Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
File: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft (raw, json)
Hash identifier: SzQrtlNBwNNhs5q1aCs75AnJn5kmgIj9q0SMNiNW30g=
Subject key identifier: 09:57:8F:C1:67:8E:93:11:F8:34:70:9C:99:65:13:EB:B2:99:20:2A
Authority key identifier: 3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4
Certificate issuer: /CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
Certificate serial: 019FA33C87B217C206D2285AA445B3619E1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
Manifest number: 078C
Signing time: Mon 27 Jul 2026 11:01:20 +0000
Manifest this update: Mon 27 Jul 2026 11:01:20 +0000
Manifest next update: Tue 28 Jul 2026 11:01:20 +0000
Files and hashes: 1: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl (hash: GBxoAT22Eqo4eZ3yqaW6yPrQhQgRXDRDR5iR1roK69Q=)
2: vYMGfpWvYNZs02-62C7WJ9xAV3E.roa (hash: sKzGuqCRJukA31DoIxhryBDpKKKc57ySQcucjlkvX1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3c:87:b2:17:c2:06:d2:28:5a:a4:45:b3:61:9e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
Validity
Not Before: Jul 27 11:01:20 2026 GMT
Not After : Jul 28 11:01:20 2026 GMT
Subject: CN=09578fc1678e9311f834709c996513ebb299202a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a1:d1:f7:eb:48:27:c0:62:c5:17:7c:79:68:
68:30:41:9d:24:59:1e:e7:b1:75:85:53:a3:5d:1b:
53:dd:4c:7a:ba:05:77:cd:a2:21:a6:10:89:fe:ad:
f2:4c:1f:2e:16:b2:34:9d:3a:96:d9:34:f3:b6:76:
6d:3d:3b:91:16:e8:b8:f2:34:8f:de:12:3b:a5:81:
e7:e1:f5:50:d6:60:6d:79:f9:10:13:aa:72:95:3a:
0f:76:3e:9b:3b:21:ab:9d:f4:46:8f:a3:03:d5:6f:
b2:1e:a4:96:62:18:fd:78:1a:99:22:a5:fc:0e:44:
f1:6c:eb:ba:b8:84:16:2f:72:59:45:f2:9d:2d:29:
6f:ea:d1:15:40:3f:44:df:c1:6c:99:29:23:f7:cf:
e8:02:f5:be:3e:63:e8:b5:fe:4b:e4:1f:a4:07:ab:
50:06:93:49:12:aa:ef:3d:ec:76:55:c8:5d:3f:06:
09:f0:ab:a0:ce:0f:76:f1:60:c8:20:ed:49:fb:c1:
91:70:27:71:59:e2:81:84:48:a3:0d:c9:30:6f:42:
7e:4f:ce:a9:18:de:8f:d4:5b:ea:ef:15:3a:fd:cc:
0d:bd:70:a2:97:c2:3e:37:29:29:43:c9:79:6a:91:
bd:a4:9a:ca:81:3a:ee:4c:fc:f5:b2:07:f2:1f:7d:
4e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:57:8F:C1:67:8E:93:11:F8:34:70:9C:99:65:13:EB:B2:99:20:2A
X509v3 Authority Key Identifier:
keyid:3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:2c:bc:5a:b7:10:46:36:8a:29:fa:d0:80:bc:08:d3:e1:9c:
a8:9a:af:4d:c0:ff:8e:d3:7f:8c:aa:7c:7d:a4:2d:82:37:31:
b9:db:a6:a5:aa:be:6a:7d:86:f6:6d:14:60:ab:fa:3f:3b:9f:
ec:d5:12:99:7d:47:9a:25:6e:77:f1:6b:8a:ef:59:27:90:34:
93:fb:1d:3d:95:3a:41:f9:a9:ff:10:90:d7:60:43:49:c6:b6:
4a:6b:aa:b0:97:84:9b:f5:08:4e:be:22:82:ff:a4:5a:36:1f:
10:a9:85:83:c8:ce:16:ca:74:81:51:16:cd:e5:10:95:26:1d:
28:d4:e4:07:33:c3:ce:89:43:ee:89:c2:f9:fb:1d:ed:b9:6d:
5d:42:f8:99:82:ce:c1:24:a4:94:86:e6:ce:5b:07:3c:bf:fc:
a5:7a:e3:0f:9d:10:88:87:d1:fe:a7:e5:1c:8f:63:79:47:20:
cf:30:1c:64:1c:4e:ad:99:aa:a9:e0:7c:37:c6:e7:55:41:20:
c6:ab:13:68:53:9e:9c:8d:82:f5:e2:d0:1c:23:68:bf:7b:7d:
47:54:5d:de:fd:22:45:73:2f:4d:68:44:32:ca:75:cb:f1:26:
3f:59:79:c1:20:40:af:c9:b8:6f:99:1b:56:20:69:4e:5a:5b:
73:f5:20:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:52:54 2026 by rpki-client