Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
File: PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft (raw, json)
Hash identifier: Fn8afj1SvX6eDHnrvcS4vkAzG4h5DEnGh8FPwNRxnYg=
Subject key identifier: BC:0A:70:0B:8F:B8:09:52:BB:EE:03:DE:0C:B5:DB:F4:53:6E:12:28
Authority key identifier: 3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44
Certificate issuer: /CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44
Certificate serial: 019D32D1014542EF845C95FD53A917858FD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
Manifest number: 01C8
Signing time: Sat 28 Mar 2026 05:00:51 +0000
Manifest this update: Sat 28 Mar 2026 05:00:51 +0000
Manifest next update: Sun 29 Mar 2026 05:00:51 +0000
Files and hashes: 1: AjOeFVcLciinUkSYuM-ivopf7bY.roa (hash: dujHfSK3JJ1Up1sejLmok+P4uElPn9XkqC3TePll1TY=)
2: PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl (hash: gL4LZWpZw9oVd2rlmq4zZB2tgkYO1kDCz22OT2g7JsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d1:01:45:42:ef:84:5c:95:fd:53:a9:17:85:8f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44
Validity
Not Before: Mar 28 05:00:51 2026 GMT
Not After : Mar 29 05:00:51 2026 GMT
Subject: CN=bc0a700b8fb80952bbee03de0cb5dbf4536e1228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d1:a3:b5:f5:bf:67:ee:12:bd:f1:52:d8:04:
ea:63:5e:78:2e:c5:5b:c6:08:7c:86:24:6a:84:02:
2c:a5:f3:74:72:60:a9:64:f2:e0:1b:6f:ba:7a:09:
7e:00:2c:47:22:85:90:5b:aa:17:72:93:b7:d9:59:
46:ba:dd:42:33:65:22:e9:19:e4:26:e1:17:3f:55:
49:43:f6:af:59:ca:d1:40:35:3c:23:52:b4:2c:6c:
bb:53:a3:15:b8:65:c1:12:19:3d:c3:cb:da:92:7d:
2f:11:43:4e:20:66:01:2c:26:d7:da:11:bc:55:22:
2f:ab:62:35:42:db:93:94:f5:c7:14:8d:3c:89:6e:
58:38:a2:1b:37:0d:b6:52:8b:90:7e:2e:a2:bb:1b:
59:2c:03:46:9f:87:f8:bd:2f:2b:5f:39:86:9f:3d:
cd:18:21:48:52:00:af:2e:fe:e9:5a:42:3f:f7:3a:
81:41:a5:c1:49:2f:84:35:35:84:f0:f1:a9:57:bb:
dd:a2:f4:31:2b:6a:30:ef:d2:15:4e:ca:9e:0b:b4:
d9:a3:bb:71:79:07:d7:53:58:5c:90:ff:66:8d:d8:
0c:d8:0b:e5:1f:1c:c3:63:ab:be:09:d5:49:7c:86:
45:f5:21:1a:f2:d6:10:d2:c8:3c:08:d2:45:1f:f6:
41:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0A:70:0B:8F:B8:09:52:BB:EE:03:DE:0C:B5:DB:F4:53:6E:12:28
X509v3 Authority Key Identifier:
keyid:3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:f4:f2:ae:0f:17:50:0a:0a:ef:12:ff:1b:d7:06:82:b1:51:
ff:3b:54:3a:24:8f:bc:72:70:2a:3f:27:c1:b9:78:de:1b:56:
2e:df:17:be:4a:70:c9:7e:a3:92:e1:eb:42:2d:d1:0d:16:f8:
8d:f5:24:7c:86:17:00:8e:d0:51:86:21:78:17:ba:f8:11:a6:
25:17:e1:eb:21:fa:f0:24:e8:a4:7a:85:f1:ff:c1:7d:79:21:
b2:23:f6:37:2d:20:77:51:8a:13:03:22:e5:49:14:f1:89:ad:
02:09:3e:3d:e3:23:b6:ff:60:d3:4a:08:37:8c:8d:1b:ab:a0:
72:ea:65:aa:00:af:49:b0:40:fe:0b:f2:33:02:77:99:8a:25:
55:20:35:83:fd:e7:24:f0:ba:f4:58:3e:64:a7:9b:5a:7f:4d:
87:f6:01:3d:4e:3e:bc:9c:53:8c:59:eb:4f:a6:b2:a9:ee:ba:
1f:d9:db:e2:f2:7f:74:17:37:3f:80:e1:0e:27:92:d6:e0:b5:
4b:37:06:7b:40:d4:ae:eb:25:e7:94:6a:38:fe:f5:c7:d4:44:
36:79:4f:d2:7b:32:79:73:a0:50:26:a7:a5:b1:23:2b:fc:66:
23:5a:19:74:fc:4d:c4:cc:20:8e:08:64:cb:2f:32:01:a7:e0:
f0:dc:2b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:50:22 2026 by rpki-client