Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
File: Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft (raw, json)
Hash identifier: LU2OTlZ/YSkX5R6nkEIchDiCyspvnCq++7B++ZaekTo=
Subject key identifier: 9D:7A:C6:4C:6A:55:E7:01:0C:08:01:11:EA:E3:27:01:59:C4:E1:4D
Authority key identifier: 3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B
Certificate issuer: /CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
Certificate serial: 019CE4B64B87E1AF65F72EE67FD3BA7A9D04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
Manifest number: 1864
Signing time: Fri 13 Mar 2026 01:01:17 +0000
Manifest this update: Fri 13 Mar 2026 01:01:17 +0000
Manifest next update: Sat 14 Mar 2026 01:01:17 +0000
Files and hashes: 1: 01b-_lSQYswp0XJqCFkWTN3FBao.roa (hash: ewH/zDZQ3rLluYv2guw0C+nvriPG/1vP0wlE4tPc+1Y=)
2: EGoSQ-IvTDuR6KeRNIfT2U3LRKg.roa (hash: L6sNJPWIZpchbyuvO0NFOoU8EkTxoHjIUljX0hT8hYU=)
3: Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl (hash: r7P+dik/Dbge7Vbqml/xWUyNWddZB1HtXANv2gzJEyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 01:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b6:4b:87:e1:af:65:f7:2e:e6:7f:d3:ba:7a:9d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
Validity
Not Before: Mar 13 01:01:17 2026 GMT
Not After : Mar 14 01:01:17 2026 GMT
Subject: CN=9d7ac64c6a55e7010c080111eae3270159c4e14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:72:83:e6:52:bf:09:99:6f:8b:05:66:70:cb:
32:c2:db:72:a9:3e:bb:15:e8:38:21:cc:e5:ac:aa:
50:3d:63:81:6d:f3:1b:65:7c:bf:55:50:26:7f:6f:
0d:ce:27:8b:02:f3:f6:84:27:19:07:d9:c3:6c:22:
ce:52:a6:24:a5:3a:b1:ca:cd:7b:ff:cf:d3:49:58:
40:73:22:b2:d8:d6:75:b4:59:59:73:42:29:c7:d0:
be:aa:ed:8d:ea:1c:ac:a5:8e:d6:7a:7c:0f:88:80:
01:7f:a6:a7:cc:d3:6f:f0:c1:d6:05:7e:e2:63:9d:
f9:8d:1e:a1:fa:6a:17:e9:d2:04:a8:0c:26:fd:b1:
21:49:6c:62:0e:0f:95:fe:64:53:d5:2a:5a:b7:91:
60:3e:9a:d7:55:24:1c:64:1b:54:a0:c0:b9:8c:74:
02:00:f8:61:09:5a:5a:a8:b5:ae:af:86:e0:80:0d:
07:c9:8e:97:fe:e8:66:b7:b2:10:9c:5c:a6:9f:ed:
15:de:ef:45:3c:3c:ce:63:79:8f:2c:37:f4:fb:ea:
63:5e:10:11:c8:ec:3a:eb:83:f0:98:0c:7d:91:8b:
8e:5f:6c:00:64:a7:bd:60:48:2f:4e:5d:45:37:1c:
17:22:1e:55:67:8b:7d:a5:27:88:82:04:18:e1:e9:
62:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7A:C6:4C:6A:55:E7:01:0C:08:01:11:EA:E3:27:01:59:C4:E1:4D
X509v3 Authority Key Identifier:
keyid:3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e2:a3:b4:63:44:b9:ea:40:fa:7b:5e:c0:ff:23:b4:63:cf:
80:6b:a0:2e:17:71:90:e8:e3:85:54:b0:96:11:f2:3f:a4:ea:
b7:ab:14:0b:df:ce:07:07:f0:0c:c0:1e:05:99:28:05:8f:a2:
69:a8:b3:49:d1:3b:4e:7b:ae:e9:7a:92:9d:44:51:86:06:b5:
26:46:e8:9b:e6:12:4a:2a:36:8a:41:d5:08:94:19:50:33:d9:
f4:8f:90:46:3c:8f:48:a5:69:89:dd:99:19:be:69:60:25:1f:
65:8b:6f:07:a0:d1:50:25:15:02:87:62:c6:a5:14:ba:ce:2d:
e9:9b:dd:4c:0f:e1:3d:70:d3:3d:36:8e:95:72:9e:8b:ed:79:
8f:63:6a:f4:99:40:34:d0:37:6a:5d:6e:79:8f:f6:34:64:89:
e0:df:ed:8b:c5:e1:93:b7:d5:99:f6:a1:05:1b:b8:44:d5:b0:
d7:85:4b:b5:1a:f3:9f:2f:24:a8:50:94:4c:8d:99:33:52:2e:
66:b5:d7:42:72:cb:bd:c6:ae:30:90:86:3a:06:11:b0:65:ac:
1d:e0:54:b7:cc:ca:fe:9e:89:6e:00:1e:8d:3c:21:5d:5e:a2:
69:c7:15:9a:51:32:98:38:01:4b:34:a6:5d:06:9a:a7:07:a0:
31:8a:d4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:19:32 2026 by rpki-client