Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
File: pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft (raw, json)
Hash identifier: i8VF0Qz5/1dzEiHDLqXn5LJ40DhxhTl9bG+Uy/FaKME=
Subject key identifier: CA:99:53:E1:8C:35:AB:C7:CA:7F:AB:93:29:E9:94:01:D9:61:25:8F
Authority key identifier: A5:C2:28:64:E3:92:0E:16:0A:D9:B8:4F:F0:1D:A8:66:AA:40:97:85
Certificate issuer: /CN=a5c22864e3920e160ad9b84ff01da866aa409785
Certificate serial: 019D3752D2C4CFD4AB9E8312CCF5F80B1EE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
Manifest number: 0762
Signing time: Sun 29 Mar 2026 02:01:07 +0000
Manifest this update: Sun 29 Mar 2026 02:01:07 +0000
Manifest next update: Mon 30 Mar 2026 02:01:07 +0000
Files and hashes: 1: pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl (hash: 6RDILhUSqP3aDk+nqf0Uf4hSyFMFDmZ9qln18Zaipho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:d2:c4:cf:d4:ab:9e:83:12:cc:f5:f8:0b:1e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c22864e3920e160ad9b84ff01da866aa409785
Validity
Not Before: Mar 29 02:01:07 2026 GMT
Not After : Mar 30 02:01:07 2026 GMT
Subject: CN=ca9953e18c35abc7ca7fab9329e99401d961258f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:49:77:4f:60:c0:17:50:10:60:23:c1:3d:
eb:ee:9b:0b:ee:6e:9f:8a:27:d6:da:3d:69:d9:6a:
48:64:28:22:46:d6:bb:4d:12:9f:41:9d:a9:6b:f3:
50:89:ac:85:49:32:a3:f2:0c:7b:06:17:ba:0e:7a:
c0:01:34:f1:93:6b:86:6f:05:80:67:1d:56:98:11:
aa:b4:3a:00:95:af:41:40:9b:cc:21:ef:8b:d0:24:
df:7a:6b:f7:3a:fc:0e:fe:55:a6:2f:45:e3:f9:81:
ef:72:40:1f:f4:cd:6c:e5:1e:31:5e:c7:c3:fa:19:
41:4c:b8:1b:79:c0:ff:89:68:37:5a:c0:9b:91:ef:
0e:63:93:61:4d:58:b3:78:1f:ff:5c:c7:06:b2:b9:
04:dc:ce:1e:e6:bd:d3:d1:b5:a1:2c:58:65:c3:60:
ea:e2:98:72:4a:3e:62:e9:95:f8:a3:7c:01:8e:9b:
63:0b:60:28:b4:c5:f1:6e:3a:e6:07:a3:47:79:fa:
e9:ae:95:88:d4:32:1c:d7:e6:3d:78:cb:e1:f4:23:
6c:dc:0f:c7:42:55:33:1f:6c:95:d9:9f:e6:fb:a5:
0d:2f:5b:3a:02:1d:33:07:93:b5:51:ab:0a:7a:8b:
6c:6d:a7:1c:2e:69:95:98:c0:6b:25:a7:4e:34:f9:
06:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:99:53:E1:8C:35:AB:C7:CA:7F:AB:93:29:E9:94:01:D9:61:25:8F
X509v3 Authority Key Identifier:
keyid:A5:C2:28:64:E3:92:0E:16:0A:D9:B8:4F:F0:1D:A8:66:AA:40:97:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c7:d7:d8:28:28:94:25:f8:9a:5f:ea:e4:e8:42:d7:00:64:
8c:ce:43:03:bf:64:63:a7:ec:61:38:35:c1:87:c9:aa:f8:a0:
