Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
File: PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft (raw, json)
Hash identifier: PQQf4g5yOuJ9Umi5WlvjjE7WQBsTeH5D00eE1dfmSbM=
Subject key identifier: DD:45:C4:1E:52:28:C3:36:31:3A:4F:5E:87:10:96:24:8E:6A:44:6D
Authority key identifier: 3C:FE:E2:EA:3C:DE:08:73:A1:91:BD:D7:95:22:73:99:B5:6A:43:BA
Certificate issuer: /CN=3cfee2ea3cde0873a191bdd795227399b56a43ba
Certificate serial: 019FA9E34619BA1FF9C93D14848926F340D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
Manifest number: 02F8
Signing time: Tue 28 Jul 2026 18:01:11 +0000
Manifest this update: Tue 28 Jul 2026 18:01:11 +0000
Manifest next update: Wed 29 Jul 2026 18:01:11 +0000
Files and hashes: 1: PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl (hash: hl80lGdsMPvMAPH2X/4wUOnsDRQfL+DmXy5IMw9jQXs=)
2: U1VjosqpBiqy2ZFxYLqdYxKnum4.roa (hash: AvN5YNAvDxw0bLWGw+RbIchpQR/eRlfnMr+l8l+QHy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:46:19:ba:1f:f9:c9:3d:14:84:89:26:f3:40:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cfee2ea3cde0873a191bdd795227399b56a43ba
Validity
Not Before: Jul 28 18:01:11 2026 GMT
Not After : Jul 29 18:01:11 2026 GMT
Subject: CN=dd45c41e5228c336313a4f5e871096248e6a446d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:97:f8:46:26:67:18:27:a9:fa:7e:78:01:0a:
9b:6a:d9:3a:fc:67:90:cd:f8:7c:6e:c8:9f:7b:92:
82:78:96:5f:2e:ff:25:e9:9d:27:ff:9d:b0:a3:94:
aa:a7:d8:0e:7b:81:90:49:d0:37:b3:0e:8b:bd:d8:
c1:19:e6:85:a1:5e:be:3a:e0:d0:7f:b9:5b:e7:90:
40:66:11:50:8f:e8:5f:8b:04:c8:df:5f:e2:b3:90:
83:fb:ff:d7:92:cd:44:a6:68:de:2c:11:68:a8:9a:
e7:52:f4:13:9b:76:58:a5:64:dc:54:26:cf:1f:18:
5c:f0:ad:28:9c:70:5f:3f:a9:65:a3:ae:33:d8:c5:
75:23:cf:64:11:b7:83:5b:63:f8:c9:9a:1c:f7:35:
22:77:ed:72:81:af:0e:6e:dc:04:89:73:2a:54:c6:
d7:45:2e:01:08:5a:c7:9d:73:f0:1a:68:3d:ed:bd:
9c:db:36:2e:d6:1f:74:e8:c5:2a:8b:8d:82:fe:53:
fd:fe:74:77:d8:87:fc:d8:24:8f:9b:67:bc:00:82:
87:1d:bf:5b:b8:15:cc:5d:7f:80:bf:26:97:87:5a:
4a:2b:c9:1b:ab:7e:b2:93:53:90:e3:d6:00:7f:d6:
79:a8:66:0a:02:8c:85:af:55:44:80:91:65:d2:59:
a7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:45:C4:1E:52:28:C3:36:31:3A:4F:5E:87:10:96:24:8E:6A:44:6D
X509v3 Authority Key Identifier:
keyid:3C:FE:E2:EA:3C:DE:08:73:A1:91:BD:D7:95:22:73:99:B5:6A:43:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:09:83:31:a8:ea:e3:a7:01:ae:d4:46:5c:b3:5d:95:12:5c:
fe:d6:bc:32:3e:1c:ee:ab:38:98:4b:22:f5:f3:67:c1:88:1a:
52:30:6f:5e:30:5a:d1:6f:52:ef:ea:2c:cb:47:3c:6c:ab:72:
99:87:db:d7:81:73:e5:b4:e0:8c:06:7e:6c:3d:77:36:62:ef:
7f:4c:cf:7a:4a:1b:80:5c:b8:26:4e:f9:fb:6b:08:d2:be:1a:
30:86:a7:ba:4f:28:be:95:c0:d7:ea:f8:b3:0b:3c:af:bc:5e:
8e:b4:6c:2c:6d:ec:ab:80:4e:f4:f9:a8:f3:a8:d6:ca:4d:4d:
53:ba:cd:ee:f3:f4:11:13:7b:1e:84:e2:78:ad:33:a9:d0:f1:
e0:3a:4f:54:fe:88:f1:73:50:9f:f7:99:ac:59:50:a0:85:02:
7a:68:b1:25:91:92:7f:58:e5:52:d2:fc:92:44:46:03:e7:68:
7a:a7:9f:e5:7f:8f:70:f1:02:c5:32:7e:25:09:1c:86:d3:e8:
24:4c:c2:22:2e:ee:bc:1f:58:f9:e3:d1:1e:b1:4d:54:8b:22:
d7:6c:cf:42:62:d8:aa:77:52:b4:72:23:8a:4e:6e:84:48:ac:
df:38:e9:1a:ba:23:8c:5b:f7:7b:c5:b6:23:cc:ef:b8:a3:37:
d9:08:de:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:43:10 2026 by rpki-client