Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
File: PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft (raw, json)
Hash identifier: 24S4z883qki96W5EfCoIseS3lGWjVtmcvxH5rHAyGmQ=
Subject key identifier: D3:FF:FE:A0:2D:3A:3B:08:03:60:E1:46:1D:53:C9:34:C0:EB:35:52
Authority key identifier: 3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7
Certificate issuer: /CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7
Certificate serial: 019CBA02C1729D31751BB0B3ACEA2CDFE41D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
Manifest number: 02E3
Signing time: Wed 04 Mar 2026 18:01:08 +0000
Manifest this update: Wed 04 Mar 2026 18:01:08 +0000
Manifest next update: Thu 05 Mar 2026 18:01:08 +0000
Files and hashes: 1: 74xdlthipiPwmQdVtWpcn9yMpH0.roa (hash: p90jbIWz3kNDEWy5wNiYtEyIp2vg1/zc3mIlW5yWFFQ=)
2: B1ztFUqJj0TJYJvOExVRSQmIl5A.roa (hash: v/mWzHGtLLbQQyMt4t++cIwVty9wjpt9ae5rJyBn1gU=)
3: DsSKa3jlsMcS8PZEA_lBBDaVuS0.roa (hash: sCNeXSE7wm7FbJmQ9E5zHLdMIcgEdKSApg1Y+J8Rl58=)
4: PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl (hash: pt+au7aQ9l2XZLF3yEG8SmGRXSSwPjyzpN9uilR43jI=)
5: cCVfq15MkQwWtM1jPJjocJnH1Wc.roa (hash: r85fd8Uvcz/76R6OT32K3Lqo+sirunePwgftHCYO6ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ba:02:c1:72:9d:31:75:1b:b0:b3:ac:ea:2c:df:e4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7
Validity
Not Before: Mar 4 18:01:08 2026 GMT
Not After : Mar 5 18:01:08 2026 GMT
Subject: CN=d3fffea02d3a3b080360e1461d53c934c0eb3552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ab:c5:3e:df:b1:49:70:ca:f6:38:8e:bc:7e:
9d:bd:d6:61:af:63:aa:b1:e1:27:60:3b:7d:79:da:
65:ea:4b:d4:c8:b4:20:f4:05:98:8e:2a:60:b6:1e:
52:2c:36:25:c3:cc:01:69:49:ae:66:aa:ab:4d:3f:
cb:c2:5f:2e:93:5d:7d:4e:30:98:18:22:b1:fd:4a:
88:3f:83:88:98:cd:79:13:cb:8f:d6:c1:6c:b4:27:
19:83:7b:22:05:1f:db:d4:61:65:65:da:77:cd:a1:
ce:f7:c0:40:dd:df:16:06:aa:e9:95:25:24:56:bd:
fe:bc:f5:9c:27:e8:88:5c:0e:21:e2:00:30:3b:11:
6b:33:2c:ff:35:7e:7b:a1:10:96:7b:71:c1:05:06:
66:9f:c5:fa:39:5f:ff:c2:10:2b:ad:b7:94:dc:1c:
ae:e8:b6:c7:c9:a3:fc:2e:ad:44:73:61:bf:fc:36:
b8:0c:41:5c:44:d9:97:71:97:23:ff:b4:c4:6a:94:
2d:54:8d:a9:48:aa:38:9a:c8:79:30:36:e4:a1:92:
5d:bc:35:59:f2:a4:1e:74:ed:23:c4:ae:44:0b:93:
97:1d:13:92:64:4b:2a:4b:69:a2:a3:1c:30:4c:01:
5b:75:b6:cb:f8:65:71:0c:dc:a2:a5:7c:4a:80:36:
d0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FF:FE:A0:2D:3A:3B:08:03:60:E1:46:1D:53:C9:34:C0:EB:35:52
X509v3 Authority Key Identifier:
keyid:3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:44:83:2d:34:b5:c8:da:13:7e:82:a6:73:c8:de:23:d0:e9:
ff:11:aa:07:48:63:ac:4a:82:23:c6:1d:4c:10:e1:53:e2:1f:
7f:61:87:48:fd:f4:0b:23:9d:96:5b:2e:cf:d8:a9:3f:7b:4d:
98:36:38:d2:ec:54:69:b4:2e:9c:bc:7a:3a:47:c2:50:9d:e5:
1e:7a:44:b8:a0:3e:98:41:a2:e3:d2:7c:95:10:36:56:fa:37:
0d:d4:4f:da:eb:53:98:96:5b:68:6c:de:19:06:90:c7:b4:57:
4d:2c:d0:39:3a:48:57:b0:3e:03:4f:bb:cf:b7:2a:e9:06:1f:
cb:8d:97:6e:88:2b:7e:f9:15:9a:0c:37:99:5f:fb:4a:d8:dd:
e0:1a:bb:b3:8b:14:2b:1e:10:00:e6:6c:7e:24:4a:65:c7:46:
7a:14:87:d2:06:f5:82:d8:9a:96:a4:52:9b:81:73:46:c0:8a:
3d:92:fc:96:37:92:46:43:c3:8a:96:a1:ee:8a:e8:8c:6c:fe:
29:1e:52:e4:79:3f:8b:b9:46:24:88:35:64:c8:75:c1:53:33:
dd:b7:7d:9c:1d:34:9c:31:f1:84:53:8b:6a:da:30:f3:f1:46:
7e:27:3b:07:5e:e0:ab:66:84:7c:cf:ab:ee:4c:72:fc:96:3f:
38:60:bd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 22:21:25 2026 by rpki-client