Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft
File: PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft (raw, json)
Hash identifier: uXn/nKLxHopIG/oHswlHMzS1PRPWUqtSY3mlNb+AAWs=
Subject key identifier: 93:33:3A:52:18:41:D2:C4:6F:46:7A:D2:AA:20:99:63:9B:68:F2:04
Authority key identifier: 3C:4E:E9:11:0B:85:FD:DE:3E:B6:E4:46:25:41:BA:BC:32:36:E8:BA
Certificate issuer: /CN=3c4ee9110b85fdde3eb6e4462541babc3236e8ba
Certificate serial: 019CABA1CA21F69116D2B4DA49925833ABD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7pEQuF_d4-tuRGJUG6vDI26Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft
Manifest number: 0FB8
Signing time: Sun 01 Mar 2026 23:00:32 +0000
Manifest this update: Sun 01 Mar 2026 23:00:32 +0000
Manifest next update: Mon 02 Mar 2026 23:00:32 +0000
Files and hashes: 1: PE7pEQuF_d4-tuRGJUG6vDI26Lo.crl (hash: 28xd5R/rvXukyMyyhpxpz7uT08/KzOHL8NIXjH1ZT/E=)
2: R92c8_GawIo0zWCVe3KEMHOfXwg.roa (hash: 85SuJiAaE3EW56KnlIdwUAzGkX32KcSjQ5U5FCiJonM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PE7pEQuF_d4-tuRGJUG6vDI26Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:ca:21:f6:91:16:d2:b4:da:49:92:58:33:ab:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ee9110b85fdde3eb6e4462541babc3236e8ba
Validity
Not Before: Mar 1 23:00:32 2026 GMT
Not After : Mar 2 23:00:32 2026 GMT
Subject: CN=93333a521841d2c46f467ad2aa2099639b68f204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:74:ae:2a:63:10:f9:16:75:79:9f:78:d6:1f:
eb:52:49:1e:b0:e4:25:7e:a9:46:61:5b:87:9c:a2:
fb:42:14:02:ac:15:98:45:5f:3b:7a:10:8a:6d:ee:
96:f0:4c:17:17:2e:8c:74:23:64:e3:fe:52:ca:0a:
d2:a0:ea:9e:66:71:fc:16:58:be:9f:11:42:cb:b8:
b4:04:75:12:e3:2f:bc:0e:db:b1:2a:e2:09:ab:03:
34:2b:08:6e:17:b4:ef:cf:b2:10:23:e4:f0:b3:2f:
0a:be:53:16:9b:30:bf:36:db:19:7c:95:30:ba:f5:
b9:36:70:b1:fd:a2:bf:11:44:48:5b:b5:42:27:bc:
3d:a4:f3:f2:e9:19:d3:74:2a:b6:08:dc:cd:18:37:
de:48:fa:40:f6:de:63:1f:89:71:bb:d1:5e:8a:af:
44:0b:ad:3d:d6:f3:9c:2e:80:e9:d9:c4:bd:03:40:
f8:86:22:01:e7:ff:4e:6d:fc:83:fb:ef:5e:ce:18:
60:f6:3c:31:5a:aa:52:be:34:9c:45:d9:b5:41:6a:
30:98:cc:cc:f2:08:da:7c:7d:f4:94:f5:b9:df:53:
64:20:8c:cb:a3:94:ae:bf:6f:1b:8f:22:29:cb:42:
91:06:41:25:ad:39:ea:b0:36:3e:24:65:e5:1c:23:
61:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:33:3A:52:18:41:D2:C4:6F:46:7A:D2:AA:20:99:63:9B:68:F2:04
X509v3 Authority Key Identifier:
keyid:3C:4E:E9:11:0B:85:FD:DE:3E:B6:E4:46:25:41:BA:BC:32:36:E8:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7pEQuF_d4-tuRGJUG6vDI26Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c0:48:9c:fc:af:be:47:fc:f4:3b:95:4d:85:c4:aa:85:22:
31:dc:17:29:42:5b:2e:6b:db:9b:85:75:02:8d:57:25:20:03:
76:35:86:79:23:bc:9e:2a:5c:84:5d:39:e3:66:d8:36:0d:61:
cb:17:de:68:33:6a:b7:9c:c5:8f:ed:0f:a2:c0:4e:8c:57:33:
e7:2a:9f:e2:76:43:15:94:2c:2a:a9:37:08:71:5e:40:63:05:
57:8e:21:e3:b7:ec:aa:94:88:d6:c4:40:b5:4d:36:33:c6:b0:
bd:78:2a:35:10:e5:e5:59:30:51:63:88:52:93:52:f4:4f:2e:
99:bd:22:36:5f:58:be:a1:0e:1c:82:5c:2a:c8:f2:e2:3e:1b:
21:b6:5f:0e:8f:83:ee:81:3f:9c:07:bf:3d:6b:45:b5:b5:06:
c7:4c:a0:2f:3d:c3:17:04:bc:23:27:b6:97:d6:4b:81:ba:d7:
80:da:3f:2e:e4:9b:2c:70:27:c0:af:2c:e7:77:aa:9a:27:b6:
ce:2a:98:cc:60:cd:17:2c:4b:6d:8f:a3:4d:ae:4b:3f:df:17:
6a:95:e8:1a:82:cf:f6:dc:ce:b5:d0:4b:3c:ce:b6:95:27:82:
30:0a:81:b7:98:71:59:ac:fa:3f:cc:1c:27:48:31:e6:74:9a:
25:c5:43:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:07:28 2026 by rpki-client