Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
File: PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft (raw, json)
Hash identifier: X/Kq21Vm1aZU2zieWYCW3r+35IyRF957E+13UVTSwEo=
Subject key identifier: E4:04:7C:9B:61:A9:3A:C7:E6:3C:C8:2C:09:BA:75:3E:71:98:18:63
Authority key identifier: 3D:C4:10:E3:F0:9B:EA:6A:BC:9D:D8:C6:FF:41:85:65:1B:0A:B8:67
Certificate issuer: /CN=3dc410e3f09bea6abc9dd8c6ff4185651b0ab867
Certificate serial: 019CE7499F12302FB89B5FB56870CE7A9206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
Manifest number: 17F7
Signing time: Fri 13 Mar 2026 13:01:27 +0000
Manifest this update: Fri 13 Mar 2026 13:01:27 +0000
Manifest next update: Sat 14 Mar 2026 13:01:27 +0000
Files and hashes: 1: PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.crl (hash: XfIYO+eoR0xaTZcPllm940a8BJdnfnqXDPlJFGvVmjE=)
2: TNsH8ORuG4M2WxCLcjLbXlHGM-4.roa (hash: 9o4sji++/DGEugsQB9IJvE/BvkiRj/BVLAkPHsTMQs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:49:9f:12:30:2f:b8:9b:5f:b5:68:70:ce:7a:92:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc410e3f09bea6abc9dd8c6ff4185651b0ab867
Validity
Not Before: Mar 13 13:01:27 2026 GMT
Not After : Mar 14 13:01:27 2026 GMT
Subject: CN=e4047c9b61a93ac7e63cc82c09ba753e71981863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0d:fc:19:b9:88:77:11:24:8c:48:6e:80:ed:
cd:46:05:a2:07:3a:ea:2a:b5:70:4d:37:34:b4:6a:
4f:aa:85:4f:c3:f8:08:a5:97:8b:38:55:77:27:86:
f4:95:9b:e2:92:44:b8:df:2c:75:78:9c:7e:3b:9f:
d3:81:51:d3:c0:7b:b3:21:8d:fd:f6:12:53:82:4b:
88:73:a8:18:14:f6:4d:99:9b:d5:a9:48:45:d3:c0:
ec:0a:58:02:30:7e:f1:ff:0a:d9:75:00:4f:07:ba:
28:17:0e:6a:a6:e1:e6:48:13:a1:9b:5e:ba:ef:2c:
7e:9f:4b:37:b4:25:ce:0c:43:0a:b5:ce:c6:2c:8b:
58:3d:44:3c:55:9a:79:24:8e:bf:2e:3d:46:a2:99:
64:72:99:11:43:c3:e4:3a:d7:40:15:87:2b:44:eb:
c8:78:2b:ea:22:2e:58:88:9a:23:b4:85:24:07:93:
7a:0b:e2:3b:5b:22:14:b9:f2:d9:38:ed:be:a1:83:
9f:09:5f:83:c4:4b:70:79:51:3c:64:04:24:8d:ae:
56:ca:6d:0c:a8:46:a1:53:9f:3a:3a:1b:bc:20:7d:
35:7d:95:d7:a5:24:40:92:55:e5:6b:c7:fa:31:ce:
1b:98:66:17:80:02:32:5c:16:d2:3c:01:db:13:f0:
5d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:04:7C:9B:61:A9:3A:C7:E6:3C:C8:2C:09:BA:75:3E:71:98:18:63
X509v3 Authority Key Identifier:
keyid:3D:C4:10:E3:F0:9B:EA:6A:BC:9D:D8:C6:FF:41:85:65:1B:0A:B8:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:35:11:4f:62:ce:ae:ef:a5:82:30:51:6b:34:57:d1:20:a5:
e3:e1:76:bd:45:ef:51:f8:97:2e:e8:20:d5:eb:b8:06:b0:f3:
ec:ba:4d:c7:ae:bc:95:e0:7e:52:aa:af:ed:ad:0c:7e:a1:4b:
66:3d:fc:60:fa:94:2d:0f:fe:a2:14:6f:3e:5e:09:e6:38:28:
b3:b7:95:15:a2:4c:be:08:2a:34:07:ea:6f:13:df:85:8f:35:
c5:98:cd:47:05:83:e3:3e:b5:ab:3c:78:a1:fd:2e:bb:d1:cc:
a1:c2:a8:73:12:d2:c8:46:07:e4:3f:fe:b1:98:dc:ad:56:81:
7f:45:a9:fd:4b:30:7d:a8:56:d3:34:e8:e6:2d:64:2f:47:62:
da:97:d3:38:c2:9d:e3:3f:9f:60:7f:e1:40:a3:d1:c6:ea:19:
89:67:c5:9e:ab:a2:a6:e4:24:cc:c7:35:0b:74:6f:b4:56:3f:
45:78:b1:8e:a0:92:c2:b6:8e:93:20:4d:8b:4c:75:e6:de:e0:
bb:c5:9a:fe:4c:0b:74:95:6c:9f:ed:af:23:b1:d9:4d:23:e5:
6d:ec:c1:86:bd:05:59:32:77:64:e0:df:ed:22:ca:70:11:87:
13:91:d8:c4:1d:61:b6:e9:7e:57:52:07:0c:e6:f4:e8:23:9d:
62:69:b0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 17:25:57 2026 by rpki-client