Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
File: PCKK_HA7a--nNfIhKGH9b6REh80.mft (raw, json)
Hash identifier: +IgbKp7IQKkJhrGsqjbEJKmarbC+diPq5PNmHG1ofW0=
Subject key identifier: 1B:9C:B6:54:5E:43:4B:15:10:05:56:A5:83:F3:BE:FC:36:29:6A:9A
Authority key identifier: 3C:22:8A:FC:70:3B:6B:EF:A7:35:F2:21:28:61:FD:6F:A4:44:87:CD
Certificate issuer: /CN=3c228afc703b6befa735f2212861fd6fa44487cd
Certificate serial: 01A1803D6F37A7DDB3749195185F2446EDAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
Manifest number: 159B
Signing time: Wed 28 Oct 2026 02:01:12 +0000
Manifest this update: Wed 28 Oct 2026 02:01:12 +0000
Manifest next update: Thu 29 Oct 2026 02:01:12 +0000
Files and hashes: 1: PCKK_HA7a--nNfIhKGH9b6REh80.crl (hash: 9ecuEAqhChvx3rZ/W6dVAbYzvK9BmlpG8n9QH8loZDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3d:6f:37:a7:dd:b3:74:91:95:18:5f:24:46:ed:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c228afc703b6befa735f2212861fd6fa44487cd
Validity
Not Before: Oct 28 02:01:12 2026 GMT
Not After : Oct 29 02:01:12 2026 GMT
Subject: CN=1b9cb6545e434b15100556a583f3befc36296a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:34:f8:9d:f1:92:87:d3:d5:04:4f:d2:ed:43:
2b:eb:25:23:b6:88:8d:e7:1d:de:e8:b0:08:54:f0:
cc:0e:81:73:74:c7:56:a7:e0:13:da:06:53:65:a4:
54:4d:df:b1:79:4a:5f:99:87:02:4e:ec:31:64:37:
98:5a:55:13:d0:25:c1:29:34:88:29:3e:33:20:a4:
ea:58:4a:13:18:a8:ab:a2:68:51:35:4a:2e:69:ef:
df:c4:3c:b9:3d:4c:81:02:39:43:2e:63:50:e5:6f:
ef:3f:ff:18:3a:d3:d6:68:c3:50:38:95:6a:22:db:
c0:13:a0:ed:58:1a:86:4c:23:3a:c6:2d:d6:67:66:
bd:e8:14:a1:c9:e7:95:0e:50:21:13:8f:3d:58:c8:
17:b6:bb:7a:88:6c:e7:cf:43:60:5f:74:e7:b6:07:
1a:75:50:fd:fe:b6:f4:6b:c6:10:99:1f:5c:38:cb:
96:9c:43:31:40:1f:ca:4d:de:04:76:9e:8f:7f:cb:
26:e8:0d:63:cd:c9:af:5e:6c:3f:37:24:00:d0:6d:
ba:e8:f3:86:b5:e4:0e:43:74:ad:b1:0b:dc:05:28:
52:3a:6d:4d:c5:ec:8e:1f:b1:4b:a6:db:e5:78:60:
e7:55:9f:69:d3:df:20:98:46:b8:87:45:15:33:88:
6c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9C:B6:54:5E:43:4B:15:10:05:56:A5:83:F3:BE:FC:36:29:6A:9A
X509v3 Authority Key Identifier:
keyid:3C:22:8A:FC:70:3B:6B:EF:A7:35:F2:21:28:61:FD:6F:A4:44:87:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:49:e2:0b:0b:5a:11:31:cb:d1:db:c0:b0:56:15:5d:44:f9:
38:1c:71:92:4b:b9:be:7a:54:f3:37:e4:ff:62:e3:37:8f:76:
3d:98:fc:5b:c0:ff:ef:db:62:16:07:29:52:c2:f3:0b:12:37:
49:20:d8:ac:e4:68:84:46:c9:aa:f5:f7:92:e5:e2:29:c2:84:
50:85:58:84:21:1e:90:43:5d:46:6d:a4:53:00:f5:ef:a6:00:
c8:1e:46:df:a7:0d:f4:cc:32:9c:c4:58:9d:c8:d1:15:15:09:
54:ae:af:98:62:07:f3:41:ca:ed:b9:6f:ad:de:a2:d4:2e:4c:
fd:f2:cd:87:53:17:21:f3:6a:16:4d:03:2b:ed:ce:40:c8:28:
cd:00:49:c2:38:0f:c7:b0:fa:90:20:85:cf:07:05:33:89:26:
36:b8:1e:a4:49:b7:5f:05:a8:5b:33:c9:53:78:67:a3:8d:50:
50:35:6c:c6:51:f1:0c:89:06:61:22:98:f0:c0:af:46:09:22:
eb:5c:ff:60:5d:e8:57:dd:63:86:db:f6:f9:47:d2:01:fe:cc:
03:03:ce:76:43:06:f3:09:57:e3:8d:37:f6:d3:7c:ef:3f:f2:
ea:11:7e:ba:f9:18:19:8f:1b:7e:b3:87:a3:20:d3:0b:1e:29:
a4:95:71:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:20:30 2026 by rpki-client