Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft
File: PI0Z2SQBkcNql0ti35PCIUNtm90.mft (raw, json)
Hash identifier: wVwrVBFNvYoip9aLNZtlZLhdNijnp6TWeBfKi0yklVw=
Subject key identifier: 92:51:AB:04:4A:3C:23:32:D2:50:99:A3:6C:51:ED:A6:06:08:A7:4D
Authority key identifier: 3C:8D:19:D9:24:01:91:C3:6A:97:4B:62:DF:93:C2:21:43:6D:9B:DD
Certificate issuer: /CN=3c8d19d9240191c36a974b62df93c221436d9bdd
Certificate serial: 019D98F4DAFCC6445523424570FE52B8F4CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI0Z2SQBkcNql0ti35PCIUNtm90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft
Manifest number: 0CFB
Signing time: Fri 17 Apr 2026 01:01:16 +0000
Manifest this update: Fri 17 Apr 2026 01:01:16 +0000
Manifest next update: Sat 18 Apr 2026 01:01:16 +0000
Files and hashes: 1: PI0Z2SQBkcNql0ti35PCIUNtm90.crl (hash: rvbQmc76/DSTXeaVdZ2sTR70vcJXJDxU+jE1i9Lt7cU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft
rsync://rpki.ripe.net/repository/DEFAULT/PI0Z2SQBkcNql0ti35PCIUNtm90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:da:fc:c6:44:55:23:42:45:70:fe:52:b8:f4:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8d19d9240191c36a974b62df93c221436d9bdd
Validity
Not Before: Apr 17 01:01:16 2026 GMT
Not After : Apr 18 01:01:16 2026 GMT
Subject: CN=9251ab044a3c2332d25099a36c51eda60608a74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:08:f8:be:f9:1a:68:ea:a5:76:d2:05:6c:7a:
8b:b4:0f:26:d9:02:73:3c:d3:94:32:ed:b7:82:6a:
65:af:a2:ac:3a:fa:44:25:1d:18:89:a5:47:a8:13:
35:3e:41:fa:75:8f:bb:7f:c4:60:9b:dd:25:39:64:
ca:2e:02:6d:2f:f9:22:4f:2e:ce:d1:a9:7d:c3:8b:
11:af:01:3e:36:c6:da:16:f1:03:ad:57:d3:19:1c:
08:5c:cd:4e:0f:29:03:b5:5e:a9:5e:23:02:26:6d:
a3:f6:a0:59:a6:2a:30:2a:4e:5a:44:60:88:0d:9b:
a5:35:33:18:74:12:21:70:84:73:9c:95:93:b5:ff:
4f:56:c6:dd:82:98:33:97:f3:76:a5:e6:74:c2:f3:
4d:5b:94:67:7b:b3:6b:aa:55:2b:01:84:b3:9e:73:
88:73:2a:a4:6b:15:d9:d2:ae:04:dd:c9:48:ca:25:
ed:bc:a3:fd:0c:0c:b0:a2:4e:25:6f:4b:f2:30:be:
ba:26:f8:7e:a0:62:48:67:61:21:b7:17:d3:f3:66:
7c:b1:08:df:f9:e1:eb:55:48:56:6a:f4:e7:12:5b:
81:1c:b9:b1:98:56:2c:29:5c:77:3b:a0:26:25:eb:
8e:7f:a4:db:7b:04:17:ba:50:21:3b:73:cf:3d:ee:
ee:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:51:AB:04:4A:3C:23:32:D2:50:99:A3:6C:51:ED:A6:06:08:A7:4D
X509v3 Authority Key Identifier:
keyid:3C:8D:19:D9:24:01:91:C3:6A:97:4B:62:DF:93:C2:21:43:6D:9B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI0Z2SQBkcNql0ti35PCIUNtm90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d2:fd:c8:04:ce:11:ba:5a:89:53:8b:1b:22:45:8b:2b:56:
81:57:67:de:95:20:29:5e:ba:e7:c1:fd:50:69:5a:c8:b8:f9:
99:d6:72:80:30:fc:e0:0d:eb:30:4a:1e:8b:7c:d8:18:92:72:
55:ff:42:3b:ac:f9:7d:09:30:af:89:29:b3:13:b1:21:c4:56:
db:e1:28:06:09:ca:97:f6:3f:ca:22:55:69:f2:3c:ef:cd:ab:
cb:8e:56:54:78:83:79:ee:64:a5:0e:bb:a5:0f:97:ee:7d:5b:
bc:f8:0d:11:f3:50:96:88:8b:16:c7:a5:6d:96:23:db:54:78:
05:fe:14:e6:e0:41:d3:3b:0f:39:d8:57:61:6a:d9:be:37:b1:
03:64:52:9c:6d:55:60:e7:07:8f:9e:30:a2:4e:5f:31:3a:04:
07:68:de:64:6b:af:96:aa:e2:5b:1c:1f:c4:d4:bf:df:f5:31:
97:56:63:e7:97:d9:ff:20:4f:96:84:ee:a1:6f:3c:96:ae:3f:
bf:15:dc:2c:09:7c:1d:12:ae:33:84:90:5e:af:81:4a:c6:c2:
b1:42:9b:fa:be:fd:5c:01:5a:61:cc:94:cb:43:64:e1:ee:99:
93:3e:8b:b0:2e:93:cc:7d:98:d9:bb:a3:ce:db:51:99:2a:85:
97:3c:4d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:45:47 2026 by rpki-client