Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
File: PcecfAfUNfoA8sfKCx5QZk2gTUg.mft (raw, json)
Hash identifier: ccEiIVb3nf1rJzWK9krETLv/mc1J29380ZEvt0Mj2i4=
Subject key identifier: FC:F8:19:EE:34:77:04:0F:9E:D9:61:19:62:22:84:A9:63:6B:53:A0
Authority key identifier: 3D:C7:9C:7C:07:D4:35:FA:00:F2:C7:CA:0B:1E:50:66:4D:A0:4D:48
Certificate issuer: /CN=3dc79c7c07d435fa00f2c7ca0b1e50664da04d48
Certificate serial: 01A03FA9D39B1A467BEED18B97802083480E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcecfAfUNfoA8sfKCx5QZk2gTUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
Manifest number: 01B7
Signing time: Wed 26 Aug 2026 20:01:29 +0000
Manifest this update: Wed 26 Aug 2026 20:01:29 +0000
Manifest next update: Thu 27 Aug 2026 20:01:29 +0000
Files and hashes: 1: PcecfAfUNfoA8sfKCx5QZk2gTUg.crl (hash: 0mMvj+y2bNUk8pHUOolFwbezFUGSJocxR1yru8VyfRA=)
2: Yv4GaEJIAdTbY-p5QqYedKqtIAM.roa (hash: tNr0fHXdSpSBz2ryPJ1QU5+Ji6Ji73iPqme/JR8I6kE=)
3: txmqo2Bw-3oeca5oupMNgLyAN0Y.asa (hash: Gbgy2oJEQGt6R6lx9qIzVv6nHbAWst+OpS/TWEhgvGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcecfAfUNfoA8sfKCx5QZk2gTUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:a9:d3:9b:1a:46:7b:ee:d1:8b:97:80:20:83:48:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc79c7c07d435fa00f2c7ca0b1e50664da04d48
Validity
Not Before: Aug 26 20:01:29 2026 GMT
Not After : Aug 27 20:01:29 2026 GMT
Subject: CN=fcf819ee3477040f9ed96119622284a9636b53a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:92:00:c4:90:b9:97:96:10:f8:f6:73:5c:4d:
ae:4a:30:38:3e:fa:98:72:e5:98:48:00:06:46:9e:
39:51:a0:e1:dd:e5:50:c8:61:3f:43:f5:c3:58:f2:
36:94:f0:5d:a6:08:a0:d5:71:b4:0e:f9:a4:6f:60:
08:bb:e1:1c:ac:d6:4a:dc:d7:e6:9c:c9:e3:33:c9:
22:37:20:7d:da:f2:0b:e8:5c:d2:fa:98:6f:9f:57:
70:ed:93:d2:37:8a:63:f7:47:e9:4f:63:00:48:37:
f7:37:5e:3d:8e:0e:9f:46:6a:72:06:9f:52:8f:c6:
16:5e:67:c3:8b:b3:32:1d:81:00:5a:00:c7:77:8f:
58:ae:ee:11:7c:c8:24:34:53:07:de:a7:10:66:7b:
40:b8:e7:64:2d:ff:75:0c:5e:ec:14:c5:e3:02:ce:
48:ec:ed:60:fb:4f:05:20:4d:c5:b4:4d:f7:ef:49:
49:d2:f0:5f:78:ce:6e:1c:d4:8f:8b:f3:a9:40:4d:
fc:c9:a6:46:da:48:1f:58:22:11:1d:9d:a3:d5:b0:
7f:db:e8:35:5e:9b:70:5f:33:0f:1b:40:2e:3a:d5:
5b:1c:fd:39:e8:5f:d4:9a:b6:f7:e3:cf:c0:47:8b:
b3:76:a7:66:6a:08:c7:c3:59:eb:9a:36:44:0d:c4:
5b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F8:19:EE:34:77:04:0F:9E:D9:61:19:62:22:84:A9:63:6B:53:A0
X509v3 Authority Key Identifier:
keyid:3D:C7:9C:7C:07:D4:35:FA:00:F2:C7:CA:0B:1E:50:66:4D:A0:4D:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcecfAfUNfoA8sfKCx5QZk2gTUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/207da3-8a9e-4c1c-93c9-8eb854c9fc8d/1/PcecfAfUNfoA8sfKCx5QZk2gTUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:0c:6d:bc:0d:6f:8a:f0:9e:e7:9e:64:e1:b1:e8:d4:82:43:
cd:e7:94:84:d3:c4:1f:33:b9:09:28:6f:11:41:a9:51:39:7b:
df:65:b3:0b:20:bc:8d:77:8f:d6:fb:9c:a6:69:43:e2:9f:34:
14:01:81:7b:3f:60:41:7c:6f:c1:0b:fd:30:29:a3:f0:14:75:
37:54:f0:c0:b8:1a:f3:f4:df:2a:03:bb:e2:1d:ac:e8:a4:ba:
d5:9d:59:1d:6c:75:4c:52:ac:46:90:28:49:ad:4a:08:78:b1:
97:8f:97:f9:5f:bf:2d:99:a5:e8:eb:f3:de:1f:c7:62:7c:dc:
98:30:75:6d:29:e5:8c:76:15:d1:54:53:d9:20:3d:e1:ec:41:
63:d2:38:a3:d8:86:16:55:dc:f6:d1:ea:5d:a5:1d:26:2b:49:
3f:8f:b5:f9:03:6e:5b:8f:08:83:25:fe:3d:1a:02:35:5e:8e:
bb:e7:4c:50:44:5e:fc:09:bd:79:94:58:f4:e1:f7:7c:0b:8d:
26:0c:47:69:09:23:d3:3d:81:7e:86:a9:0a:54:aa:5f:2b:b2:
29:89:c0:e2:ca:e8:8d:21:b1:5c:ab:26:18:1b:f8:fe:2e:30:
5b:b9:cc:e5:af:f1:d5:cd:8c:e2:cf:06:83:1d:7b:a8:b4:e1:
42:cb:0b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:34:19 2026 by rpki-client