Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
File: PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft (raw, json)
Hash identifier: yNrmChrf1Uw0STpxejllFCFHAH4bxH6uaTp76NG29QE=
Subject key identifier: EA:5A:16:7B:5F:2C:A1:0E:E6:7E:A8:DE:C2:23:20:E8:DC:F1:83:B0
Authority key identifier: 3C:FE:E2:EA:3C:DE:08:73:A1:91:BD:D7:95:22:73:99:B5:6A:43:BA
Certificate issuer: /CN=3cfee2ea3cde0873a191bdd795227399b56a43ba
Certificate serial: 019CAF111775FBC5969419D466A335FA9596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
Manifest number: 016D
Signing time: Mon 02 Mar 2026 15:00:58 +0000
Manifest this update: Mon 02 Mar 2026 15:00:58 +0000
Manifest next update: Tue 03 Mar 2026 15:00:58 +0000
Files and hashes: 1: PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl (hash: 3E0fZ4bwbBEyfL78DZBR/Tmj8Fe10ImnVIFyukh9yTg=)
2: U1VjosqpBiqy2ZFxYLqdYxKnum4.roa (hash: AvN5YNAvDxw0bLWGw+RbIchpQR/eRlfnMr+l8l+QHy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:11:17:75:fb:c5:96:94:19:d4:66:a3:35:fa:95:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cfee2ea3cde0873a191bdd795227399b56a43ba
Validity
Not Before: Mar 2 15:00:58 2026 GMT
Not After : Mar 3 15:00:58 2026 GMT
Subject: CN=ea5a167b5f2ca10ee67ea8dec22320e8dcf183b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:de:d4:54:8a:e2:09:ac:34:2a:40:98:9b:18:
08:e0:fc:79:98:18:3e:e8:85:96:10:bb:05:5b:2a:
a8:c7:2d:6d:e0:6f:4f:60:03:3c:a0:07:8e:99:83:
3e:f5:1e:dd:d1:9c:69:22:21:00:4c:3a:2a:ba:01:
ab:1b:63:18:e3:d4:b9:dd:ae:30:6b:65:a3:2c:bb:
af:5a:05:d6:00:79:38:0b:c9:01:12:22:2f:e4:23:
14:ea:c9:bc:c6:f9:57:ce:e3:5b:19:4e:11:f6:a4:
6a:3e:fb:54:d0:88:6c:17:76:3e:0a:6d:9a:28:63:
bf:83:bc:52:d4:8f:ab:ae:d7:78:43:e3:d2:04:ee:
d5:71:55:85:58:70:be:6a:6b:a2:b7:9e:fb:a4:46:
17:bf:40:b1:32:00:75:1f:5a:4a:50:1b:27:7d:db:
ee:06:9b:76:6d:79:26:8d:db:57:85:24:6d:a6:2f:
b4:2d:49:64:b7:bf:04:dc:75:1f:b6:20:ee:2f:85:
c1:cf:32:a2:23:e4:99:95:13:9f:90:b5:98:3e:8b:
ce:9d:e2:33:73:28:ce:73:63:52:15:b4:34:19:3a:
fc:66:8e:a9:c4:c6:da:92:7a:d6:b6:ec:87:f1:50:
88:36:62:de:2b:9c:68:9d:7a:e7:c5:1e:cc:3e:cd:
c1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5A:16:7B:5F:2C:A1:0E:E6:7E:A8:DE:C2:23:20:E8:DC:F1:83:B0
X509v3 Authority Key Identifier:
keyid:3C:FE:E2:EA:3C:DE:08:73:A1:91:BD:D7:95:22:73:99:B5:6A:43:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:63:6a:10:f5:d5:13:91:9c:96:82:80:40:60:eb:95:69:f9:
7d:b8:18:c2:81:e3:d2:6d:60:9a:19:ce:11:09:cd:bd:95:e1:
c8:6f:9e:b3:58:55:39:28:84:27:c1:45:3b:a7:6a:6e:9a:e0:
b7:32:d0:7c:57:4a:c5:08:54:cd:5b:80:20:d7:35:a6:d2:0e:
1f:29:3a:93:a4:76:d4:5d:89:a5:b5:a6:d1:3a:f7:4f:3a:3e:
ed:49:20:cc:d2:b0:b6:08:34:bf:ef:87:05:2e:08:9d:cb:9e:
21:1b:7c:29:5e:09:5a:a6:d9:fb:26:2f:47:36:2c:3e:f2:38:
02:e5:ba:70:1d:82:30:36:bb:2b:0c:42:49:03:0c:ef:e4:9a:
2e:51:5d:c9:40:ab:4a:00:17:2f:ee:3b:77:03:c4:09:a1:ab:
ef:63:ce:84:86:b5:89:9e:97:07:0b:3b:98:19:85:3c:73:d1:
ec:0b:3e:a2:9c:99:be:a1:40:38:9a:48:1a:d6:b1:c1:96:d6:
cf:a6:ed:6b:d3:99:3f:0f:84:2f:54:a9:4c:a1:70:ed:e2:d3:
f8:88:ca:90:1a:8f:2e:e8:6c:b7:65:39:8b:d0:ab:d9:ad:c5:
c4:82:a4:3b:65:d8:44:2a:92:6a:b8:f9:50:c8:ce:8c:70:d3:
3d:13:dd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:20:46 2026 by rpki-client