Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
File: PCKK_HA7a--nNfIhKGH9b6REh80.mft (raw, json)
Hash identifier: yCX7DViwb8Y/HVa0qH0l322C+mpz3VbN/NTq72EI6Ww=
Subject key identifier: AE:F1:5B:A9:B9:35:0E:43:62:82:7D:4F:29:C7:25:10:4A:F4:D3:50
Authority key identifier: 3C:22:8A:FC:70:3B:6B:EF:A7:35:F2:21:28:61:FD:6F:A4:44:87:CD
Certificate issuer: /CN=3c228afc703b6befa735f2212861fd6fa44487cd
Certificate serial: 019FA14D416E8AD2025CF37DD6DEDA4D0ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
Manifest number: 14A3
Signing time: Mon 27 Jul 2026 02:00:22 +0000
Manifest this update: Mon 27 Jul 2026 02:00:22 +0000
Manifest next update: Tue 28 Jul 2026 02:00:22 +0000
Files and hashes: 1: PCKK_HA7a--nNfIhKGH9b6REh80.crl (hash: IRzRVVdAAG/s14athyUVwq5Q0EGAVI60JCIesSbKQSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:41:6e:8a:d2:02:5c:f3:7d:d6:de:da:4d:0a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c228afc703b6befa735f2212861fd6fa44487cd
Validity
Not Before: Jul 27 02:00:22 2026 GMT
Not After : Jul 28 02:00:22 2026 GMT
Subject: CN=aef15ba9b9350e4362827d4f29c725104af4d350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f5:2a:46:84:ca:1c:cc:a9:2a:2e:99:62:2f:
d5:2e:55:3a:c9:93:f0:83:70:88:85:c6:39:9e:5a:
b0:9e:5d:ce:33:26:8c:aa:4e:c2:b4:27:d4:3a:e0:
61:5f:f6:8b:c3:3d:57:e5:fe:07:91:b7:4a:82:6e:
fc:1c:5e:81:17:d6:ae:fc:7a:a8:69:7b:82:f1:c5:
47:70:8e:6d:ff:88:74:c5:52:9d:e1:d7:43:38:f8:
ee:52:db:e5:e6:74:ae:f4:a1:16:d6:c7:46:4d:62:
3e:78:3d:b5:46:3d:0c:12:39:3c:86:14:b2:a8:c9:
53:d3:b3:de:45:5d:ed:f6:ed:f9:ec:e7:d8:cf:e3:
ff:e2:29:35:82:11:7b:a4:c7:74:70:cf:90:c3:96:
16:d4:1f:5e:e9:ab:bc:1d:23:96:93:83:0a:00:8d:
5e:07:37:f2:2f:ec:b0:08:14:c9:94:a5:27:ee:04:
5b:42:b4:d0:49:a7:31:5e:87:61:15:aa:00:b5:73:
da:59:74:ad:14:f0:ab:ce:5b:b6:77:e3:5c:fc:5d:
72:77:4c:c9:ee:9a:62:22:22:83:6c:60:5b:90:6a:
d2:cd:74:89:33:fe:a9:88:a2:54:e3:11:2d:2f:e4:
30:cb:f1:cd:08:96:df:9a:09:52:7d:fa:40:42:bc:
25:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F1:5B:A9:B9:35:0E:43:62:82:7D:4F:29:C7:25:10:4A:F4:D3:50
X509v3 Authority Key Identifier:
keyid:3C:22:8A:FC:70:3B:6B:EF:A7:35:F2:21:28:61:FD:6F:A4:44:87:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:b1:ad:fe:61:d0:22:32:0e:fa:a3:21:b6:28:6f:d7:88:dc:
5a:62:e7:32:c8:12:a4:c2:85:c7:56:d1:cf:42:12:87:07:39:
62:a3:42:99:33:45:65:52:1d:ff:c1:5f:55:03:44:e8:a4:03:
82:65:13:22:aa:e2:de:f6:86:e9:56:9c:3f:ca:17:f9:61:b1:
0b:65:32:0f:3e:5e:88:2e:06:27:7a:ce:22:77:0c:61:34:47:
86:9c:06:d3:8b:2a:af:6f:38:2e:35:ed:d6:86:f4:4a:ee:aa:
71:62:34:24:37:1d:77:d2:65:74:c4:1e:cf:c6:e8:06:b7:6b:
78:10:2c:25:5d:9a:85:54:39:e5:fb:97:13:ad:97:54:c3:75:
99:10:f8:9c:e3:e7:85:0a:50:7e:ac:97:04:ff:aa:55:d8:9c:
98:7d:df:10:01:0f:e5:4d:88:ce:73:55:61:c3:7f:79:0a:a1:
13:17:b3:23:0b:9f:98:70:f5:c7:62:8a:74:71:67:91:02:eb:
43:45:7c:5f:1d:a9:a3:38:0a:ed:e6:fe:c0:f3:23:5f:17:b2:
a6:f7:78:63:34:20:9f:af:c1:15:94:9a:9b:d6:61:65:45:bd:
37:b0:91:3c:22:35:69:7c:98:c6:e9:b7:e5:33:f4:af:48:18:
89:86:8d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:47:09 2026 by rpki-client