
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
File: PcecfAfUNfoA8sfKCx5QZk2gTUg.mft (raw, json)
Hash identifier: 5YEs49A+S4638IsbPaLJfSQp/fMOWg+41IEu7WEeRfE=
Subject key identifier: 26:52:A1:2E:6C:C9:8B:D2:9C:20:CB:99:CF:91:C2:1F:F2:00:90:66
Authority key identifier: 3D:C7:9C:7C:07:D4:35:FA:00:F2:C7:CA:0B:1E:50:66:4D:A0:4D:48
Certificate issuer: /CN=3dc79c7c07d435fa00f2c7ca0b1e50664da04d48
Certificate serial: 019EBF5AE7A6F4473821E01B9D88B372B56C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcecfAfUNfoA8sfKCx5QZk2gTUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
Manifest number: F0
Signing time: Sat 13 Jun 2026 05:01:06 +0000
Manifest this update: Sat 13 Jun 2026 05:01:06 +0000
Manifest next update: Sun 14 Jun 2026 05:01:06 +0000
Files and hashes: 1: PcecfAfUNfoA8sfKCx5QZk2gTUg.crl (hash: RKL1hvxK+fDIGTDjXJgULB7DGHBw7n6aH2F1EVmOdG4=)
2: Yv4GaEJIAdTbY-p5QqYedKqtIAM.roa (hash: tNr0fHXdSpSBz2ryPJ1QU5+Ji6Ji73iPqme/JR8I6kE=)
3: txmqo2Bw-3oeca5oupMNgLyAN0Y.asa (hash: Gbgy2oJEQGt6R6lx9qIzVv6nHbAWst+OpS/TWEhgvGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcecfAfUNfoA8sfKCx5QZk2gTUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:e7:a6:f4:47:38:21:e0:1b:9d:88:b3:72:b5:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc79c7c07d435fa00f2c7ca0b1e50664da04d48
Validity
Not Before: Jun 13 05:01:06 2026 GMT
Not After : Jun 14 05:01:06 2026 GMT
Subject: CN=2652a12e6cc98bd29c20cb99cf91c21ff2009066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9c:e9:97:3f:56:90:03:3e:46:78:27:ce:8e:
48:84:02:24:8d:40:c5:df:62:62:51:8a:ef:3c:20:
34:d2:fb:f6:5e:1c:67:17:39:71:66:01:c6:78:23:
20:b9:b7:63:65:ff:2c:0b:ca:db:ce:d2:34:06:1a:
90:a9:31:58:76:2e:4d:b4:9e:d8:05:80:82:22:07:
d8:bb:4c:f6:52:5b:a9:17:7f:f9:8e:d1:ac:d9:a2:
80:7a:3a:9a:72:71:2b:4f:33:4a:b1:d8:cc:27:14:
95:2e:9f:5c:66:cf:fe:56:98:b2:b6:2b:6f:65:e0:
9e:69:ab:41:d6:7c:2f:fb:87:0e:19:0e:c5:8b:cd:
f2:7c:d3:d6:f7:f9:ab:52:c2:79:54:eb:d2:2e:ec:
bd:9b:4c:7a:e1:ab:03:23:6e:d0:94:d6:e8:b8:f4:
7a:e8:9a:a9:28:f1:77:9a:5e:e9:3b:fc:19:30:5e:
a5:00:48:8f:bc:0b:8e:9e:8d:ac:0f:e4:44:17:63:
ea:73:bc:00:d9:67:a8:f1:3e:6e:ff:8c:48:98:7d:
1b:ef:e8:43:a1:26:16:9f:78:fa:ad:5a:0e:ab:e0:
1e:aa:12:e2:55:b1:6a:93:2a:62:3a:48:6c:5d:2d:
7d:22:dd:1f:f0:89:2a:fe:b5:0a:e8:be:da:11:07:
46:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:52:A1:2E:6C:C9:8B:D2:9C:20:CB:99:CF:91:C2:1F:F2:00:90:66
X509v3 Authority Key Identifier:
keyid:3D:C7:9C:7C:07:D4:35:FA:00:F2:C7:CA:0B:1E:50:66:4D:A0:4D:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcecfAfUNfoA8sfKCx5QZk2gTUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b0:46:24:03:03:7d:4c:d7:ec:af:e9:22:68:98:33:e5:e9:
f3:62:9e:9a:6f:8a:e3:98:fc:d7:21:dd:c9:d0:50:8d:57:e1:
1b:2d:71:2f:a0:dd:49:a2:b3:7b:a6:4a:e3:68:1e:08:8c:dd:
9e:59:b8:13:2a:40:86:09:2d:51:00:16:e8:7c:e5:17:cf:d5:
87:26:ba:9e:05:76:14:65:ed:e4:b6:1e:ea:e9:f9:11:9a:8a:
a0:2f:c8:48:86:00:48:0a:3d:44:80:da:6a:db:0f:d9:76:56:
84:43:fc:5f:9a:16:b7:c5:7c:5e:f0:81:61:38:8f:7b:a7:f2:
b9:c8:20:85:6c:96:73:39:4c:40:cc:f6:3f:90:ea:27:b4:35:
b1:1a:21:f9:32:dc:10:a9:af:12:e3:4a:d0:30:e0:67:d2:0e:
17:f8:04:05:2a:71:24:df:34:07:09:ae:08:b4:b1:6b:a8:c9:
3f:5e:b0:41:d7:92:40:b6:f1:f2:d5:69:d0:19:87:70:bc:8a:
80:b9:cd:cf:29:68:03:db:2b:36:64:85:eb:14:fe:00:71:13:
f4:fd:ef:ef:05:69:42:b8:db:c9:e6:5d:c7:33:e6:a5:e6:48:
d4:a8:37:51:f7:ce:f3:da:93:1b:85:94:4a:f5:b4:3f:d3:72:
2c:31:14:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:08:55 2026 by rpki-client