Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
File: Pc9PDCdz75iQD5w1kHXMph0XwLM.mft (raw, json)
Hash identifier: TB95NA7PijsbTITp3BmkUW739z3XNrL623oZKO6I9HY=
Subject key identifier: 7B:2A:EB:84:8A:F0:8A:90:02:A3:AD:3B:2B:38:50:76:1F:36:98:02
Authority key identifier: 3D:CF:4F:0C:27:73:EF:98:90:0F:9C:35:90:75:CC:A6:1D:17:C0:B3
Certificate issuer: /CN=3dcf4f0c2773ef98900f9c359075cca61d17c0b3
Certificate serial: 019D37525ADC0EE8B6D2E2D9DA8F9136F7E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
Manifest number: 188A
Signing time: Sun 29 Mar 2026 02:00:37 +0000
Manifest this update: Sun 29 Mar 2026 02:00:37 +0000
Manifest next update: Mon 30 Mar 2026 02:00:37 +0000
Files and hashes: 1: Pc9PDCdz75iQD5w1kHXMph0XwLM.crl (hash: 5tbyKiH14W20L6yo7pVaeTvUBQ4v9W6VpZYgIuSu3nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:5a:dc:0e:e8:b6:d2:e2:d9:da:8f:91:36:f7:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dcf4f0c2773ef98900f9c359075cca61d17c0b3
Validity
Not Before: Mar 29 02:00:37 2026 GMT
Not After : Mar 30 02:00:37 2026 GMT
Subject: CN=7b2aeb848af08a9002a3ad3b2b3850761f369802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7a:46:b4:a5:03:44:b6:fe:a4:e0:33:56:b1:
d9:da:2e:54:f9:c9:57:93:8c:22:16:8a:3e:d1:d6:
55:c7:7b:40:77:19:50:1b:98:f3:ea:c1:ac:de:df:
11:ac:e9:bb:b7:70:01:24:f0:be:a6:ca:5e:46:9e:
3b:20:58:ed:36:25:43:80:40:c5:4e:90:04:0e:0e:
e9:ad:0f:8b:d6:91:01:f0:a8:e5:fd:12:f7:15:18:
fe:07:9e:7f:c5:a0:43:91:84:96:f3:89:c0:f6:33:
27:6c:11:48:a1:19:08:8f:e8:4b:54:9f:05:5d:cb:
71:f1:93:f1:fb:e6:9c:7e:16:85:89:a2:57:51:ac:
3f:54:18:d4:9c:51:ff:1e:38:9e:bd:47:5d:1f:ac:
2f:cb:f0:f9:48:a6:e2:73:d0:87:93:f2:e6:c7:21:
0c:ee:c6:16:59:66:0d:55:7e:c2:9a:45:2f:94:8d:
12:24:6d:26:95:51:81:8b:02:73:18:92:7f:ce:60:
5d:d2:5c:e4:40:18:04:2e:25:69:f5:9a:0c:f3:b3:
71:84:5e:33:ee:2c:5c:82:aa:a8:13:25:20:49:28:
29:3c:07:80:03:f8:a1:16:fb:c4:b8:46:54:86:f0:
97:2f:fa:cb:7c:91:f6:37:ab:48:f6:9b:0d:fa:16:
92:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2A:EB:84:8A:F0:8A:90:02:A3:AD:3B:2B:38:50:76:1F:36:98:02
X509v3 Authority Key Identifier:
keyid:3D:CF:4F:0C:27:73:EF:98:90:0F:9C:35:90:75:CC:A6:1D:17:C0:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pc9PDCdz75iQD5w1kHXMph0XwLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/098172-c98a-48fc-afc6-3bde7396b7b4/1/Pc9PDCdz75iQD5w1kHXMph0XwLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:72:9d:2f:72:6c:23:91:61:69:c4:61:c8:cd:57:74:22:7b:
83:56:26:bc:19:5a:3c:dd:a8:d3:85:36:7d:97:a6:93:27:c9:
4b:4c:1a:47:a8:c3:0f:0a:4e:d5:99:2a:9b:33:21:95:5b:4a:
b4:e7:ea:76:fc:f1:73:31:57:35:f4:46:8b:5a:c9:9b:9a:0f:
b9:79:56:b8:72:b3:a8:98:0d:34:d5:25:fd:09:f2:5b:06:59:
74:ea:85:af:65:f3:b1:eb:38:7d:e9:9f:c8:39:a6:77:4c:93:
2e:8b:3a:bd:ee:f7:66:28:f5:4a:cf:de:46:0d:23:22:18:61:
13:43:d4:af:f9:b6:79:37:55:f2:0a:18:99:72:81:13:b8:81:
6c:86:80:e8:49:a2:31:88:8d:80:f9:84:19:71:3a:58:ce:3b:
b0:59:e7:b1:82:86:7c:85:a4:ec:08:90:dd:55:cf:b5:ac:e3:
ca:ca:97:89:7c:96:3f:e2:c3:28:f6:40:dd:ec:f2:6b:6a:84:
e0:91:bc:8c:8f:1b:43:87:21:f5:d2:e7:c9:b2:ce:eb:14:bd:
51:68:ff:64:63:83:0b:c9:5f:c5:69:ac:f3:de:13:94:19:de:
43:90:f9:66:b8:fe:e1:ab:81:61:7b:26:55:46:bf:32:89:22:
18:8e:42:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:40 2026 by rpki-client