Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
File: PcecfAfUNfoA8sfKCx5QZk2gTUg.mft (raw, json)
Hash identifier: HPZZxTaQWakNSzuiasWct6aJS58oRJfIKETcUZ7RHnc=
Subject key identifier: 1D:97:30:D8:56:66:29:3E:14:0D:02:4A:B9:4D:15:08:23:53:71:52
Authority key identifier: 3D:C7:9C:7C:07:D4:35:FA:00:F2:C7:CA:0B:1E:50:66:4D:A0:4D:48
Certificate issuer: /CN=3dc79c7c07d435fa00f2c7ca0b1e50664da04d48
Certificate serial: 019DA5665F965CA58D312A4BDFCE271C7262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcecfAfUNfoA8sfKCx5QZk2gTUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
Manifest number: 5E
Signing time: Sun 19 Apr 2026 11:00:42 +0000
Manifest this update: Sun 19 Apr 2026 11:00:42 +0000
Manifest next update: Mon 20 Apr 2026 11:00:42 +0000
Files and hashes: 1: PcecfAfUNfoA8sfKCx5QZk2gTUg.crl (hash: serUNcBGEhYF/cI5UWy9j12EHkLJBrFqNq4W8q75fgU=)
2: Yv4GaEJIAdTbY-p5QqYedKqtIAM.roa (hash: tNr0fHXdSpSBz2ryPJ1QU5+Ji6Ji73iPqme/JR8I6kE=)
3: txmqo2Bw-3oeca5oupMNgLyAN0Y.asa (hash: Gbgy2oJEQGt6R6lx9qIzVv6nHbAWst+OpS/TWEhgvGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcecfAfUNfoA8sfKCx5QZk2gTUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:66:5f:96:5c:a5:8d:31:2a:4b:df:ce:27:1c:72:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc79c7c07d435fa00f2c7ca0b1e50664da04d48
Validity
Not Before: Apr 19 11:00:42 2026 GMT
Not After : Apr 20 11:00:42 2026 GMT
Subject: CN=1d9730d85666293e140d024ab94d150823537152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b6:8c:09:12:f7:48:09:54:5a:7c:ff:d8:c3:
ac:32:50:26:8e:a6:d9:02:4f:bd:6f:a0:5d:86:ba:
b0:0f:fa:b8:d5:e2:1a:82:39:46:f1:ec:5e:4d:01:
d1:e0:84:f8:be:3e:2a:86:f0:28:86:ef:6d:63:20:
97:6a:8b:33:27:e4:78:96:95:7d:aa:a8:68:9e:59:
dc:db:60:fd:6a:07:9f:37:56:b1:a8:d4:b1:ec:0e:
6f:cd:62:57:50:53:70:12:c7:9e:3f:33:ff:a1:5d:
80:91:1b:fa:d1:d7:d5:3f:b2:75:32:48:0d:db:e8:
3d:1b:40:f5:dc:c0:40:d9:94:d2:d7:6b:17:f6:6b:
ce:76:6f:e8:38:4f:0d:ed:cf:2a:bf:1e:68:65:2a:
1d:5b:2d:3e:02:02:30:fc:91:7f:9a:5c:77:a4:e5:
0a:c6:9e:a3:58:6f:e2:39:98:9e:e9:55:48:52:00:
ef:fd:f3:a9:f1:c4:93:53:71:47:82:c0:69:00:f2:
f0:80:10:14:92:b9:88:99:e9:49:22:e4:61:46:b5:
73:c7:bc:0c:04:0c:6c:48:19:eb:00:bb:82:16:f2:
1f:ba:bb:96:51:bc:5a:7c:5b:9a:57:b5:71:7c:da:
78:13:c6:93:5e:bf:43:d0:35:56:05:bb:91:23:ff:
b9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:97:30:D8:56:66:29:3E:14:0D:02:4A:B9:4D:15:08:23:53:71:52
X509v3 Authority Key Identifier:
keyid:3D:C7:9C:7C:07:D4:35:FA:00:F2:C7:CA:0B:1E:50:66:4D:A0:4D:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcecfAfUNfoA8sfKCx5QZk2gTUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:30:2e:66:6a:b7:ba:4f:b2:1e:49:ff:40:fc:87:d1:b0:04:
39:b0:e4:21:45:65:46:b9:06:82:2a:af:91:6a:30:bb:30:cc:
ee:25:11:ef:5f:83:dd:71:aa:e7:41:a3:3a:6c:2e:56:bb:8e:
37:36:c2:e0:27:9a:ec:af:b9:39:73:ff:0c:30:ed:25:9c:db:
d2:04:f1:c1:61:17:09:87:db:85:5e:b4:4d:a3:72:cb:7a:5b:
9c:6d:c4:d2:87:59:79:72:c6:6c:60:d9:ad:be:fe:a1:1b:4d:
f8:72:cf:0a:0a:41:3d:fa:19:15:86:f0:b0:d9:11:4b:a1:35:
80:30:10:17:77:25:a9:68:88:eb:89:5e:cc:56:f2:70:a9:55:
6b:17:a0:0e:9b:df:90:54:47:ea:5d:62:e6:ed:40:9c:c9:bf:
48:bc:97:5f:38:b8:1d:8c:54:b3:f6:a9:fb:60:81:a7:b8:85:
69:3f:26:04:41:fe:41:12:26:06:76:57:7d:b5:02:b4:24:fc:
95:c9:3b:b8:f6:17:ed:f1:ae:35:d0:d7:5c:5c:92:1b:c0:e6:
08:f2:ed:1d:56:80:e5:c4:23:ab:d8:20:99:a6:3e:3b:dd:ef:
d0:ba:f5:20:ab:e9:9d:4f:28:8b:fa:2d:b7:84:d1:3d:2a:fd:
e6:1d:b2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:39:24 2026 by rpki-client