
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
File: PcOGJxwOCo0B-xkNaNhf92TRatQ.mft (raw, json)
Hash identifier: nexBXxERTgX6s6nQ/UQr3XO/vtUmGrKYS9YSn5oBBAk=
Subject key identifier: FE:72:15:69:EC:53:A6:D2:53:64:A4:EE:05:F3:18:9E:CB:0A:1A:0A
Authority key identifier: 3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4
Certificate issuer: /CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4
Certificate serial: 019D9961E1E730A9BBBBA797E6F7484D5ECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
Manifest number: 069E
Signing time: Fri 17 Apr 2026 03:00:21 +0000
Manifest this update: Fri 17 Apr 2026 03:00:21 +0000
Manifest next update: Sat 18 Apr 2026 03:00:21 +0000
Files and hashes: 1: 6Nl-yKrSE7jmZ8LWgcVcWgQlgFg.roa (hash: /v6LQ7GwS5mzr12Ho4pwZqcEQ6oaSt3ITA8fvgcD220=)
2: PcOGJxwOCo0B-xkNaNhf92TRatQ.crl (hash: JXE0mtxfIGzgz430LBqYpugol9gZD5XDnIePjCFEe1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:e1:e7:30:a9:bb:bb:a7:97:e6:f7:48:4d:5e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4
Validity
Not Before: Apr 17 03:00:21 2026 GMT
Not After : Apr 18 03:00:21 2026 GMT
Subject: CN=fe721569ec53a6d25364a4ee05f3189ecb0a1a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:87:ba:41:45:27:7e:5a:53:b9:1d:13:63:9e:
e7:2d:b2:75:57:36:86:0e:bb:2c:ca:1c:e9:0e:48:
19:a2:b6:d3:40:87:09:9f:1e:11:a5:f1:5f:2c:2b:
42:38:55:76:9c:be:70:2a:8a:5e:05:41:30:85:79:
61:4e:85:ee:a0:78:e8:8c:7a:b2:84:93:59:17:e5:
0f:a4:5a:50:3a:09:28:79:28:77:88:0b:1c:97:72:
41:dc:76:88:c2:18:6f:26:60:77:3d:8f:5e:a5:c1:
a7:a1:c0:ba:fc:e8:16:29:95:10:df:d0:d9:b1:15:
3d:89:35:83:f0:7d:17:61:78:cc:0e:db:33:c9:9c:
60:e0:96:f7:1f:e2:5a:b8:92:1d:b0:ad:a8:db:22:
01:83:78:1f:83:9f:2b:23:8f:0e:64:13:3b:b6:a8:
da:cb:e5:c6:03:e9:7e:92:d7:63:3c:9c:a8:8f:1f:
ec:e1:97:fd:1c:c8:01:c5:4b:14:f8:0c:00:74:52:
45:47:31:8b:b4:97:ee:7f:c7:56:8f:d9:43:c4:23:
91:d4:23:5e:42:6d:a9:d0:3e:a1:db:7b:bd:2c:72:
36:41:85:ce:c4:23:4a:c0:4c:d6:52:7d:28:7f:e3:
91:a0:75:85:d3:98:88:2d:fa:e6:95:e6:9b:6d:ad:
80:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:72:15:69:EC:53:A6:D2:53:64:A4:EE:05:F3:18:9E:CB:0A:1A:0A
X509v3 Authority Key Identifier:
keyid:3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:3c:e9:05:cc:84:fe:de:4b:11:ef:7d:2c:cb:87:ef:2e:f6:
03:7c:94:e7:e9:17:30:f9:1e:04:25:3c:b0:9a:da:1d:52:40:
06:0f:c5:c5:bd:52:67:35:5e:b6:a8:a8:ec:bd:39:b8:6e:20:
e2:0c:37:52:28:4d:ca:84:c1:08:a2:d1:c9:32:b3:63:db:90:
4f:66:b0:f8:0f:fd:6c:12:77:ee:d5:78:02:47:c2:4e:30:5d:
1b:25:ae:31:d5:ed:c9:ee:9f:fc:66:dd:70:5c:83:30:78:00:
08:53:3c:78:32:fa:f8:03:cd:11:d1:c1:01:51:5e:d5:bf:37:
3f:29:65:82:a0:f3:12:da:a9:2f:8c:c8:48:67:bc:5e:8b:77:
c6:70:4c:44:4c:65:cf:55:39:30:ec:0e:69:9b:6d:3b:6d:ae:
f8:d7:00:c3:df:4e:15:b3:56:f5:d7:7a:1e:1f:e0:a4:76:ca:
58:df:99:7e:7c:af:25:4a:3f:ee:72:58:04:df:14:2f:78:36:
df:13:d1:48:b0:f4:eb:c8:05:87:dd:f6:92:5c:c0:b1:18:46:
46:b7:fb:7e:d4:3a:49:24:05:7d:c2:ed:56:dc:80:07:e9:26:
09:45:96:f5:16:21:05:5a:84:6f:18:d2:a1:4b:4e:c3:4b:83:
e8:29:ef:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:49 2026 by rpki-client