2:60:5e:a7:57:0e:ee:be:d9:
41:db:83:4a:d1:7e:14:9b:14:b3:7e:d4:62:7c:e3:f2:e5:7c:
35:7f:a4:39:c2:d6:84:93:f8:dd:81:2e:03:ff:ec:89:8a:f5:
3a:3c:b6:a8:77:37:c9:c0:41:c6:02:71:b9:8e:21:62:30:c8:
38:71:8d:b6:33:ea:54:5d:6a:d4:86:c4:f7:dd:41:90:d5:6e:
f3:ac:a3:d3:48:6a:cc:42:ca:c9:16:09:cc:cc:65:ee:10:46:
32:2b:41:61:be:d6:0d:1b:45:23:83:38:51:ef:72:3a:09:36:
2f:9f:50:8f:42:89:a4:24:87:f3:15:b6:a0:b8:1a:e4:8e:71:
f6:f7:60:c1:fa:87:91:58:a7:39:88:bb:9f:df:3c:32:06:c0:
1d:7c:15:b2:1f:04:b4:e5:62:f6:30:2c:f8:71:8a:12:46:6c:
01:af:fd:e2:1a:1b:68:7a:3f:91:51:24:e3:20:e3:77:95:89:
ec:26:86:40:0a:7a:aa:7b:0a:47:be:8b:15:11:59:3d:8b:c2:
14:a9:d1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:26:54 2026 by rpki-client