Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
File: PCr6XHBtPrCpLaibXUG5NutJzLg.mft (raw, json)
Hash identifier: KH1b45MSHnf8z4ClwYvBQLlxhWcSfxoF1shFnO5t5XU=
Subject key identifier: 7B:DF:D7:5B:0F:F0:55:33:76:6D:73:2F:C7:75:55:34:8D:A4:15:3D
Authority key identifier: 3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8
Certificate issuer: /CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8
Certificate serial: 019D9A748D43F17A4FD4B031BAC6BC380610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
Manifest number: 137A
Signing time: Fri 17 Apr 2026 08:00:22 +0000
Manifest this update: Fri 17 Apr 2026 08:00:22 +0000
Manifest next update: Sat 18 Apr 2026 08:00:22 +0000
Files and hashes: 1: MKEGaibdVBKo4Y86kBLFEKWntWc.roa (hash: wEDcZmG8dZd0uCd7pZvA4Qd89Tl1qRGRFYmO0DbhcdI=)
2: PCr6XHBtPrCpLaibXUG5NutJzLg.crl (hash: MiYShOpPXoBMUKIj4xj6d2KwGjsYojyFruXiYhCeC5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:8d:43:f1:7a:4f:d4:b0:31:ba:c6:bc:38:06:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8
Validity
Not Before: Apr 17 08:00:22 2026 GMT
Not After : Apr 18 08:00:22 2026 GMT
Subject: CN=7bdfd75b0ff05533766d732fc77555348da4153d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:54:40:bb:d5:23:ce:f3:53:c5:f5:d5:c8:54:
4f:04:90:21:9a:b0:c5:51:33:26:55:74:7c:f5:bd:
bb:39:0f:65:75:a8:95:f5:97:11:28:df:69:9f:58:
61:bb:65:9c:70:a1:da:35:9b:8d:25:00:53:31:c3:
8a:34:e0:18:84:6d:c6:c8:c1:8e:51:5a:db:05:be:
6b:a7:7f:0b:8a:db:19:40:ea:d2:48:28:03:be:b7:
1f:c7:12:d3:2a:4c:c4:8b:ed:ca:b7:9f:9f:15:22:
12:f3:92:8b:2f:34:2f:18:11:51:fe:1b:46:28:9a:
31:86:dd:d5:c5:1f:fb:9f:8e:d6:a1:59:60:c1:41:
49:3d:f8:6a:ff:cf:e2:44:51:81:36:f4:e9:7a:fb:
4e:97:79:3e:e3:2e:69:f1:40:e1:81:60:95:bd:6f:
6f:1e:d5:60:eb:64:b5:82:10:a3:df:2d:3a:04:22:
e5:a7:f1:19:14:05:da:6e:90:9e:60:ae:67:a0:9a:
92:fa:75:39:c8:f6:ab:b9:f4:ef:14:6f:08:70:07:
0e:47:64:ca:67:14:fa:73:34:a9:df:e8:de:50:f6:
d1:e7:19:5e:9f:36:25:df:39:f3:90:6c:28:5e:29:
1f:a3:81:69:51:df:cb:b0:43:6d:10:c4:28:87:2f:
1d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DF:D7:5B:0F:F0:55:33:76:6D:73:2F:C7:75:55:34:8D:A4:15:3D
X509v3 Authority Key Identifier:
keyid:3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:23:90:f4:cb:cc:de:9c:fd:9d:4f:28:1e:dd:ff:2e:eb:3c:
0e:e6:28:c1:c9:97:e9:cc:94:6a:24:8c:96:66:f3:83:29:b8:
53:d6:4b:53:74:93:7a:c2:b6:03:a3:d8:52:de:05:f7:a5:27:
08:2c:25:91:65:8e:5a:88:58:e6:e8:46:35:18:09:37:09:24:
51:79:fe:61:66:f6:84:59:f2:5b:a8:ff:39:da:db:55:af:65:
29:c3:20:15:92:a5:b8:59:0b:06:c0:45:be:e7:f8:1e:25:bf:
37:1f:c2:03:b8:30:82:04:41:b5:f8:16:64:5b:06:64:92:18:
17:7c:51:bf:c7:aa:c5:e1:96:fb:63:09:53:c6:db:2e:95:dc:
63:ed:29:42:01:04:41:19:41:5e:ae:d2:a8:37:7b:c2:e1:05:
6a:e4:0b:de:ff:14:37:ba:57:20:84:91:fd:be:5d:d7:fe:96:
29:4d:2a:0e:e3:a8:74:53:dd:47:17:c3:de:82:c9:c6:19:34:
ad:7b:78:75:7f:fb:c1:55:0c:df:cf:9c:45:43:84:87:79:01:
f0:bb:b5:ce:49:8c:99:57:15:6c:86:9f:00:dd:b1:b5:1b:10:
f8:e5:a6:00:46:fe:94:21:33:c8:a0:d3:69:00:24:fd:63:e5:
88:44:06:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:10:43 2026 by rpki-client