Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
File: PcI-io7JOWsbVM_7JxxVdm2UkZk.mft (raw, json)
Hash identifier: bttK70x32oyyhiMUKzkRPggwoNeSHJX6rA5hZNDOGdE=
Subject key identifier: 78:CD:32:08:BE:8C:6E:81:5B:E2:B0:48:F2:80:DB:CC:54:A9:F9:0A
Authority key identifier: 3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99
Certificate issuer: /CN=3dc23e8a8ec9396b1b54cffb271c55766d949199
Certificate serial: 019D37C0CFE456738763F09A4C0E13C9809B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
Manifest number: 13F8
Signing time: Sun 29 Mar 2026 04:01:16 +0000
Manifest this update: Sun 29 Mar 2026 04:01:16 +0000
Manifest next update: Mon 30 Mar 2026 04:01:16 +0000
Files and hashes: 1: PcI-io7JOWsbVM_7JxxVdm2UkZk.crl (hash: IoVxbOEx3U9yAOYvtfDFmWCE+apfkB4Bf7ed8UOLMVQ=)
2: TonW-R-Zm7EJ5G4DyPorHXUfsQY.roa (hash: 4NWLdATC5TzLcy4vgySsRMRG+JcNTxLmpZ+bS7QNQno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:cf:e4:56:73:87:63:f0:9a:4c:0e:13:c9:80:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc23e8a8ec9396b1b54cffb271c55766d949199
Validity
Not Before: Mar 29 04:01:16 2026 GMT
Not After : Mar 30 04:01:16 2026 GMT
Subject: CN=78cd3208be8c6e815be2b048f280dbcc54a9f90a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ed:52:21:15:7a:49:05:4b:86:8b:26:4d:6d:
f9:1f:43:15:a2:0c:39:54:a3:02:a3:6b:21:38:dc:
6f:92:5a:91:91:87:d3:4a:35:e9:20:8a:e0:63:5f:
92:7a:e7:a0:1f:3c:80:76:ee:88:81:1f:12:bc:07:
8e:fd:a4:26:07:cd:41:80:89:1b:8d:a1:7d:b9:ce:
e5:be:24:ae:95:3b:17:35:d6:fc:aa:80:1b:0d:cf:
83:3f:11:05:7a:f4:d7:5f:de:31:10:f6:6c:db:ab:
2c:e2:6b:fd:ec:cf:ba:ba:19:21:7f:b1:f1:b0:4c:
cb:d9:00:27:c0:84:88:e7:78:76:47:e3:ac:24:ad:
fa:6b:12:2e:94:a0:b3:76:67:c5:be:42:f0:9a:8f:
d1:eb:9c:d9:33:6c:13:3b:ab:a9:16:2a:3a:c1:11:
44:52:16:70:5f:df:94:53:5d:d3:47:e1:52:ce:43:
90:9f:88:c2:7c:dc:3c:42:5e:e1:9c:0e:4e:7d:8f:
50:13:2b:2a:73:4f:e2:6c:4f:18:c2:25:24:36:3c:
df:a8:7a:47:9c:44:10:de:fc:ab:f7:df:5e:c5:ca:
20:74:11:39:80:d1:f5:59:3d:5e:91:7e:57:a0:12:
31:76:79:20:99:eb:11:00:24:e0:49:1a:1d:bc:be:
e6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CD:32:08:BE:8C:6E:81:5B:E2:B0:48:F2:80:DB:CC:54:A9:F9:0A
X509v3 Authority Key Identifier:
keyid:3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:a6:c2:a0:e5:13:23:d6:ae:71:a4:15:a8:9d:ac:98:b0:96:
b5:c5:bc:11:cd:24:a0:6a:40:49:fe:93:47:85:34:60:60:cf:
c8:50:b3:86:79:90:a2:05:01:e1:f9:f6:b0:06:c8:f5:d5:88:
fa:58:79:72:24:8f:2b:13:ee:43:e0:bd:05:22:51:db:cb:45:
be:06:8c:15:b0:5d:76:db:30:1d:c4:eb:20:f9:5c:1d:54:73:
cc:69:ac:8c:ca:28:e5:60:1a:73:b4:bc:d4:6e:62:14:8f:69:
f0:90:90:a1:03:7e:55:6a:37:13:fe:33:37:cc:3f:64:f8:0a:
c2:35:87:b1:7b:1f:65:16:1e:52:f7:9a:4f:4e:10:cd:01:f9:
74:6d:04:d5:3f:fc:e6:7f:6c:23:b4:33:9a:1a:66:ce:43:29:
fe:b8:d3:f8:ec:61:68:66:0b:d9:90:7c:42:c6:90:b3:57:5d:
bb:68:a3:8a:3c:76:6b:51:3a:4c:9c:64:5f:2f:27:87:59:57:
cb:16:9c:8d:97:e6:a0:3d:64:7d:ca:56:6e:78:ba:c6:5c:95:
ab:61:0e:ef:66:a7:cf:9a:04:04:8c:2c:e8:5b:81:79:c8:40:
39:eb:9c:07:94:27:4d:80:f7:e3:bd:82:15:f3:3a:66:57:cc:
4b:23:51:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:19 2026 by rpki-client