Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
File: PcecfAfUNfoA8sfKCx5QZk2gTUg.mft (raw, json)
Hash identifier: XiwgOF3Nj0bfvNGjJgpZ/prIxbTtxSgNJCCYpzYLDh8=
Subject key identifier: 64:0B:3F:EB:A3:7E:E5:AA:14:04:B6:28:83:A4:60:E6:1F:32:88:65
Authority key identifier: 3D:C7:9C:7C:07:D4:35:FA:00:F2:C7:CA:0B:1E:50:66:4D:A0:4D:48
Certificate issuer: /CN=3dc79c7c07d435fa00f2c7ca0b1e50664da04d48
Certificate serial: 01A0C10D307FCD4BD1F67BC006C7C10D8B75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcecfAfUNfoA8sfKCx5QZk2gTUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
Manifest number: 01FA
Signing time: Sun 20 Sep 2026 23:01:02 +0000
Manifest this update: Sun 20 Sep 2026 23:01:02 +0000
Manifest next update: Mon 21 Sep 2026 23:01:02 +0000
Files and hashes: 1: PcecfAfUNfoA8sfKCx5QZk2gTUg.crl (hash: 9a0GHGnUpRJxWEgtPVOzoQXldCBaTSbZXejl8hAWHng=)
2: Yv4GaEJIAdTbY-p5QqYedKqtIAM.roa (hash: tNr0fHXdSpSBz2ryPJ1QU5+Ji6Ji73iPqme/JR8I6kE=)
3: txmqo2Bw-3oeca5oupMNgLyAN0Y.asa (hash: Gbgy2oJEQGt6R6lx9qIzVv6nHbAWst+OpS/TWEhgvGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcecfAfUNfoA8sfKCx5QZk2gTUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:0d:30:7f:cd:4b:d1:f6:7b:c0:06:c7:c1:0d:8b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc79c7c07d435fa00f2c7ca0b1e50664da04d48
Validity
Not Before: Sep 20 23:01:02 2026 GMT
Not After : Sep 21 23:01:02 2026 GMT
Subject: CN=640b3feba37ee5aa1404b62883a460e61f328865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:22:b8:0a:2d:c5:a1:bc:c0:71:35:57:f3:46:
11:a3:dc:53:8e:38:8c:af:86:9d:c2:79:d7:b9:37:
dd:e8:e4:8d:87:e5:b8:c0:f1:2c:31:64:44:55:4c:
c5:ec:6d:98:d0:31:50:ba:59:bb:3a:ec:a3:45:b3:
e3:26:f4:49:85:bc:ed:a1:7b:56:d2:e0:5e:b7:eb:
32:2b:2c:65:ee:fe:78:3e:38:05:21:b4:82:47:38:
d9:ae:cf:b8:fd:53:98:dd:84:37:ab:42:10:2b:ca:
bd:50:76:6a:29:82:89:43:35:91:b9:a1:a1:89:2e:
01:a2:36:04:97:f1:4a:fd:c3:4b:52:3e:b7:a3:03:
bc:2c:0b:5d:8c:72:c2:3e:b0:9a:4e:b9:5f:05:57:
15:a9:0a:3c:ef:89:ab:00:8b:c0:0d:6e:ff:06:ac:
6f:fc:9d:59:2c:7d:95:8c:d4:ec:18:be:88:ec:f6:
11:c9:58:4a:71:56:9f:f5:cd:50:69:97:45:31:56:
43:a9:b5:e5:e2:8d:6c:fb:2c:4f:ab:87:c8:0a:d0:
0e:59:82:23:32:56:d7:c6:de:88:42:54:3a:b0:f9:
38:c5:ca:70:0e:54:72:1f:8f:aa:86:2c:26:c1:9d:
ec:3b:75:52:1a:9a:ae:d8:7a:75:b6:de:20:32:b1:
82:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0B:3F:EB:A3:7E:E5:AA:14:04:B6:28:83:A4:60:E6:1F:32:88:65
X509v3 Authority Key Identifier:
keyid:3D:C7:9C:7C:07:D4:35:FA:00:F2:C7:CA:0B:1E:50:66:4D:A0:4D:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcecfAfUNfoA8sfKCx5QZk2gTUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e9:6b:a5:bb:27:86:ab:c2:84:08:f1:22:eb:6c:eb:31:06:
0f:57:3b:16:85:6b:32:63:b1:43:5a:ec:04:80:8b:9f:27:c0:
a5:e2:f7:b5:14:c4:62:ea:e9:a9:8c:cc:f8:8e:31:e3:13:b5:
17:3f:e0:87:8f:a4:13:79:17:54:45:3b:9b:95:9a:e6:cf:b2:
2d:78:2a:2a:7c:3c:1d:be:69:25:ab:a4:44:58:bb:11:77:12:
0a:4e:f6:32:cd:f6:73:2a:ba:07:df:63:b0:f1:04:0c:9d:76:
c1:6a:84:bf:49:e4:d6:d4:1d:7c:30:e4:18:94:12:f5:a5:1d:
ae:35:49:47:2f:55:ef:14:87:6a:62:9e:77:59:4a:f0:4c:c2:
ea:60:72:af:2b:c5:fc:a0:fe:aa:ab:f1:5b:87:94:8f:3a:51:
fe:e0:85:97:ed:57:ca:87:b6:da:14:c8:94:30:1c:5e:bb:9d:
38:45:52:49:2f:f5:2c:12:ad:ea:35:61:a5:2c:99:02:e0:9b:
2f:03:12:15:1b:cc:2c:ba:61:0b:bf:71:b6:ff:c2:b2:a8:cc:
0d:9a:43:a1:cf:0a:bf:63:6a:4d:a8:28:ed:9e:09:60:f5:52:
55:8f:c5:54:c9:2f:2f:ad:d2:88:36:6e:5e:4e:fb:3a:ac:35:
a3:4e:f1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:42:49 2026 by rpki-client