Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
File: PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft (raw, json)
Hash identifier: h7H1qIKLjQMtBC9//Vya0buVIkjkmtJs5lQ38fvWx7c=
Subject key identifier: C1:0B:D1:94:29:31:D0:A0:9C:E2:21:69:B3:30:AD:C1:0B:86:C5:63
Authority key identifier: 3C:FE:E2:EA:3C:DE:08:73:A1:91:BD:D7:95:22:73:99:B5:6A:43:BA
Certificate issuer: /CN=3cfee2ea3cde0873a191bdd795227399b56a43ba
Certificate serial: 019D382E113384CF60E6CC8839781A81CFF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
Manifest number: 01B4
Signing time: Sun 29 Mar 2026 06:00:36 +0000
Manifest this update: Sun 29 Mar 2026 06:00:36 +0000
Manifest next update: Mon 30 Mar 2026 06:00:36 +0000
Files and hashes: 1: PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl (hash: U+mK0AwETtkOmKLcviDa1bIyhC4PvqwyKaJQMf++3ZY=)
2: U1VjosqpBiqy2ZFxYLqdYxKnum4.roa (hash: AvN5YNAvDxw0bLWGw+RbIchpQR/eRlfnMr+l8l+QHy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:11:33:84:cf:60:e6:cc:88:39:78:1a:81:cf:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cfee2ea3cde0873a191bdd795227399b56a43ba
Validity
Not Before: Mar 29 06:00:36 2026 GMT
Not After : Mar 30 06:00:36 2026 GMT
Subject: CN=c10bd1942931d0a09ce22169b330adc10b86c563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bc:00:65:38:dc:98:02:db:75:da:f7:99:6f:
4a:21:0f:17:f1:e2:df:06:aa:a3:47:d7:8a:3c:ee:
19:29:08:bb:77:5b:fa:69:d3:b7:89:5b:ac:be:eb:
5f:3a:72:7c:70:be:14:07:70:ae:ed:4c:fe:d9:f0:
08:ca:a5:a0:2e:5d:11:03:5a:af:23:de:c1:d5:47:
66:fa:11:b3:18:fe:b1:3e:3e:a7:a4:64:59:f9:da:
9e:49:5c:6f:56:7c:40:a2:4e:10:8e:34:4b:ef:f8:
cf:8a:b9:6c:e2:15:7e:e2:48:6b:90:af:85:48:1c:
64:20:79:e2:a7:ea:14:32:07:89:2c:74:80:3f:b2:
ed:3a:51:e4:d1:47:e8:41:f1:8d:6f:1f:e9:e5:54:
48:37:18:e0:87:4a:34:c5:82:ad:55:d4:cd:49:78:
e3:24:6c:46:40:8d:26:f2:81:23:4e:47:1e:bf:a4:
95:72:62:87:ff:62:e7:7b:23:95:ca:e0:ac:1d:27:
cd:3a:b8:d2:0a:ff:90:42:be:87:d5:ec:ce:83:ad:
54:5c:38:be:e6:5d:b8:75:7d:38:b5:39:92:ec:f8:
66:28:86:e2:80:41:a3:54:f7:16:23:3f:cf:50:ba:
0c:50:8a:7b:cf:0d:d8:98:51:2b:85:71:bc:98:f4:
0d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0B:D1:94:29:31:D0:A0:9C:E2:21:69:B3:30:AD:C1:0B:86:C5:63
X509v3 Authority Key Identifier:
keyid:3C:FE:E2:EA:3C:DE:08:73:A1:91:BD:D7:95:22:73:99:B5:6A:43:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f668e0-fb36-45a0-971f-6b2f9d151519/1/PP7i6jzeCHOhkb3XlSJzmbVqQ7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:38:71:80:2d:41:e0:93:36:f1:95:cc:19:01:49:e4:5a:d4:
db:0d:47:ec:46:86:42:20:e4:e9:1e:21:7c:37:70:65:fc:4e:
19:4c:aa:7c:04:25:6e:8d:ef:16:e2:4c:3b:75:3b:b9:a8:08:
c1:13:1c:98:b3:8f:61:41:06:4a:77:41:db:62:92:9f:9f:f6:
c5:67:63:27:4f:72:e6:6d:8d:b8:13:ac:a2:3c:71:04:6c:b6:
ce:00:8a:91:48:d5:74:2e:d4:62:45:08:d7:b1:99:57:11:6f:
2f:9f:be:dd:79:b1:88:4a:42:01:28:dc:3a:1a:39:27:38:26:
6d:f1:5c:30:16:1e:e1:00:02:a6:37:7c:65:88:36:33:28:fb:
18:95:6c:45:9d:aa:8d:91:57:9c:6f:06:42:c3:06:f0:01:51:
a8:ed:83:20:d1:73:0c:da:18:d0:a7:a8:88:3e:64:22:a8:0f:
95:72:8c:b1:83:a7:2e:4a:ef:3d:fd:e2:4b:4b:76:b9:c2:3f:
8d:45:0e:fb:12:e7:26:6a:5d:bf:d2:a5:a2:83:68:bc:9f:46:
75:2e:6a:42:52:26:4b:87:c4:11:fa:58:a8:e9:24:68:b8:9d:
d6:d7:21:4a:1c:47:df:7a:03:ab:6d:e0:20:6d:3c:c7:ab:cf:
33:a1:25:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:56 2026 by rpki-client