Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
File: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft (raw, json)
Hash identifier: t2yVfEg1ezN0Zgq/xrXAh5mGcEFsEoItgi6vt34rgBg=
Subject key identifier: 07:8D:D9:AB:98:92:A4:13:10:90:16:26:8B:B0:FF:CA:A3:8C:32:31
Authority key identifier: 3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4
Certificate issuer: /CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
Certificate serial: 019D39415A7FDFE9F64FF635C8CEB2117909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
Manifest number: 064C
Signing time: Sun 29 Mar 2026 11:01:17 +0000
Manifest this update: Sun 29 Mar 2026 11:01:17 +0000
Manifest next update: Mon 30 Mar 2026 11:01:17 +0000
Files and hashes: 1: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl (hash: a/tCmxMDZcCR6DHtRmrq1Oug13B0ZI80TRjd5gdG2cI=)
2: vYMGfpWvYNZs02-62C7WJ9xAV3E.roa (hash: sKzGuqCRJukA31DoIxhryBDpKKKc57ySQcucjlkvX1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:5a:7f:df:e9:f6:4f:f6:35:c8:ce:b2:11:79:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
Validity
Not Before: Mar 29 11:01:17 2026 GMT
Not After : Mar 30 11:01:17 2026 GMT
Subject: CN=078dd9ab9892a413109016268bb0ffcaa38c3231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:cf:1a:46:21:a7:76:56:b3:8e:ad:41:42:41:
26:9b:c9:a0:01:5b:1e:06:49:7d:8e:5e:46:35:8f:
f5:71:ee:0b:83:fb:19:25:c8:65:25:8e:1d:87:66:
6a:ab:e3:b3:c0:f8:2c:13:0d:ae:8c:be:74:1f:ea:
72:d6:37:7a:6d:4e:29:03:35:ce:e9:a4:f7:79:8a:
2f:38:88:b9:be:69:60:3e:c2:69:aa:db:7a:12:96:
a1:1f:70:d7:bd:c0:96:ab:99:33:81:31:21:de:34:
14:37:0f:07:41:1b:d4:69:e9:33:8d:17:dd:be:33:
29:14:1d:04:fa:70:f4:9f:67:d1:48:27:f5:fe:99:
3f:8b:ba:5c:e6:97:0e:d6:9d:68:04:99:b8:cc:c2:
e5:aa:d4:35:d9:25:02:0f:98:35:42:e1:70:6b:98:
03:6c:7c:01:b5:86:3b:4e:d1:b9:cb:7f:f0:41:24:
10:43:17:4e:1d:a3:25:ff:a0:a2:5e:32:d2:2f:21:
1a:32:cd:8c:8b:fc:1c:3a:d9:7a:2b:f6:75:72:a0:
37:75:01:96:43:b9:0b:c4:bf:0d:46:e7:9f:e4:ea:
74:16:69:28:40:67:63:6f:08:0f:e1:32:ba:41:33:
d5:b4:f6:7b:3d:bf:11:5b:92:5a:aa:24:9e:7f:ba:
28:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8D:D9:AB:98:92:A4:13:10:90:16:26:8B:B0:FF:CA:A3:8C:32:31
X509v3 Authority Key Identifier:
keyid:3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f6:a9:6a:6f:be:58:fc:7d:85:a6:5c:b9:ac:25:da:73:1a:
e7:f2:04:93:8f:82:fd:c5:67:1e:ee:bc:bb:5e:f3:a6:d0:6d:
81:f8:e4:10:e1:68:60:6f:4f:42:63:2e:9c:01:76:60:cb:73:
a0:bd:be:bb:57:e6:e0:ee:ef:64:fb:91:7a:3c:48:e4:6e:47:
ce:03:6e:85:5e:6f:81:e2:c0:af:3d:e7:9e:40:5f:80:6a:c6:
70:a9:f7:e1:a0:24:59:ac:22:6c:79:33:c0:dc:fd:23:69:4f:
9f:c6:5b:0d:66:8d:b7:90:7b:10:15:78:07:29:92:05:d6:d3:
fc:fd:d4:01:a9:80:52:c5:53:01:da:8f:fe:63:92:99:05:aa:
ef:79:7f:7b:2f:a5:19:66:ea:10:03:88:37:a4:c8:8f:c1:36:
bc:bf:88:79:eb:fa:e7:38:52:5d:05:6c:50:74:1f:f9:1f:f5:
05:d7:3d:da:c5:71:fc:a6:42:88:13:30:68:31:85:94:d2:69:
7c:08:27:d3:db:18:7e:e1:22:2a:91:90:67:e1:d3:90:95:1a:
96:39:61:57:f3:90:1c:65:89:e2:ff:5d:d8:8c:7e:1d:2f:72:
0b:a6:08:c5:df:4a:e0:84:13:98:a2:0d:0b:d0:f8:87:4e:4c:
5c:c2:cf:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:16:53 2026 by rpki-client