Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
File: PcecfAfUNfoA8sfKCx5QZk2gTUg.mft (raw, json)
Hash identifier: 31tp6D1SCZx0xDizoDxOvjfqV+sKgtECH6kdEBmMqjY=
Subject key identifier: 0B:B3:F3:D7:A2:61:8F:90:73:4B:1B:A7:83:FF:28:55:3E:26:F4:3A
Authority key identifier: 3D:C7:9C:7C:07:D4:35:FA:00:F2:C7:CA:0B:1E:50:66:4D:A0:4D:48
Certificate issuer: /CN=3dc79c7c07d435fa00f2c7ca0b1e50664da04d48
Certificate serial: 019E28B956C03C3CD50013A058A03E5E08B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcecfAfUNfoA8sfKCx5QZk2gTUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
Manifest number: A2
Signing time: Thu 14 May 2026 23:01:35 +0000
Manifest this update: Thu 14 May 2026 23:01:35 +0000
Manifest next update: Fri 15 May 2026 23:01:35 +0000
Files and hashes: 1: PcecfAfUNfoA8sfKCx5QZk2gTUg.crl (hash: sEuvSqJvB50+NF6zt24O/82Bi5eFIfIzCjAYCuwP11A=)
2: Yv4GaEJIAdTbY-p5QqYedKqtIAM.roa (hash: tNr0fHXdSpSBz2ryPJ1QU5+Ji6Ji73iPqme/JR8I6kE=)
3: txmqo2Bw-3oeca5oupMNgLyAN0Y.asa (hash: Gbgy2oJEQGt6R6lx9qIzVv6nHbAWst+OpS/TWEhgvGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcecfAfUNfoA8sfKCx5QZk2gTUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 23:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:b9:56:c0:3c:3c:d5:00:13:a0:58:a0:3e:5e:08:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc79c7c07d435fa00f2c7ca0b1e50664da04d48
Validity
Not Before: May 14 23:01:35 2026 GMT
Not After : May 15 23:01:35 2026 GMT
Subject: CN=0bb3f3d7a2618f90734b1ba783ff28553e26f43a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b0:9c:f4:3b:d1:2d:1d:e2:77:63:d6:48:23:
19:21:40:ad:d3:9d:56:00:96:cb:1c:73:14:53:96:
ce:60:81:8b:05:b6:18:b5:15:52:51:c4:6b:f9:b4:
8e:79:1b:8b:8d:c4:03:ce:d3:16:ea:e0:9f:ed:14:
fd:e9:92:bb:7d:86:fc:a1:3a:00:9d:c4:ac:92:9a:
3d:40:47:a4:67:d6:5a:77:e3:a6:65:6f:c6:25:07:
7d:df:eb:5f:a6:07:a0:14:6b:e3:32:ea:f8:65:83:
9e:cf:af:be:b2:83:19:28:55:15:5f:7e:6c:a9:57:
02:b9:e6:1e:9b:d9:3a:94:3e:46:8e:05:5a:38:bb:
cd:03:93:5a:96:c2:e2:0d:af:21:49:ec:6c:7b:99:
3e:ec:77:f0:f6:74:4d:d2:69:89:9a:2f:cb:d2:fe:
0b:f5:fa:ae:25:de:14:e1:28:25:59:64:7c:0f:5e:
e4:ec:25:87:08:53:02:88:56:42:c0:d6:8f:8a:ff:
13:ac:78:2d:52:3a:68:96:53:5e:c8:8e:e5:25:b9:
a2:e7:e2:8e:4a:eb:6e:e2:57:09:f2:7f:10:e1:85:
3a:bb:07:66:ae:7d:0c:d7:31:25:ab:1e:b7:19:c5:
6f:a7:4d:ea:82:6c:1c:77:07:3e:0e:2c:1a:57:05:
21:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B3:F3:D7:A2:61:8F:90:73:4B:1B:A7:83:FF:28:55:3E:26:F4:3A
X509v3 Authority Key Identifier:
keyid:3D:C7:9C:7C:07:D4:35:FA:00:F2:C7:CA:0B:1E:50:66:4D:A0:4D:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcecfAfUNfoA8sfKCx5QZk2gTUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e9:2f:8c:4a:44:cf:81:fe:d6:f4:24:15:df:dc:c2:77:6f:
1e:fa:13:49:eb:cd:e7:4b:7c:b8:81:3b:ff:ae:f9:a6:0e:eb:
4d:f4:0e:fb:48:46:69:39:b8:cf:e9:61:90:33:47:ad:db:3b:
87:d7:a0:79:06:a2:3b:d4:b6:4f:23:a9:92:36:9f:e0:4c:8e:
c0:45:34:16:f1:a5:c1:f0:e2:55:38:aa:a0:aa:32:5f:63:68:
e0:4f:ad:bd:7c:17:c0:76:de:65:14:29:a7:f8:41:88:6e:1f:
51:fc:52:09:de:d1:50:ea:72:47:7f:5a:f7:c4:15:96:c1:c8:
c7:ec:9c:29:64:71:b6:5d:52:72:7d:a6:a9:ec:2a:4c:6b:6d:
eb:cf:23:61:19:23:e1:a2:60:3b:d1:69:20:9b:67:4b:a0:a9:
ab:64:49:5e:72:d5:58:e4:2b:90:5d:e7:c7:fe:a9:b3:7c:3c:
eb:cc:42:95:ef:93:c5:6e:ac:6d:1a:39:42:8b:1c:08:8f:1a:
65:74:6e:ff:33:bd:89:02:f8:7b:17:4b:31:a7:83:84:98:cb:
d8:2f:23:6b:e8:14:d8:49:3b:2f:77:e0:a1:e1:e8:37:3d:60:
3d:6d:6b:7a:84:a4:57:b8:72:7a:3a:db:68:62:9c:cf:ba:2b:
b6:2c:f5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:19:43 2026 by rpki-client