Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft
File: pPC-25eOGSjR6XDKLtlpNxGP_2g.mft (raw, json)
Hash identifier: Q6YznmwMqrEtM7h9uGr+AuMQlq8i2CU2R6pzrrYoHQw=
Subject key identifier: 21:D2:4D:B1:DA:93:C1:9F:95:12:C0:FD:11:F2:77:24:33:B1:58:8E
Authority key identifier: A4:F0:BE:DB:97:8E:19:28:D1:E9:70:CA:2E:D9:69:37:11:8F:FF:68
Certificate issuer: /CN=a4f0bedb978e1928d1e970ca2ed96937118fff68
Certificate serial: 019D38D36497AA3ABA9AD8330C04A6D21CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPC-25eOGSjR6XDKLtlpNxGP_2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft
Manifest number: 1211
Signing time: Sun 29 Mar 2026 09:01:11 +0000
Manifest this update: Sun 29 Mar 2026 09:01:11 +0000
Manifest next update: Mon 30 Mar 2026 09:01:11 +0000
Files and hashes: 1: i0Opx7elnQLrytJFk1gVJFatVmw.roa (hash: NjWTI7Ls1hzUuifszjZ9jtLVnxuLMN8Y2bX/MbcavFE=)
2: pPC-25eOGSjR6XDKLtlpNxGP_2g.crl (hash: 5XvGRW3K4LPbMvPMQm/p857T0ftODqv+mPNdCBSWsys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPC-25eOGSjR6XDKLtlpNxGP_2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:64:97:aa:3a:ba:9a:d8:33:0c:04:a6:d2:1c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f0bedb978e1928d1e970ca2ed96937118fff68
Validity
Not Before: Mar 29 09:01:11 2026 GMT
Not After : Mar 30 09:01:11 2026 GMT
Subject: CN=21d24db1da93c19f9512c0fd11f2772433b1588e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ed:18:2b:f9:cf:e2:d3:6f:a4:33:c5:7b:4e:
00:8a:4c:e9:e0:7c:88:a6:2b:d6:3f:88:c4:36:78:
2c:32:64:07:f5:49:30:c0:ff:de:6b:3b:2c:41:62:
89:63:03:5d:38:fc:43:e1:4d:38:6a:6e:45:b1:5c:
b7:0d:c0:c0:10:ce:e1:95:dc:14:1d:f6:f6:76:d0:
a5:50:bd:c0:eb:33:c4:39:bc:6b:70:3e:dd:2c:0c:
94:b8:6f:1a:1d:43:80:45:04:e7:cb:84:db:a6:18:
18:c1:66:4d:98:d7:4b:53:5a:97:ce:52:d8:b7:07:
73:07:a6:d6:d6:ca:34:f2:75:ee:39:34:04:a9:5e:
f0:88:ef:da:16:f0:41:af:08:81:d5:45:f2:6c:3e:
37:cb:8e:b5:6d:8e:e5:69:ec:77:39:29:a3:67:e6:
4b:22:4b:37:8b:7f:04:c0:55:00:cb:04:9b:56:90:
d4:00:0a:7e:52:c3:f8:a6:ed:bd:91:d7:66:b3:03:
f1:0e:d6:aa:fb:bf:4e:72:b2:5e:da:9a:a6:ce:69:
70:d7:07:72:72:51:81:d2:45:14:17:c2:20:c9:bd:
32:96:ef:61:a7:87:d7:b1:e6:83:d0:04:a2:21:eb:
34:7c:7e:54:6f:1c:75:6b:07:2f:fb:37:2e:47:9f:
89:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D2:4D:B1:DA:93:C1:9F:95:12:C0:FD:11:F2:77:24:33:B1:58:8E
X509v3 Authority Key Identifier:
keyid:A4:F0:BE:DB:97:8E:19:28:D1:E9:70:CA:2E:D9:69:37:11:8F:FF:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPC-25eOGSjR6XDKLtlpNxGP_2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:6d:59:a5:78:8d:2d:a5:3a:66:3c:59:68:64:74:57:7a:ff:
55:f0:69:15:38:ab:ef:4b:a0:17:9e:c7:53:ab:89:7f:1d:ab:
4d:90:12:c1:3c:1d:24:b7:fe:31:75:9c:18:88:3d:72:ef:de:
40:61:f8:92:48:e4:97:8d:2a:5a:af:6e:dc:71:f7:7c:dd:dc:
93:0e:7e:46:3e:4b:fe:6f:cf:c2:78:3a:5e:76:97:bb:52:99:
b5:f7:a7:98:16:cb:f5:bd:6f:ca:ee:97:dc:20:db:26:30:74:
a8:35:32:d6:a5:01:90:03:1f:98:6b:6a:9a:9d:11:d5:d6:e4:
38:03:54:8e:74:9d:40:35:8c:a3:5c:f0:f3:b2:31:ab:21:b4:
15:07:ee:46:2c:02:58:b0:d3:97:a5:2f:d2:2d:31:a7:5c:5b:
93:92:f3:3e:4c:12:68:e9:ae:6e:91:ce:69:b4:a1:8b:58:47:
be:1e:32:b1:56:29:35:ff:2c:3a:21:c2:3f:7c:60:9c:5f:e1:
18:07:ef:7b:2e:b8:03:4d:ee:08:14:07:9a:b6:1c:a1:a4:ae:
0d:c3:2a:7c:ae:33:26:67:d3:32:32:62:43:43:aa:b0:2d:c6:
7f:d8:94:1c:82:36:29:fe:bb:5e:73:4e:2a:94:62:2c:f5:94:
22:21:60:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:40:35 2026 by rpki-client