3e:5c:d8:6a:78:3c:b3:b8:ba:d7:8c:2d:eb:15:cf:a0:bc:f5:
90:56:35:70:c4:52:24:7e:81:53:7e:c2:01:ec:8f:28:7f:20:
aa:51:19:92:34:46:07:83:e2:1c:c2:87:06:c0:f7:72:fe:f7:
3f:e8:4f:22:88:12:88:d8:ca:f0:a6:09:d9:6b:ab:21:ea:84:
18:a2:95:b4:d3:fe:c8:27:3c:8b:74:74:b3:ec:c9:7c:27:d8:
8a:2b:74:47:fe:9c:2e:1e:61:b2:b4:f3:d4:e4:d1:74:cb:1b:
3f:4d:c0:2f:e5:9b:38:86:ea:ce:ef:86:f9:cd:bf:92:ea:a2:
57:58:73:fa:0c:66:ac:1b:28:af:1e:14:4b:8c:2f:74:63:54:
41:30:66:d1:90:d5:94:e1:53:14:cd:8d:34:cb:cc:9c:38:25:
b4:d4:f9:e4:85:a5:cd:cd:b3:85:fb:8f:c1:aa:39:f8:18:0a:
8e:d1:43:bb:0f:91:34:27:a9:fe:26:f5:87:7c:3e:b8:cd:4b:
47:15:0c:d7:05:99:bc:f2:9e:d3:5d:67:52:2d:fe:7e:d5:65:
19:86:62:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UtLEz9SrnoMSzPX4Cx7nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YzIyODY0ZTM5MjBlMTYwYWQ5Yjg0ZmYwMWRhODY2YWE0
MDk3ODUwHhcNMjYwMzI5MDIwMTA3WhcNMjYwMzMwMDIwMTA3WjAzMTEwLwYDVQQD
EyhjYTk5NTNlMThjMzVhYmM3Y2E3ZmFiOTMyOWU5OTQwMWQ5NjEyNThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttxJd09gwBdQEGAjwT3r7psL7m6f
iifW2j1p2WpIZCgiRta7TRKfQZ2pa/NQiayFSTKj8gx7Bhe6DnrAATTxk2uGbwWA
Zx1WmBGqtDoAla9BQJvMIe+L0CTfemv3OvwO/lWmL0Xj+YHvckAf9M1s5R4xXsfD
+hlBTLgbecD/iWg3WsCbke8OY5NhTVizeB//XMcGsrkE3M4e5r3T0bWhLFhlw2Dq
4phySj5i6ZX4o3wBjptjC2AotMXxbjrmB6NHefrprpWI1DIc1+Y9eMvh9CNs3A/H
QlUzH2yV2Z/m+6UNL1s6Ah0zB5O1UasKeotsbaccLmmVmMBrJadONPkGTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMqZU+GMNavHyn+rkynplAHZYSWPMB8GA1UdIwQY
MBaAFKXCKGTjkg4WCtm4T/AdqGaqQJeFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGNJb1pPT1NEaFlLMmJoUDhCMm9acXBBbDRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9hZDk4NGEtOTlhYy00MTNhLWJkZGUt
NTRjODg5MGRmZjJkLzEvcGNJb1pPT1NEaFlLMmJoUDhCMm9acXBBbDRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9hZDk4NGEtOTlhYy00MTNhLWJkZGUtNTRjODg5MGRmZjJk
LzEvcGNJb1pPT1NEaFlLMmJoUDhCMm9acXBBbDRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMMfX2Cgo
lCX4ml/q5OhC1wBkjM5DA79kY6fsYTg1wYfJqvigPlzYang8s7i614wt6xXPoLz1
kFY1cMRSJH6BU37CAeyPKH8gqlEZkjRGB4PiHMKHBsD3cv73P+hPIogSiNjK8KYJ
2WurIeqEGKKVtNP+yCc8i3R0s+zJfCfYiit0R/6cLh5hsrTz1OTRdMsbP03AL+Wb
OIbqzu+G+c2/kuqiV1hz+gxmrBsorx4US4wvdGNUQTBm0ZDVlOFTFM2NNMvMnDgl
tNT55IWlzc2zhfuPwao5+BgKjtFDuw+RNCep/ib1h3w+uM1LRxUM1wWZvPKe011n
Ui3+ftVlGYZi2Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:06 2026 by rpki-client