Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
File: PcI-io7JOWsbVM_7JxxVdm2UkZk.mft (raw, json)
Hash identifier: 6PbKGZY+8qQ9VDz6ttCGftYav4vb+dcY1d9LjyxA6Zc=
Subject key identifier: 83:7C:13:DD:32:DE:6B:5D:81:CB:D6:00:65:64:F6:19:C8:54:7C:9C
Authority key identifier: 3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99
Certificate issuer: /CN=3dc23e8a8ec9396b1b54cffb271c55766d949199
Certificate serial: 01A06E7122288EFA24B8118A8208ABF992C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
Manifest number: 15A2
Signing time: Fri 04 Sep 2026 22:01:42 +0000
Manifest this update: Fri 04 Sep 2026 22:01:42 +0000
Manifest next update: Sat 05 Sep 2026 22:01:42 +0000
Files and hashes: 1: PcI-io7JOWsbVM_7JxxVdm2UkZk.crl (hash: zszI0xEghKH1Lvt4068ESGHst1YtSzQWXPRw2hPCXWw=)
2: TonW-R-Zm7EJ5G4DyPorHXUfsQY.roa (hash: 4NWLdATC5TzLcy4vgySsRMRG+JcNTxLmpZ+bS7QNQno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:71:22:28:8e:fa:24:b8:11:8a:82:08:ab:f9:92:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc23e8a8ec9396b1b54cffb271c55766d949199
Validity
Not Before: Sep 4 22:01:42 2026 GMT
Not After : Sep 5 22:01:42 2026 GMT
Subject: CN=837c13dd32de6b5d81cbd6006564f619c8547c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:52:82:68:83:e7:19:05:74:4a:24:37:ca:d6:
86:15:24:60:5a:9c:36:90:e6:e0:44:20:c4:c0:3e:
c1:f5:ee:8c:d4:64:74:b7:73:67:c5:6d:ac:bc:e3:
3c:55:a6:0a:b0:3e:04:b2:38:fe:10:8b:00:80:f3:
fa:cd:a6:ae:61:c2:7b:a5:cc:ef:26:59:b5:34:0d:
27:9e:26:48:0b:6c:6b:f5:c7:c4:ce:a0:d2:49:04:
ac:75:0d:aa:4b:f3:f0:6b:77:8c:a3:db:f8:a1:05:
8e:86:8a:d9:d4:c1:c0:98:58:73:25:df:1c:e7:24:
2f:d3:62:d8:18:2a:c0:a7:95:1d:13:bb:3a:88:06:
0a:75:0a:46:c5:da:0e:8e:cf:6d:4e:3c:01:37:10:
3d:25:b9:d3:68:b0:48:87:86:d6:6e:ea:e2:a8:b8:
e3:8f:7e:1b:04:33:45:ff:4b:e0:0a:74:04:7b:c6:
ba:ae:01:a6:ad:7f:bc:6b:1b:f9:3c:d9:76:da:23:
f7:78:70:6e:86:04:d4:53:4a:8a:62:b6:72:76:a5:
69:13:ef:57:e8:79:f6:ae:dd:61:50:07:54:b8:71:
3a:82:25:46:99:fd:0f:2c:81:69:8e:7a:c1:13:4e:
13:f1:06:28:b6:e0:48:88:73:bd:43:f8:e3:d8:99:
9f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7C:13:DD:32:DE:6B:5D:81:CB:D6:00:65:64:F6:19:C8:54:7C:9C
X509v3 Authority Key Identifier:
keyid:3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:47:2f:19:03:60:7f:ee:7f:ab:c8:11:32:3c:c0:43:ef:2e:
24:98:a6:21:bc:b8:41:b0:33:7d:1f:6b:df:40:a3:f7:9c:93:
77:19:d1:5a:4a:4a:b0:ee:29:69:07:79:81:a6:eb:2c:09:57:
f7:40:a0:ac:ee:3b:31:ca:95:70:8d:a4:66:a3:f6:16:84:f5:
22:ae:31:39:40:d6:b9:eb:c8:07:94:e8:6d:07:93:d4:1c:29:
e2:50:d3:86:40:50:aa:e5:e2:1d:9b:ea:0c:c4:97:e7:33:69:
02:0b:f0:c5:32:59:a2:d0:79:7c:a5:c5:a9:36:b9:43:70:e9:
a0:dc:9f:4e:92:f6:cd:3c:b5:6d:c3:95:34:c5:4c:76:cc:08:
0d:96:12:f2:55:9e:7c:74:b6:8d:f0:04:67:0f:ae:5c:09:74:
80:3c:15:8d:fb:12:b7:6b:0f:61:22:1a:eb:ea:56:81:ce:64:
16:ea:70:06:f7:46:c7:93:80:4a:54:65:ad:7f:fe:3d:c8:fa:
ae:cc:71:ee:cf:b2:40:08:a8:b0:67:ba:6e:69:f9:0a:22:e0:
96:b3:37:ac:b2:1e:94:93:bd:b8:40:59:cc:83:b7:2e:34:4e:
a3:23:70:ea:dd:ba:f4:70:b7:32:51:e2:b6:08:af:01:8a:bf:
e7:e8:c8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:50:18 2026 by rpki-client