Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft
File: PI0Z2SQBkcNql0ti35PCIUNtm90.mft (raw, json)
Hash identifier: aUcfMcrt9Gqn5BLWQNCojbJBHl2QB5HvffOEQtVvY10=
Subject key identifier: C2:77:55:A7:E3:DE:CB:6A:22:B4:3B:D8:82:5A:F5:EB:49:B1:9F:00
Authority key identifier: 3C:8D:19:D9:24:01:91:C3:6A:97:4B:62:DF:93:C2:21:43:6D:9B:DD
Certificate issuer: /CN=3c8d19d9240191c36a974b62df93c221436d9bdd
Certificate serial: 019D3865AEF8422DF4AC9223220164B4A87E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI0Z2SQBkcNql0ti35PCIUNtm90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft
Manifest number: 0CC9
Signing time: Sun 29 Mar 2026 07:01:20 +0000
Manifest this update: Sun 29 Mar 2026 07:01:20 +0000
Manifest next update: Mon 30 Mar 2026 07:01:20 +0000
Files and hashes: 1: PI0Z2SQBkcNql0ti35PCIUNtm90.crl (hash: wbSxSgUvgfx1N6E3t/AFQkutuWJ8hvWurxyeqIdmoVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft
rsync://rpki.ripe.net/repository/DEFAULT/PI0Z2SQBkcNql0ti35PCIUNtm90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:ae:f8:42:2d:f4:ac:92:23:22:01:64:b4:a8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8d19d9240191c36a974b62df93c221436d9bdd
Validity
Not Before: Mar 29 07:01:20 2026 GMT
Not After : Mar 30 07:01:20 2026 GMT
Subject: CN=c27755a7e3decb6a22b43bd8825af5eb49b19f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:77:20:f5:db:8c:2d:51:c0:16:19:22:19:4f:
bd:56:29:35:fe:d4:4c:b8:5c:6b:22:23:0f:5e:26:
88:5f:fa:6e:e4:f7:ac:44:66:a9:0b:b1:8a:19:2e:
82:1a:ce:d3:bf:be:de:9d:28:3d:9a:e8:06:ca:c5:
d8:b5:59:30:36:c3:b4:e2:0f:41:10:a5:cb:16:3b:
89:d1:f3:7a:e4:ea:91:c5:98:f6:21:72:6c:bf:b3:
ad:43:d0:79:16:e3:f2:48:9f:fb:5d:95:9d:0b:91:
1e:f9:11:90:f2:86:41:45:48:05:16:ed:d8:51:a8:
2f:1f:3f:77:fe:89:97:60:92:11:78:9f:77:f7:78:
1e:a5:42:6e:1d:f4:ed:d2:be:4c:bb:3e:45:e1:1b:
64:f2:2d:50:28:9b:05:fb:af:15:99:b1:29:68:9a:
c0:88:0b:f3:d8:d8:06:73:8a:16:a5:d4:e0:83:3f:
98:d1:89:d0:50:d8:67:96:9c:a8:fa:48:c2:25:61:
46:05:ec:64:be:1d:ee:f6:c3:6c:f6:9d:0b:33:a7:
a1:4c:f6:a5:57:b0:4c:11:4b:6f:0e:9c:5b:30:4a:
51:6d:74:ee:bd:a6:95:b0:8c:5c:b7:2c:cb:d1:d5:
9d:d4:37:fe:89:26:11:53:a3:10:e5:bf:44:ab:1d:
3a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:77:55:A7:E3:DE:CB:6A:22:B4:3B:D8:82:5A:F5:EB:49:B1:9F:00
X509v3 Authority Key Identifier:
keyid:3C:8D:19:D9:24:01:91:C3:6A:97:4B:62:DF:93:C2:21:43:6D:9B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI0Z2SQBkcNql0ti35PCIUNtm90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:4e:1e:62:d7:fb:d8:f4:02:10:9f:07:ae:95:26:68:52:9c:
92:09:a6:f2:87:ab:23:b3:d9:f8:9b:24:c9:c5:6e:93:b9:b4:
7d:b0:4b:14:2b:a1:79:a2:d9:e2:e6:f5:d2:cd:23:c5:d4:c0:
6f:3a:64:47:95:b5:3a:d4:ce:0b:37:55:b6:66:b6:16:82:10:
80:df:50:a8:ca:9b:37:c8:73:d2:58:5c:32:a8:0a:62:7d:da:
23:71:4d:39:97:5f:36:8f:18:ce:68:39:c9:37:0f:f5:f6:c1:
42:3b:97:dd:7b:b0:72:8f:2a:55:b9:ab:a9:ca:86:22:7f:25:
fe:00:98:bb:2e:82:08:e8:39:2c:bc:ea:93:ed:e7:ab:17:ad:
b0:c2:3f:30:2c:be:a6:1e:e1:08:cb:2f:c6:86:3f:3e:61:21:
9c:c3:11:d0:21:52:a1:44:d8:82:fd:b4:f1:b5:12:87:9b:79:
08:35:70:45:35:cb:5d:fc:33:60:ca:1c:50:ed:d3:71:01:7a:
ae:9b:3d:d6:05:de:fb:f4:87:a1:c0:f3:0a:58:40:2d:96:1a:
9d:9d:a3:80:71:97:36:9d:4f:f6:e2:a7:d7:93:f0:65:b6:e8:
23:6c:0a:ca:e2:1e:47:75:61:c0:78:56:4a:4e:49:38:65:34:
d3:95:74:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:31 2026 by rpki-client