Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
File: d-PCkAtZl1QoPyfztOjX9sRRCXI.mft (raw, json)
Hash identifier: mEs0Qjn/3dcvMp2HChnJifsslaNe17AcLuinRw02b+Q=
Subject key identifier: 78:5C:09:8C:5F:CA:C5:FE:3E:86:2B:15:D2:8D:BB:8D:B1:25:B5:18
Authority key identifier: 77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72
Certificate issuer: /CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
Certificate serial: 019D3865CB05C4777052F257A4A9FBCCA083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
Manifest number: 0FE2
Signing time: Sun 29 Mar 2026 07:01:28 +0000
Manifest this update: Sun 29 Mar 2026 07:01:28 +0000
Manifest next update: Mon 30 Mar 2026 07:01:28 +0000
Files and hashes: 1: EGK4nb9z9VfWmRRiWLjjvzCPL0k.roa (hash: 6m0dtYv3ZvmHrMVqOYfbNP/IRoFizFOn4VneAK9Wapo=)
2: d-PCkAtZl1QoPyfztOjX9sRRCXI.crl (hash: AwPxLankH5GCe3u5wM90S+JLOmGppzxFCwvlFDpS2NE=)
3: ebEe0KFXRt6CKgcr6dQsEMc5q2I.roa (hash: npVCU+u49BuM8enRn8nrbB2PIwcLlnC6iNP5aZaAass=)
4: zvfze04wd9Ww6fC_EKoJBvHb03A.roa (hash: hqV4t/kgHH9kucLz+TkShbpTOt1VzgMM/WaloxQJWb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:cb:05:c4:77:70:52:f2:57:a4:a9:fb:cc:a0:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
Validity
Not Before: Mar 29 07:01:28 2026 GMT
Not After : Mar 30 07:01:28 2026 GMT
Subject: CN=785c098c5fcac5fe3e862b15d28dbb8db125b518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b8:e8:de:88:c2:1b:f0:5d:1f:eb:9d:d0:a1:
b1:cc:0a:58:64:f6:89:01:9b:f6:01:bf:5d:de:52:
6b:28:e6:8d:cf:2f:2d:4a:79:8e:ca:75:8f:e0:c4:
03:9a:a2:60:7c:42:02:b7:96:52:87:24:53:8e:36:
61:a4:57:c6:95:b5:43:ec:e1:88:cf:20:41:d8:98:
36:37:ad:4c:4b:5b:34:2a:a7:7d:34:09:3f:ef:c4:
7f:75:f9:75:97:00:94:d7:09:56:54:c5:e2:1c:e8:
2c:92:08:6d:2f:ee:12:fd:a0:c0:23:5d:29:e1:b3:
39:eb:b2:28:d0:38:a4:5c:30:74:36:4e:f1:6a:7e:
4a:a8:7a:82:15:0c:2a:bc:53:a2:30:8c:b5:65:8c:
bb:a8:00:89:c6:e9:7b:a8:42:c3:f3:33:24:6a:48:
f5:a2:d6:ec:a7:74:50:fa:ed:02:56:cb:e8:8f:b2:
0e:a7:ae:92:b1:75:03:91:00:fa:6b:e2:60:42:1b:
8e:8d:f8:2d:21:98:93:41:a1:5b:4b:88:96:85:4b:
52:8d:4b:05:f4:14:dc:bb:3d:b1:2d:59:90:08:97:
e7:cf:48:02:d7:98:21:9e:a3:64:23:7f:03:fd:41:
d8:e2:83:6c:1a:00:05:a7:b0:0c:ef:d2:5f:86:ab:
15:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5C:09:8C:5F:CA:C5:FE:3E:86:2B:15:D2:8D:BB:8D:B1:25:B5:18
X509v3 Authority Key Identifier:
keyid:77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:b5:6b:c2:cc:95:8a:35:5f:4d:12:63:84:35:77:ad:c5:e7:
0b:11:8f:70:4f:37:c3:e2:5a:b0:08:0f:e7:aa:fe:d0:3d:fd:
52:fa:18:f3:ac:b0:9c:7c:13:2e:5d:74:47:a4:8e:ae:81:ce:
56:c9:df:8d:22:49:34:7c:5c:e9:ec:3a:61:33:55:e8:a3:46:
7a:6e:cc:0f:be:8f:8d:95:36:18:5f:24:cf:da:81:0b:97:be:
04:a4:82:a7:8d:2d:c3:77:d8:ce:58:4a:52:4f:ae:41:17:ce:
3c:97:6a:44:7b:09:3a:d8:52:c3:20:0b:04:6b:ab:21:9a:d9:
fd:2f:84:e4:2c:34:a7:a9:93:bf:cb:06:81:91:84:b6:a8:e1:
6a:5f:69:a5:5f:a1:7f:5e:65:fb:fb:fe:36:a3:ce:bf:6e:08:
db:76:9e:14:7e:76:17:68:d4:cc:4f:49:b7:98:34:d2:e1:d9:
f1:a8:bc:d1:47:a5:a9:76:af:e8:f6:93:bf:10:a5:df:ed:6e:
db:fd:c4:0e:d2:c7:91:00:f5:dd:28:82:cf:c8:41:15:b7:d9:
a5:d7:6c:27:87:a8:07:68:18:7b:a3:99:d8:84:31:c4:7a:94:
76:1a:c7:7c:9e:15:f5:85:25:2b:74:88:5e:3f:2c:6e:4e:31:
35:f5:48:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:50 2026 by rpki-client