Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
File: PP8fKxF18GBdAl5RAXNpwcqLGkY.mft (raw, json)
Hash identifier: z63w1wX3wgCE68kAl3/RPRDumEDuaHROZL9EpOIOaUo=
Subject key identifier: AB:64:98:19:32:B6:32:5B:2F:36:C6:3C:E0:5C:56:77:EA:14:39:96
Authority key identifier: 3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46
Certificate issuer: /CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46
Certificate serial: 019CAE35EC5722DB8A4742170A4BB5D29DB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 11:01:35 +0000
Manifest this update: Mon 02 Mar 2026 11:01:35 +0000
Manifest next update: Tue 03 Mar 2026 11:01:35 +0000
Files and hashes: 1: PP8fKxF18GBdAl5RAXNpwcqLGkY.crl (hash: Y6j6wvg38s3McSkDdGvUtQvKZNCCFdDUIshc6ke3hs0=)
2: wXINTHM3KqkNQiOuyaFEznGq6_I.roa (hash: CBrAjvZnvJ+pznTkA8zKPHX79jqdqYinxbkP2/HU+Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:ec:57:22:db:8a:47:42:17:0a:4b:b5:d2:9d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46
Validity
Not Before: Mar 2 11:01:35 2026 GMT
Not After : Mar 3 11:01:35 2026 GMT
Subject: CN=ab64981932b6325b2f36c63ce05c5677ea143996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:53:a8:ee:3c:ab:f9:30:5e:0c:d0:a3:fe:ec:
7e:2d:5c:1e:ff:97:5b:fd:31:d2:30:0d:38:b0:c9:
e6:19:d0:8e:91:11:6c:c0:6f:69:73:de:c8:db:da:
63:7c:39:96:49:87:4f:e4:c7:02:d2:4a:47:a1:cb:
1f:77:ee:f2:03:3a:2c:14:14:1f:35:65:35:7c:5e:
f7:02:fc:f1:23:2a:b7:e3:de:a0:3a:a8:b2:48:0e:
30:d8:96:f4:bf:53:00:8e:4b:69:12:5e:05:7a:17:
e9:80:23:ec:be:67:74:cb:52:29:6b:34:b8:3d:91:
17:ec:31:d1:0d:59:98:1c:6c:2f:3e:85:91:48:88:
c2:37:1a:12:2d:89:71:92:f2:b9:a3:01:04:01:f9:
f2:c1:4e:23:51:6d:0d:77:98:03:16:12:7d:eb:1a:
33:0b:c4:fb:a3:72:98:05:28:1e:bd:43:c3:dd:5d:
e8:cf:a8:3f:29:b2:dd:70:a3:1c:cc:ac:8c:d0:c5:
87:94:2d:2a:4e:65:2d:30:cb:43:4e:62:dd:ba:7e:
37:8d:db:22:95:fb:a4:20:92:ac:0a:18:99:35:a6:
15:39:5c:89:cf:9b:b8:a9:04:66:7c:16:8b:56:c1:
57:9e:97:7f:cf:50:61:34:bd:dc:6d:9a:08:df:d5:
c6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:64:98:19:32:B6:32:5B:2F:36:C6:3C:E0:5C:56:77:EA:14:39:96
X509v3 Authority Key Identifier:
keyid:3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:bb:9e:76:db:e4:c8:89:8a:b2:00:3b:fa:04:be:8b:46:a2:
67:e7:62:42:c6:00:d9:47:2e:a3:fd:a3:95:df:21:de:20:ac:
68:74:d8:54:d6:35:bb:19:46:c2:fa:bc:fe:0c:c8:53:c2:02:
ee:fe:f4:df:39:31:62:f4:4a:be:96:04:88:1e:dd:9b:b0:42:
d3:fc:5b:fe:db:67:09:43:6a:47:ad:be:b0:a3:3d:18:9f:35:
1b:5d:62:c1:9b:28:4f:8e:d3:47:b4:03:7a:da:f7:63:b2:7d:
30:2e:1c:49:e2:3b:90:a7:e1:c1:06:a0:ae:a0:30:f5:38:e8:
e7:ab:b0:ab:14:86:9a:4d:20:68:6c:ab:49:4f:62:65:ce:ea:
c9:0c:9b:89:1a:85:6f:35:52:98:ec:d9:b0:6b:de:e5:36:7a:
28:d1:41:c3:eb:42:d2:b1:78:6d:89:c7:44:c1:4f:66:3b:4e:
92:61:ec:32:df:58:33:af:89:de:cd:af:75:8e:3a:f2:2e:d2:
d9:23:27:0a:4c:5e:af:58:7c:9a:ff:17:ba:a9:59:8e:5d:ba:
7d:66:7d:24:7f:95:ac:87:be:8c:54:3b:b7:7c:30:8a:3e:f7:
08:b9:02:5f:3e:7b:53:15:7b:bd:c1:d1:5e:dc:e4:24:2a:6f:
36:cd:66:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:52:34 2026 by rpki-client