Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
File: PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft (raw, json)
Hash identifier: UC2igEIjPtPhJ8UpGs7A23uvQ/P4BYp2SgEzohkc8uI=
Subject key identifier: E3:A8:6E:96:F3:81:5C:D1:B8:CA:31:0C:FF:11:11:5A:3D:4B:9D:BA
Authority key identifier: 3C:FE:E2:EA:3C:DE:08:73:A1:91:BD:D7:95:22:73:99:B5:6A:43:BA
Certificate issuer: /CN=3cfee2ea3cde0873a191bdd795227399b56a43ba
Certificate serial: 019EE2F97DBBA401967580A074A08697868A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
Manifest number: 0291
Signing time: Sat 20 Jun 2026 03:01:01 +0000
Manifest this update: Sat 20 Jun 2026 03:01:01 +0000
Manifest next update: Sun 21 Jun 2026 03:01:01 +0000
Files and hashes: 1: PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl (hash: uYxZ5r1cehwo0DaK+DmStctkOPJEwPnEwV6t8bUkudU=)
2: U1VjosqpBiqy2ZFxYLqdYxKnum4.roa (hash: AvN5YNAvDxw0bLWGw+RbIchpQR/eRlfnMr+l8l+QHy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e2:f9:7d:bb:a4:01:96:75:80:a0:74:a0:86:97:86:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cfee2ea3cde0873a191bdd795227399b56a43ba
Validity
Not Before: Jun 20 03:01:01 2026 GMT
Not After : Jun 21 03:01:01 2026 GMT
Subject: CN=e3a86e96f3815cd1b8ca310cff11115a3d4b9dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:18:38:ee:6d:b4:45:77:08:f2:43:39:7d:22:
2e:ee:10:a3:61:01:d6:60:bc:f8:9b:44:68:7c:5e:
bc:79:d9:56:7a:ef:47:ce:fe:ad:99:f9:c1:d0:27:
54:f7:6c:06:58:5e:33:31:73:c7:ea:60:e5:1d:43:
9c:7b:99:4b:9a:06:20:ab:e6:85:1f:a7:ef:6a:b1:
5b:bc:5e:0c:4d:36:ba:0f:2e:00:ed:d4:ff:0d:26:
7f:67:08:88:d1:b0:ac:f7:a7:6a:e6:4f:90:14:63:
46:98:ae:08:71:ef:63:e8:79:4d:98:05:93:69:ff:
74:9a:e3:5e:e7:30:fc:92:c2:29:e3:1d:a3:8c:77:
0d:43:77:ec:49:29:f0:f3:5f:14:08:2a:3f:af:5a:
51:98:e7:81:41:92:3d:4c:fb:ce:ae:28:76:e6:39:
82:49:33:ef:9a:48:eb:8d:d9:4e:86:41:50:b3:8d:
e7:44:5e:2a:cd:38:7b:f5:77:80:23:1e:1a:2b:57:
a4:79:74:2c:aa:b9:69:e3:26:cf:51:33:0f:c0:2d:
d2:11:69:b8:93:41:b4:60:b0:30:bb:79:94:72:34:
7a:c4:53:b2:05:b3:bb:74:0c:9b:b5:42:66:f0:29:
2a:22:73:4f:bb:cf:4f:10:4f:e7:31:90:73:c0:d8:
c1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A8:6E:96:F3:81:5C:D1:B8:CA:31:0C:FF:11:11:5A:3D:4B:9D:BA
X509v3 Authority Key Identifier:
keyid:3C:FE:E2:EA:3C:DE:08:73:A1:91:BD:D7:95:22:73:99:B5:6A:43:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:9e:fe:69:36:c6:10:d1:b9:0a:b4:9b:6d:df:9d:98:73:5c:
b4:5e:c9:43:a1:0e:e8:0d:39:ae:0b:71:27:31:26:fb:74:b5:
7b:91:5e:e7:59:30:68:1a:30:d5:2e:da:0e:eb:d8:03:93:ea:
ec:ee:cc:d4:01:76:d6:18:b5:6d:ff:c7:02:57:4a:12:bb:91:
a0:43:b2:10:9e:f9:d8:ae:d5:a2:3b:d5:66:7a:3c:b2:de:2f:
97:9f:03:c7:d7:fb:ac:a7:06:d8:9f:78:b3:61:00:f5:5a:25:
41:55:b4:26:cf:c8:a6:08:98:9f:82:42:34:a7:e5:28:d1:bf:
dd:d2:18:4d:ac:86:e4:76:c3:61:a6:ee:f7:3f:f3:2b:01:16:
28:81:b6:15:36:00:b7:8f:c3:25:a7:83:08:ab:1b:9c:c4:65:
47:65:b2:82:c4:6f:07:3b:3f:dc:5a:8a:b7:47:34:e7:09:ea:
9d:1e:4c:3d:08:1a:8e:88:00:53:3f:d2:8f:5d:ab:8c:35:c1:
91:38:c8:a1:07:50:cf:50:f3:70:28:89:5c:52:cd:31:70:a0:
03:fc:5c:78:80:a3:1d:aa:8c:19:aa:97:94:21:e2:78:65:7a:
f7:8a:7a:76:8b:93:e8:ea:74:f1:aa:16:8d:75:2a:20:a0:cd:
17:a9:2f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 07:45:56 2026 by rpki-client