Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
File: pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft (raw, json)
Hash identifier: 7kKRIanIc1yM/lHdNEbEk5znn/KFP6vGdRubne0NMN8=
Subject key identifier: CA:EA:14:49:87:DB:77:E4:A9:96:04:E9:A1:1C:57:EE:99:1E:5E:CB
Authority key identifier: A5:C2:28:64:E3:92:0E:16:0A:D9:B8:4F:F0:1D:A8:66:AA:40:97:85
Certificate issuer: /CN=a5c22864e3920e160ad9b84ff01da866aa409785
Certificate serial: 019CAC46ACF82B0069EBD76C9CEBF5269930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
Manifest number: 071A
Signing time: Mon 02 Mar 2026 02:00:38 +0000
Manifest this update: Mon 02 Mar 2026 02:00:38 +0000
Manifest next update: Tue 03 Mar 2026 02:00:38 +0000
Files and hashes: 1: pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl (hash: 6IUTFXE0bCGuwM8CjVvbDJfyiJZMCWNKwjD7brCZhq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:ac:f8:2b:00:69:eb:d7:6c:9c:eb:f5:26:99:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c22864e3920e160ad9b84ff01da866aa409785
Validity
Not Before: Mar 2 02:00:38 2026 GMT
Not After : Mar 3 02:00:38 2026 GMT
Subject: CN=caea144987db77e4a99604e9a11c57ee991e5ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b8:76:8e:4c:2a:a2:11:47:4b:8b:d8:2b:df:
86:5f:62:61:ff:6d:d1:d7:ef:12:00:38:d1:71:3f:
21:7a:bd:b5:35:d4:d0:d3:2d:f4:3e:c2:61:fd:7e:
ed:2e:8e:89:e7:fb:28:ec:63:1a:84:16:d7:44:29:
69:e9:73:03:6a:19:98:bf:ad:1a:3c:27:af:f9:78:
a0:91:f2:c8:ea:bd:3e:fa:d8:51:4a:32:76:d6:5f:
ad:f8:64:4f:0c:c6:45:03:03:a1:84:bb:87:e0:3d:
ad:6d:8f:b5:25:b8:87:8a:e9:ac:04:d8:1b:ed:fd:
b5:c5:04:a0:00:61:2e:6e:6f:e0:fc:6f:46:27:47:
0d:5c:52:98:2d:0b:f2:e6:62:ae:ad:69:d5:45:b7:
75:1b:41:84:77:6f:cf:24:4b:de:da:ea:46:f6:61:
42:3d:db:f8:b2:be:39:0f:98:bc:30:14:ec:91:54:
22:1d:d3:1a:cf:a4:ef:2a:f1:ed:ee:4e:bb:0c:df:
22:9d:ee:7e:81:82:88:40:3b:77:6c:a3:0d:01:ca:
49:be:9b:c3:68:e8:e0:2c:3a:15:45:f1:3b:b7:db:
be:f7:a4:75:70:8b:a4:4e:22:29:c6:0d:b6:1e:bb:
c6:8a:ab:ca:2a:61:7b:f3:bc:79:cf:3a:67:3f:f9:
71:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EA:14:49:87:DB:77:E4:A9:96:04:E9:A1:1C:57:EE:99:1E:5E:CB
X509v3 Authority Key Identifier:
keyid:A5:C2:28:64:E3:92:0E:16:0A:D9:B8:4F:F0:1D:A8:66:AA:40:97:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:22:86:c2:75:73:e9:dc:31:d9:f2:05:7a:2f:f3:d3:fa:d1:
cd:12:38:04:68:87:6f:98:16:15:3f:2a:eb:78:e8:22:25:30:
f3:38:a4:ac:55:77:b3:d0:a7:0f:74:25:bd:38:f8:6e:a3:47:
10:f4:a4:c0:27:c3:45:57:be:c6:4f:cd:37:4f:eb:fc:76:22:
0c:b9:32:e1:cc:11:e8:a2:42:3e:8a:31:30:73:42:5f:9c:c7:
a7:94:09:a2:38:20:8d:20:55:04:10:2e:15:90:c0:5a:74:0e:
e2:a1:d2:53:bd:34:3d:d8:f7:6d:3f:40:18:8a:eb:38:e6:1a:
b1:73:18:94:af:0f:19:cf:9b:4f:18:94:1f:1f:92:36:f6:34:
78:1f:82:e4:6f:2f:81:a6:bc:ed:d0:b1:70:a8:ec:a9:62:c3:
d5:3a:21:c8:81:5b:d6:76:dc:ca:03:5d:23:a8:2b:8b:3b:4d:
b3:1c:a4:43:e3:4f:1f:7d:63:05:c5:55:58:4f:28:53:15:61:
2c:04:94:96:ca:5d:5c:6b:ec:e2:a4:e3:d8:41:4b:8f:64:4a:
3f:4f:32:e7:5a:73:a7:7e:ed:1d:15:b8:39:be:0a:11:2a:c8:
59:4e:16:61:e7:e3:4a:88:c1:7d:ee:01:55:74:2c:d6:ee:ba:
a4:1a:e1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:46:41 2026 by rpki-client