Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
File: PcecfAfUNfoA8sfKCx5QZk2gTUg.mft (raw, json)
Hash identifier: 62ftZZKgB2kPG/z2SG2h5Vl3ZRbRIa+J+HjP19UeK0g=
Subject key identifier: FD:75:80:B5:24:EE:07:F4:71:CF:33:D9:46:CA:63:8D:83:9C:80:33
Authority key identifier: 3D:C7:9C:7C:07:D4:35:FA:00:F2:C7:CA:0B:1E:50:66:4D:A0:4D:48
Certificate issuer: /CN=3dc79c7c07d435fa00f2c7ca0b1e50664da04d48
Certificate serial: 019F1265FA2866FB7F22E21496DE03D21B3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcecfAfUNfoA8sfKCx5QZk2gTUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
Manifest number: 011B
Signing time: Mon 29 Jun 2026 08:01:40 +0000
Manifest this update: Mon 29 Jun 2026 08:01:40 +0000
Manifest next update: Tue 30 Jun 2026 08:01:40 +0000
Files and hashes: 1: PcecfAfUNfoA8sfKCx5QZk2gTUg.crl (hash: 9D/4Hv3Iak8hKeKZOKkT3FOyhh+iyjjECULbR0H0Kqk=)
2: Yv4GaEJIAdTbY-p5QqYedKqtIAM.roa (hash: tNr0fHXdSpSBz2ryPJ1QU5+Ji6Ji73iPqme/JR8I6kE=)
3: txmqo2Bw-3oeca5oupMNgLyAN0Y.asa (hash: Gbgy2oJEQGt6R6lx9qIzVv6nHbAWst+OpS/TWEhgvGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcecfAfUNfoA8sfKCx5QZk2gTUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:fa:28:66:fb:7f:22:e2:14:96:de:03:d2:1b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc79c7c07d435fa00f2c7ca0b1e50664da04d48
Validity
Not Before: Jun 29 08:01:40 2026 GMT
Not After : Jun 30 08:01:40 2026 GMT
Subject: CN=fd7580b524ee07f471cf33d946ca638d839c8033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:af:9b:c6:91:d3:88:b4:97:30:b8:6a:ec:83:
b0:38:23:be:f9:26:cb:d5:9d:3d:15:75:89:06:84:
75:d8:bf:5b:4b:56:df:e8:09:41:bf:fa:64:84:da:
a0:8e:06:74:ea:29:b2:1b:69:67:fc:50:f9:9d:84:
19:8f:10:9c:85:be:15:92:c1:fb:27:2c:14:f7:f9:
c0:1a:33:d0:1f:e9:cf:5f:32:70:bc:25:86:17:ba:
d4:dd:ea:85:61:1f:d5:6f:55:2c:4e:de:06:7b:c6:
71:a5:2d:62:24:37:23:71:22:4d:0e:cb:ab:5a:9f:
93:51:a6:bb:58:eb:55:73:98:54:7b:36:55:66:c5:
a0:61:f5:01:e7:00:37:55:fd:b3:c0:57:34:3a:8b:
70:f1:a2:c3:28:4a:68:3d:d4:1b:04:0f:57:71:46:
17:c2:ec:88:2f:4d:6b:e6:05:3b:09:02:8e:d1:f9:
c5:e9:29:52:b2:ca:ab:b4:5d:a1:e7:80:6c:d5:f4:
bf:31:29:02:fd:db:1c:ef:6b:fa:47:fa:5c:2d:8e:
ec:0d:62:97:e1:78:40:f3:5b:49:9a:38:24:9b:65:
95:7c:2f:10:7a:82:ad:33:b8:05:33:67:e1:ba:f8:
9f:06:89:b0:2a:8f:a5:6c:97:d6:1c:17:53:2c:30:
46:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:75:80:B5:24:EE:07:F4:71:CF:33:D9:46:CA:63:8D:83:9C:80:33
X509v3 Authority Key Identifier:
keyid:3D:C7:9C:7C:07:D4:35:FA:00:F2:C7:CA:0B:1E:50:66:4D:A0:4D:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcecfAfUNfoA8sfKCx5QZk2gTUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:de:60:81:d8:80:16:8b:cb:f5:34:61:a2:12:bf:e4:fd:0e:
cb:53:53:b5:7a:b2:de:20:75:b5:2f:26:cb:86:8b:3a:0f:78:
7f:d7:0e:7e:cc:86:00:ad:82:3a:75:ed:7d:5e:e8:70:fe:49:
bc:5f:95:0e:ab:f0:08:25:46:c4:5a:1c:8d:b5:85:b3:4e:10:
39:41:ba:b0:b3:67:82:09:1c:52:aa:18:2a:b9:d5:9b:56:14:
01:33:84:56:87:72:7d:7c:77:32:33:85:db:f5:82:66:15:f6:
c8:b9:f5:7e:84:9c:15:05:d8:8c:38:e2:af:c1:91:25:4f:13:
25:17:00:a3:2a:1e:3c:eb:8f:d4:16:a7:7f:11:b4:0b:1d:97:
63:b2:1b:67:b4:fe:19:25:88:3f:2e:00:e2:ce:bc:9a:a3:c0:
3f:00:5e:c2:61:d8:8d:e5:5e:6a:96:5a:2f:1e:10:58:6e:32:
89:ef:16:c1:06:f8:b1:af:d1:59:dd:8d:3e:c0:15:7d:e8:c5:
86:1d:6f:a3:8b:3f:0d:05:7a:af:94:0d:55:6d:31:c2:2e:a5:
2f:09:b5:2a:8a:61:f0:02:15:96:61:38:16:e5:e1:04:ae:3f:
3e:0b:39:7d:3f:32:fd:d6:e6:b3:f5:d8:4a:60:22:e1:2f:ae:
fc:68:08:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:35:33 2026 by rpki-client