Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
File: PcI-io7JOWsbVM_7JxxVdm2UkZk.mft (raw, json)
Hash identifier: LjsIQbja6d8D2XwPeFLnnhh4fq/lAidbLYZCH3D9BCo=
Subject key identifier: 87:52:96:FF:AB:A5:04:B5:DA:9F:93:4F:E1:44:37:84:1E:A1:9F:EE
Authority key identifier: 3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99
Certificate issuer: /CN=3dc23e8a8ec9396b1b54cffb271c55766d949199
Certificate serial: 019F86B24D3B675C4E4987636437FED45636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
Manifest number: 152A
Signing time: Tue 21 Jul 2026 22:00:59 +0000
Manifest this update: Tue 21 Jul 2026 22:00:59 +0000
Manifest next update: Wed 22 Jul 2026 22:00:59 +0000
Files and hashes: 1: PcI-io7JOWsbVM_7JxxVdm2UkZk.crl (hash: 68eQLLOkD3lkuVkyV1DIozYaOykjLPJzOORIzfBWArE=)
2: TonW-R-Zm7EJ5G4DyPorHXUfsQY.roa (hash: 4NWLdATC5TzLcy4vgySsRMRG+JcNTxLmpZ+bS7QNQno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:b2:4d:3b:67:5c:4e:49:87:63:64:37:fe:d4:56:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc23e8a8ec9396b1b54cffb271c55766d949199
Validity
Not Before: Jul 21 22:00:59 2026 GMT
Not After : Jul 22 22:00:59 2026 GMT
Subject: CN=875296ffaba504b5da9f934fe14437841ea19fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:65:b6:2a:0a:ee:89:81:e2:e5:75:9f:82:6d:
87:3e:66:f0:82:2b:a9:82:b1:02:ca:a0:7c:60:d5:
94:71:dd:0e:63:2f:b5:97:43:02:42:36:5e:80:eb:
66:58:05:f0:32:86:e3:cf:f4:30:d2:e7:ae:aa:df:
f1:38:22:5b:f4:ae:92:8e:6e:8d:b9:76:22:34:61:
8d:f5:d8:8d:75:04:85:97:55:d7:ee:7c:3a:6a:86:
12:24:cc:87:03:bc:bf:01:12:a9:fe:58:f1:61:68:
a4:9e:74:f2:3a:b6:b2:35:88:44:2e:3f:63:b1:69:
e5:7a:00:46:ff:7b:9e:67:44:14:40:1e:5d:62:26:
48:14:ac:33:8b:86:20:b5:90:f4:39:31:95:67:e2:
a0:73:d9:1f:1a:1f:a0:18:37:8e:94:f9:6d:01:25:
b2:ee:75:44:bf:92:58:4e:8d:8a:93:c3:8b:a3:7b:
54:38:34:56:6a:87:80:1f:aa:31:3d:b4:91:7d:60:
a6:9a:e0:26:95:7f:23:0f:b4:f3:19:e3:f8:97:4f:
cf:70:22:2f:2e:24:53:58:20:16:b7:c2:85:ac:f1:
43:9c:59:0c:0d:31:40:98:ab:05:2f:ec:19:68:72:
d2:b9:1d:a6:b3:a8:f5:76:b4:23:a9:ce:e0:a0:63:
9b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:52:96:FF:AB:A5:04:B5:DA:9F:93:4F:E1:44:37:84:1E:A1:9F:EE
X509v3 Authority Key Identifier:
keyid:3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:2f:67:dc:2f:ea:58:09:3c:9a:a4:9f:ef:ee:6f:db:1d:d2:
be:8a:43:69:9a:41:f9:7f:e5:55:af:74:62:1c:70:6b:38:b9:
3f:8b:34:67:f3:84:bc:51:8e:49:56:17:45:69:f6:d2:42:4e:
99:9e:05:e4:08:c4:41:ea:6f:f5:6c:3d:ee:5d:12:5f:4d:9c:
f1:dd:f2:8f:d2:e8:9e:c1:8f:33:aa:61:3a:1c:3d:fb:58:8a:
e4:4b:5c:87:ea:f6:e4:b1:37:4d:04:2f:20:cf:58:0f:2a:2f:
ad:11:7b:3a:af:f4:2a:36:e7:54:73:ad:ec:3e:9a:27:e1:28:
b7:95:aa:2d:a4:6b:9b:38:67:b6:99:84:48:55:9c:95:8a:be:
2a:ea:73:6c:99:8f:28:85:4d:c1:5f:00:59:1f:4b:f8:c2:38:
6f:d7:85:9c:ab:f9:2b:f5:33:a1:57:06:96:e2:af:5b:56:63:
bf:8c:4f:86:b5:03:c9:49:22:b6:64:c4:58:e3:bd:91:22:de:
3e:af:ed:ac:c4:9f:cd:b5:95:10:97:b2:bb:6f:95:4a:19:94:
2c:57:1d:d2:f9:04:cb:4a:8b:c7:a2:b9:ff:f7:25:3d:22:2a:
f3:a2:50:32:bc:a6:08:ef:a0:94:4d:c8:3b:de:4e:83:33:35:
c1:5e:62:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:31:03 2026 by rpki-client