Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
File: PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft (raw, json)
Hash identifier: htHNgmi7f1ESEYorDvQ8T7xoGeuUECNrm3lEbeoG/ko=
Subject key identifier: 48:03:31:FD:58:B1:28:50:F6:4A:3C:53:62:7E:AB:01:A2:52:6D:ED
Authority key identifier: 3C:FE:E2:EA:3C:DE:08:73:A1:91:BD:D7:95:22:73:99:B5:6A:43:BA
Certificate issuer: /CN=3cfee2ea3cde0873a191bdd795227399b56a43ba
Certificate serial: 019D9AABC1298F0CD5751236E34F4BA9982A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
Manifest number: 01E7
Signing time: Fri 17 Apr 2026 09:00:40 +0000
Manifest this update: Fri 17 Apr 2026 09:00:40 +0000
Manifest next update: Sat 18 Apr 2026 09:00:40 +0000
Files and hashes: 1: PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl (hash: Ku2QpBG9o6N2rRwMt7bKkW8cQhIvUEX02j8mIaxU+Wo=)
2: U1VjosqpBiqy2ZFxYLqdYxKnum4.roa (hash: AvN5YNAvDxw0bLWGw+RbIchpQR/eRlfnMr+l8l+QHy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:c1:29:8f:0c:d5:75:12:36:e3:4f:4b:a9:98:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cfee2ea3cde0873a191bdd795227399b56a43ba
Validity
Not Before: Apr 17 09:00:40 2026 GMT
Not After : Apr 18 09:00:40 2026 GMT
Subject: CN=480331fd58b12850f64a3c53627eab01a2526ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9c:a8:2d:af:99:1c:f9:d5:0e:52:ae:d6:1c:
d7:fc:c1:bd:06:ca:dc:40:81:9f:bd:10:b8:e0:39:
fe:9b:74:55:db:97:b6:0c:c8:7b:2c:aa:b4:a6:bc:
1a:a6:72:d5:e1:b2:29:c5:a9:bf:4c:50:7b:51:20:
79:52:e6:48:ac:39:59:b8:94:fa:73:45:95:d3:56:
94:84:e5:7b:1c:cf:ae:9c:c5:65:d0:e1:1a:bc:5c:
ba:7c:8f:79:31:4a:eb:c9:e0:cb:de:2c:86:d5:87:
31:ff:64:be:df:11:81:ab:98:d1:82:5e:98:93:ef:
1f:7f:bb:24:79:e7:45:91:f3:db:29:a9:b2:a1:90:
11:b4:11:61:aa:e3:e0:82:82:ef:78:52:70:b7:29:
26:9c:38:0d:e0:d1:f3:9e:e6:61:76:af:af:73:51:
4f:e6:77:f6:20:96:fe:2f:20:fa:12:58:5c:70:a1:
ed:03:f4:36:18:d8:2f:0f:c9:ee:d2:6b:64:d9:66:
83:29:ac:d0:88:26:a8:7a:57:43:15:75:03:0f:a2:
47:27:be:6a:ec:90:48:99:10:2d:d0:ac:4e:c2:27:
b9:f7:ed:17:fb:6c:10:98:00:1e:64:05:ab:f2:3f:
3d:b7:bf:99:01:0d:9f:fd:c3:fe:17:2a:ec:b1:24:
16:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:03:31:FD:58:B1:28:50:F6:4A:3C:53:62:7E:AB:01:A2:52:6D:ED
X509v3 Authority Key Identifier:
keyid:3C:FE:E2:EA:3C:DE:08:73:A1:91:BD:D7:95:22:73:99:B5:6A:43:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:3b:72:bd:bd:49:76:4b:82:98:01:63:2a:fe:b0:1f:97:20:
15:58:1a:58:10:8d:80:d3:c5:bc:a8:2e:0a:44:f0:41:a1:26:
e6:a3:bd:62:a7:64:82:45:59:30:25:fe:66:05:54:f2:70:a0:
84:bb:af:c2:a1:35:62:55:f2:55:74:c5:28:bf:b8:0d:5a:26:
d1:b9:eb:87:ff:29:fa:94:e4:ec:6d:73:54:f2:4a:1f:dd:a2:
a4:4d:c1:c7:83:43:b0:a9:7d:0e:77:84:ee:3e:f7:72:8e:2e:
92:ea:3b:bc:0f:84:dc:48:49:4f:b5:4f:ff:9a:21:6b:6e:d7:
9c:a8:d9:e7:50:c5:9d:7f:41:5e:74:ca:57:02:6e:6f:69:86:
06:38:14:68:c9:0c:a8:6f:07:94:1c:03:e8:c7:0a:5c:3f:ac:
e8:bc:e6:86:08:57:59:8e:2c:51:95:1b:da:c8:59:d2:c8:77:
de:5c:a6:68:d6:67:6d:93:63:d9:b2:59:5e:7b:bf:9f:fc:fc:
61:89:af:7f:ab:4c:09:48:94:72:32:0f:36:5f:87:9d:b6:8c:
c9:fb:ea:16:c5:73:5d:14:d1:e3:23:d4:d0:a4:d3:1f:b6:c1:
31:6d:96:96:80:46:c1:93:dd:d3:fa:35:3f:27:87:ad:45:85:
4a:c8:44:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:24:05 2026 by rpki-client