Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft
File: PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft (raw, json)
Hash identifier: S07vuFWpa6Gy5V0FMVYuW5zzz4nYpUQxm1NHO/QfRlQ=
Subject key identifier: D1:92:D5:A7:C8:E5:09:A3:69:69:E8:E1:55:BD:59:CF:30:54:15:03
Authority key identifier: 3C:4E:E9:11:0B:85:FD:DE:3E:B6:E4:46:25:41:BA:BC:32:36:E8:BA
Certificate issuer: /CN=3c4ee9110b85fdde3eb6e4462541babc3236e8ba
Certificate serial: 019D389C3EB5D0A078F9E18D059B79355FD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7pEQuF_d4-tuRGJUG6vDI26Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft
Manifest number: 1001
Signing time: Sun 29 Mar 2026 08:00:56 +0000
Manifest this update: Sun 29 Mar 2026 08:00:56 +0000
Manifest next update: Mon 30 Mar 2026 08:00:56 +0000
Files and hashes: 1: PE7pEQuF_d4-tuRGJUG6vDI26Lo.crl (hash: KZBUEEBgl3Ofgukj9GTZlX2tusoy4OOyKPdnyYV56iY=)
2: R92c8_GawIo0zWCVe3KEMHOfXwg.roa (hash: 85SuJiAaE3EW56KnlIdwUAzGkX32KcSjQ5U5FCiJonM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PE7pEQuF_d4-tuRGJUG6vDI26Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:3e:b5:d0:a0:78:f9:e1:8d:05:9b:79:35:5f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ee9110b85fdde3eb6e4462541babc3236e8ba
Validity
Not Before: Mar 29 08:00:56 2026 GMT
Not After : Mar 30 08:00:56 2026 GMT
Subject: CN=d192d5a7c8e509a36969e8e155bd59cf30541503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a2:ec:de:4f:5e:2a:d8:a2:04:80:11:eb:fb:
81:71:16:81:be:87:52:c3:63:ac:c5:d3:a0:47:d9:
fe:fd:af:dc:38:9d:ae:b8:f0:95:60:df:5e:85:bb:
ad:f9:70:71:35:cd:b9:66:8f:47:a8:07:30:fe:2d:
88:06:ff:10:83:5b:6a:ba:aa:ab:b6:97:a8:e7:1f:
9c:fd:80:49:bf:d0:eb:ee:98:ef:ec:b1:9b:6d:40:
e3:56:8e:a7:01:b2:19:79:fa:92:70:98:57:cc:4b:
ae:40:23:a4:e8:fb:ac:e1:e2:b6:e2:f6:26:15:76:
b5:24:92:f6:a2:76:24:68:67:f4:ce:c3:ba:8b:8e:
f1:c9:ef:c8:f2:37:cc:37:23:5f:01:22:60:d0:cd:
88:78:a4:50:4a:10:8d:1c:09:0b:33:7b:46:a9:c7:
00:12:51:59:d8:4d:2c:22:48:9a:95:c9:24:79:8a:
a8:45:6b:85:71:e8:bc:0c:f4:77:83:aa:c3:6c:23:
ee:38:da:3f:60:e6:d2:01:6f:c5:07:85:fa:c9:26:
42:7a:31:60:e3:47:ce:b2:43:75:83:b1:b9:d0:2a:
88:8e:8f:2e:e3:56:c5:75:cd:98:bf:6f:ae:26:2c:
2d:f8:95:ba:ab:e6:9a:cb:b7:23:64:13:a6:45:ea:
fe:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:92:D5:A7:C8:E5:09:A3:69:69:E8:E1:55:BD:59:CF:30:54:15:03
X509v3 Authority Key Identifier:
keyid:3C:4E:E9:11:0B:85:FD:DE:3E:B6:E4:46:25:41:BA:BC:32:36:E8:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7pEQuF_d4-tuRGJUG6vDI26Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:24:74:18:ed:5a:14:47:5f:66:c7:47:5d:46:34:32:00:8b:
13:d1:9d:d5:33:b1:77:86:f3:a9:c7:07:a8:f5:c8:6b:63:9b:
e2:40:5b:e6:0a:4c:a8:c8:8a:16:46:a4:8c:32:5b:b0:7e:a2:
16:98:d1:11:08:30:86:97:91:7e:d3:b8:56:92:5f:cb:22:49:
53:68:1d:c9:26:80:dd:0a:7e:15:3e:3b:6a:c9:89:66:87:42:
06:91:be:a8:a5:ce:6f:84:12:84:e0:d5:2d:dc:7a:5d:02:e7:
42:60:ff:1e:a4:49:4c:fb:34:22:78:0b:54:c1:17:bb:1b:d5:
ef:83:1f:a0:a1:00:92:95:4c:ce:50:7c:bc:ad:fd:52:c6:fe:
9d:09:35:3d:f1:ea:a1:e3:70:8a:9f:70:86:1a:e9:18:ed:40:
16:c5:4c:c2:6a:9a:78:14:aa:77:89:cf:7d:fe:4d:60:a1:1a:
21:ca:d2:0c:8c:65:69:82:5b:60:65:31:c8:8d:fd:83:2a:2c:
03:a1:30:2a:74:1c:d0:66:2d:af:d9:48:f3:a9:50:f2:66:2e:
9e:c2:82:15:ac:7b:0a:8c:5d:62:4c:7a:1e:c2:4f:54:b4:0b:
ec:16:19:a7:3b:2a:2e:e2:9d:7d:59:df:72:13:40:64:d9:1d:
54:5b:fe:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:03 2026 by rpki-client