Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
File: PCr6XHBtPrCpLaibXUG5NutJzLg.mft (raw, json)
Hash identifier: jgZqqtoz629HnuWEdDeKFQoNc47VgMNcb8nOxlecx38=
Subject key identifier: DA:48:C9:A9:23:F9:C2:49:EF:6E:16:B4:77:97:FB:8B:16:66:FE:08
Authority key identifier: 3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8
Certificate issuer: /CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8
Certificate serial: 019CACEBAFAD9C368D9A7ED49D04056483BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
Manifest number: 12FF
Signing time: Mon 02 Mar 2026 05:00:52 +0000
Manifest this update: Mon 02 Mar 2026 05:00:52 +0000
Manifest next update: Tue 03 Mar 2026 05:00:52 +0000
Files and hashes: 1: MKEGaibdVBKo4Y86kBLFEKWntWc.roa (hash: wEDcZmG8dZd0uCd7pZvA4Qd89Tl1qRGRFYmO0DbhcdI=)
2: PCr6XHBtPrCpLaibXUG5NutJzLg.crl (hash: 376rTjBDe4dlRJ4zkPbJGikP++0IKsSFkPY60i2sSPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:af:ad:9c:36:8d:9a:7e:d4:9d:04:05:64:83:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8
Validity
Not Before: Mar 2 05:00:52 2026 GMT
Not After : Mar 3 05:00:52 2026 GMT
Subject: CN=da48c9a923f9c249ef6e16b47797fb8b1666fe08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:38:a9:14:84:aa:54:4f:01:62:7c:cd:04:74:
e6:75:11:91:f2:7e:a5:8b:25:e3:e9:99:15:56:d2:
6f:a0:72:d6:4c:50:86:2a:c4:50:ff:e8:24:fc:66:
51:ed:1f:5d:ca:82:9f:a5:e5:32:2e:be:6e:4d:92:
a2:a3:2a:75:e4:f0:8e:05:fe:28:1f:28:68:eb:69:
ba:bb:e3:c5:f3:55:07:01:da:67:df:b8:9f:ae:9b:
f5:76:26:ce:a1:9c:d7:6a:c4:6f:9c:c2:2f:0d:71:
bb:14:2b:21:c8:24:37:ad:79:00:6c:0d:33:bb:c6:
52:c8:eb:56:70:9e:31:50:85:0e:97:83:31:a0:91:
15:47:e1:fd:11:8e:d8:83:a8:de:a7:35:2e:f2:79:
68:18:36:e7:58:0b:d8:94:ba:d1:85:83:39:be:17:
e2:7e:e0:b4:63:5a:08:93:01:dd:06:2f:38:af:2c:
a9:c0:33:67:da:b9:71:b1:3f:3b:d5:d7:23:d8:f5:
f0:47:6b:f3:d6:60:6b:a1:8c:7a:3b:6c:f8:d2:0e:
02:31:ea:39:e4:49:c5:37:ca:48:12:cd:be:93:b4:
09:fd:d8:6b:c6:6a:a5:a6:1e:c5:b4:c0:91:2b:cc:
9e:e9:a8:cd:89:d3:28:34:2d:7b:46:61:7a:9b:03:
a4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:48:C9:A9:23:F9:C2:49:EF:6E:16:B4:77:97:FB:8B:16:66:FE:08
X509v3 Authority Key Identifier:
keyid:3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:12:85:0c:ba:3d:11:33:23:05:10:3d:32:58:f3:05:5a:bd:
96:a3:89:a5:86:97:80:f8:27:39:e3:5a:cb:ba:59:a6:31:3e:
3b:85:8c:eb:e3:14:84:d8:f8:9a:22:a5:c5:2b:78:05:71:7d:
81:ae:c5:8b:0e:c5:15:2b:e6:da:7c:76:e5:b3:4a:66:bc:6c:
51:24:ce:fe:29:d2:28:31:3f:3a:59:b1:9e:16:c1:1d:78:5b:
50:ac:42:27:e1:ac:69:13:1e:9d:3c:3f:45:3c:80:a7:45:5f:
e0:d1:da:ac:19:bc:a2:7b:e1:00:6b:ce:92:1e:77:04:65:28:
43:73:60:d5:f2:b8:99:e2:f8:73:74:f3:eb:e4:f5:de:97:f8:
48:3c:35:7e:8d:21:c0:77:85:ed:61:7e:52:4e:47:ed:89:1e:
1f:ff:8d:a4:3d:8d:99:60:df:8d:e2:5c:aa:f2:91:69:36:43:
3c:45:31:87:3d:e0:ce:35:19:4b:75:1b:54:8c:5f:7e:e3:c9:
fd:d9:49:9b:26:98:ee:31:b3:56:47:e0:4e:d5:9c:35:fc:ab:
b4:d9:01:f1:c6:f2:fc:37:7e:33:9b:1d:8f:bd:b5:81:12:84:
99:43:de:dd:b3:6b:90:ec:eb:7f:12:1a:57:a6:ac:6f:5e:bd:
fa:6d:1f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:24:05 2026 by rpki-client