Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
File: PcecfAfUNfoA8sfKCx5QZk2gTUg.mft (raw, json)
Hash identifier: Pq1HB4I0q5HkWOEnxX1hlpWlhaKCMmNHjhiX6VDW104=
Subject key identifier: 24:06:59:94:86:6D:22:2A:F6:1A:BF:55:EE:D0:3A:19:16:2A:06:CB
Authority key identifier: 3D:C7:9C:7C:07:D4:35:FA:00:F2:C7:CA:0B:1E:50:66:4D:A0:4D:48
Certificate issuer: /CN=3dc79c7c07d435fa00f2c7ca0b1e50664da04d48
Certificate serial: 019FA906B00105A5F7126A50D9FCF36DA87B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcecfAfUNfoA8sfKCx5QZk2gTUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
Manifest number: 0169
Signing time: Tue 28 Jul 2026 14:00:15 +0000
Manifest this update: Tue 28 Jul 2026 14:00:15 +0000
Manifest next update: Wed 29 Jul 2026 14:00:15 +0000
Files and hashes: 1: PcecfAfUNfoA8sfKCx5QZk2gTUg.crl (hash: dLOL2xXxn4+7J719KpaQPjnSr50wDEQTWr68Z63heiU=)
2: Yv4GaEJIAdTbY-p5QqYedKqtIAM.roa (hash: tNr0fHXdSpSBz2ryPJ1QU5+Ji6Ji73iPqme/JR8I6kE=)
3: txmqo2Bw-3oeca5oupMNgLyAN0Y.asa (hash: Gbgy2oJEQGt6R6lx9qIzVv6nHbAWst+OpS/TWEhgvGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcecfAfUNfoA8sfKCx5QZk2gTUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:b0:01:05:a5:f7:12:6a:50:d9:fc:f3:6d:a8:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc79c7c07d435fa00f2c7ca0b1e50664da04d48
Validity
Not Before: Jul 28 14:00:15 2026 GMT
Not After : Jul 29 14:00:15 2026 GMT
Subject: CN=24065994866d222af61abf55eed03a19162a06cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5f:44:36:b4:ae:fb:99:af:53:55:10:93:2c:
7e:75:6c:1a:d7:65:2c:a1:eb:a6:ce:e5:57:e8:78:
f7:8c:8a:b2:67:58:10:bf:f5:a8:58:69:96:9c:91:
87:6c:77:82:31:3d:68:cb:aa:ab:26:50:f6:f8:ba:
2f:f4:c3:90:0f:2d:38:33:45:86:c2:88:e4:75:f3:
31:04:0c:8e:4a:df:82:cb:17:c7:13:3c:39:6d:10:
8b:43:2e:99:fa:39:ed:de:40:39:d6:75:fd:ce:8d:
e0:54:f4:94:c3:ea:c0:ef:c1:d2:29:78:81:e1:ef:
9d:08:be:96:23:ac:c6:3f:e3:79:6a:5c:b9:fa:22:
24:d9:fd:4f:cc:45:34:8a:23:70:cc:cc:4f:b6:1d:
6f:1f:64:0c:12:42:e1:fd:28:8f:e9:ee:25:2e:7e:
49:ed:06:e8:ab:48:f8:f8:80:7a:8a:24:c8:57:f5:
ce:41:8b:4f:30:bc:f0:32:86:00:bc:44:ed:63:bc:
d5:0e:28:f6:96:0b:19:61:35:5b:ed:06:85:f0:19:
0d:be:f4:ab:c7:f2:c1:38:a9:b1:ed:8f:31:64:7b:
5b:a8:be:f9:77:d5:68:02:15:49:51:7b:23:3d:a9:
aa:51:1f:d0:46:72:6c:b4:c6:08:9a:f4:82:7f:28:
c7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:06:59:94:86:6D:22:2A:F6:1A:BF:55:EE:D0:3A:19:16:2A:06:CB
X509v3 Authority Key Identifier:
keyid:3D:C7:9C:7C:07:D4:35:FA:00:F2:C7:CA:0B:1E:50:66:4D:A0:4D:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcecfAfUNfoA8sfKCx5QZk2gTUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:43:ab:e9:d5:91:6b:29:b0:fe:3d:46:e1:08:53:8d:97:f5:
72:e0:07:fb:03:be:1d:a6:42:b6:db:85:b1:bd:62:3b:e9:ad:
1d:0f:10:4d:3f:ff:61:e8:44:7d:c1:b7:d2:ae:ca:a1:cb:51:
3f:d6:69:74:d7:53:62:aa:e3:a7:db:bb:ca:d4:ac:00:25:7a:
ec:92:77:a4:b8:23:3f:89:d5:2a:c0:4b:88:49:14:85:1e:9f:
3b:cc:dd:7f:53:14:2d:66:37:78:0d:88:1b:9a:d3:45:bd:d5:
bf:68:7a:b5:49:50:a9:42:74:bd:12:1e:57:77:56:59:8c:9b:
a8:31:a0:4c:21:0b:7d:48:e8:16:59:a1:f1:35:bc:6f:e5:d0:
5b:0d:c1:84:8b:e6:74:a3:e1:2e:01:90:75:28:6c:49:4e:53:
f4:9e:03:5a:17:9a:2e:06:b4:af:d6:c1:21:24:f5:43:e6:bb:
ad:13:a1:d2:83:7b:75:b3:35:ec:ee:90:06:20:42:ef:57:2d:
e6:58:af:25:39:49:34:72:b7:fb:0c:42:dc:c3:ee:5f:99:c1:
68:68:80:97:66:c1:55:39:0a:fc:39:e5:f9:6f:8c:d8:72:de:
63:d8:4d:ea:d6:80:df:18:1a:f9:24:f4:30:3a:5a:10:39:98:
58:5f:90:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:53:29 2026 by rpki-client