Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
File: PcI-io7JOWsbVM_7JxxVdm2UkZk.mft (raw, json)
Hash identifier: V3Zbx+RxSN2eKCrpeKVoUTxq2O6MkzkYIITTGXefQgE=
Subject key identifier: F9:94:C6:EA:6D:AC:9A:57:01:F8:E7:FF:A6:6C:50:68:24:66:B5:D2
Authority key identifier: 3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99
Certificate issuer: /CN=3dc23e8a8ec9396b1b54cffb271c55766d949199
Certificate serial: 019E9D057AB18C602550FB4D61730CA4324B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
Manifest number: 14B1
Signing time: Sat 06 Jun 2026 13:00:42 +0000
Manifest this update: Sat 06 Jun 2026 13:00:42 +0000
Manifest next update: Sun 07 Jun 2026 13:00:42 +0000
Files and hashes: 1: PcI-io7JOWsbVM_7JxxVdm2UkZk.crl (hash: SFU53FcwIGNm67ekrwZM8/6doQAY6nwgu+ypWt/tx2Q=)
2: TonW-R-Zm7EJ5G4DyPorHXUfsQY.roa (hash: 4NWLdATC5TzLcy4vgySsRMRG+JcNTxLmpZ+bS7QNQno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 12:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9d:05:7a:b1:8c:60:25:50:fb:4d:61:73:0c:a4:32:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc23e8a8ec9396b1b54cffb271c55766d949199
Validity
Not Before: Jun 6 13:00:42 2026 GMT
Not After : Jun 7 13:00:42 2026 GMT
Subject: CN=f994c6ea6dac9a5701f8e7ffa66c50682466b5d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4a:7c:1a:36:be:34:ac:97:1b:30:e5:ca:0b:
fc:1f:4b:bc:04:d2:46:9c:e6:39:51:26:6a:32:a7:
75:6a:35:31:3c:cd:93:fe:86:22:01:a0:63:c3:40:
54:c5:6a:8a:f7:0b:93:d1:87:3e:de:12:71:91:53:
ae:1b:18:ff:1e:70:ee:ba:9b:c8:02:e4:65:01:dd:
d1:b0:ce:00:bb:28:2c:a6:59:ff:41:cb:ad:ad:5c:
f5:79:c1:48:3d:23:92:5b:1c:6d:64:54:74:f7:4e:
c2:ac:d2:ef:4f:3a:d2:97:f5:b9:ba:af:61:ae:b7:
71:85:22:09:2e:86:58:73:46:c1:b6:e3:5c:4d:83:
ba:93:71:c1:34:30:20:9e:f7:31:c1:aa:fb:a2:a5:
67:59:0e:07:c1:49:7e:aa:f2:08:b4:6d:64:eb:50:
59:b7:fe:d4:ca:3e:3f:4c:ca:01:a4:5f:22:d1:17:
c4:2f:d8:9e:a7:4e:63:97:26:c0:c0:80:15:ce:27:
8e:bd:36:94:79:9e:87:00:bb:2c:70:b2:01:90:ac:
79:ea:10:43:f4:91:14:7f:3e:09:3f:47:5c:70:a1:
8f:34:26:dc:6e:d7:e1:97:7c:67:e4:ae:74:51:bb:
b2:02:57:a8:98:e7:44:19:fa:e6:44:e6:04:33:b0:
c2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:94:C6:EA:6D:AC:9A:57:01:F8:E7:FF:A6:6C:50:68:24:66:B5:D2
X509v3 Authority Key Identifier:
keyid:3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:70:1b:4c:eb:47:2c:11:de:59:1a:56:35:1d:d3:20:7d:d4:
d4:07:78:6d:5d:77:a4:c2:2f:ab:ac:5b:fe:7d:42:48:03:c9:
47:78:a3:21:5f:6d:ed:65:ce:dd:7d:ad:c1:32:e7:6e:2b:89:
cc:03:30:6e:a8:1f:a1:79:04:27:87:df:d9:57:ce:64:31:4b:
44:62:7a:27:4d:4c:2f:2e:d3:b6:dc:11:8f:a7:2c:94:8b:5c:
1c:16:8a:82:ce:6e:bc:3b:f8:9f:8e:79:47:f6:c9:82:bf:3f:
5b:c1:fa:f0:38:6c:d7:35:94:dd:a3:88:63:70:67:fc:7e:2c:
2d:b2:76:9d:4a:bc:71:12:cc:bd:72:42:2b:74:2f:02:98:e4:
a5:9e:d3:af:af:a1:d5:86:98:b4:cb:75:7b:e0:e0:7b:f7:c8:
13:f9:0c:e7:d0:2c:45:a6:57:ab:06:11:26:38:09:99:3a:4b:
45:1c:45:4b:92:3b:ff:fb:5c:f0:39:c4:1a:22:ce:c7:f7:e8:
70:11:25:1e:b2:11:23:6c:8f:56:2d:59:dd:2b:35:62:67:f3:
70:83:47:20:5f:2c:e0:6a:84:47:04:7f:b5:28:f7:13:89:a0:
38:50:6d:5a:90:d7:3e:fd:ca:56:b4:8a:f2:bf:97:7a:56:39:
60:2c:e9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 16:53:24 2026 by rpki-client