Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.mft
File: pcJJ62-mtduvarnes6d3juDrNIc.mft (raw, json)
Hash identifier: 17t8gdfL1N8QHEKFHdXkxWCUxpK/YJ5N9WlK6iY6QJM=
Subject key identifier: 15:4B:31:FB:E3:CB:DE:DA:20:42:A8:05:84:CF:DE:6F:FF:85:0B:C7
Authority key identifier: A5:C2:49:EB:6F:A6:B5:DB:AF:6A:B9:DE:B3:A7:77:8E:E0:EB:34:87
Certificate issuer: /CN=a5c249eb6fa6b5dbaf6ab9deb3a7778ee0eb3487
Certificate serial: 019CEC70326020C9E531C70F287B84AE53C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcJJ62-mtduvarnes6d3juDrNIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.mft
Manifest number: 07FF
Signing time: Sat 14 Mar 2026 13:01:41 +0000
Manifest this update: Sat 14 Mar 2026 13:01:41 +0000
Manifest next update: Sun 15 Mar 2026 13:01:41 +0000
Files and hashes: 1: pcJJ62-mtduvarnes6d3juDrNIc.crl (hash: u83TSY/tDAKspAf3EwlDUeh4auRW/XCmwwfplsbmqKI=)
2: rmG_Mx4OERgiuD3P5wGx8USzfRc.roa (hash: EVDCfM58CfL8EZ3fG32e3+1OR69T0z1tPNxcvYnXhZw=)
3: tvVz3gUCgldDkrhOEK9-WF9eoc4.roa (hash: VM0xQWpxXmLKkz6M8pgyNY4WFuott6QJjASY1s27SWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcJJ62-mtduvarnes6d3juDrNIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:70:32:60:20:c9:e5:31:c7:0f:28:7b:84:ae:53:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c249eb6fa6b5dbaf6ab9deb3a7778ee0eb3487
Validity
Not Before: Mar 14 13:01:41 2026 GMT
Not After : Mar 15 13:01:41 2026 GMT
Subject: CN=154b31fbe3cbdeda2042a80584cfde6fff850bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:75:b4:bf:7d:3d:b9:79:1b:a3:1c:c1:46:4d:
d7:68:ca:6c:d4:06:22:39:b9:e6:2f:e6:cb:d0:27:
90:04:41:67:38:ed:a6:2c:f2:99:b7:38:99:20:ac:
2e:31:a3:9e:52:e7:2b:89:84:68:8f:ee:86:af:7c:
a7:5d:3c:b3:fc:96:f9:24:4b:f2:5c:ba:05:e0:93:
8c:73:04:19:2f:6a:fb:2e:ec:7c:20:9b:f2:fc:ed:
64:1e:03:21:1f:22:8c:fc:b2:f8:af:a4:6f:38:db:
be:99:9d:80:19:2a:04:7f:40:92:68:9b:b5:92:84:
b6:58:fb:95:4d:c1:42:f3:b5:0e:2c:e1:d4:a8:8c:
07:d1:b2:9b:26:09:b3:aa:a3:d4:e3:19:37:e7:af:
c8:d8:86:e2:a1:fa:93:10:3b:c9:e1:45:21:e3:75:
d4:1e:f6:5a:f5:d3:d8:04:d2:9d:58:c9:cb:72:11:
d1:4e:82:de:89:93:ed:03:af:99:b7:72:02:92:22:
cc:f0:81:57:e3:c3:82:78:76:d1:38:0c:00:5b:25:
81:4b:8d:5d:94:a7:a6:0c:6f:bf:de:47:f6:03:fe:
55:95:22:d1:88:f5:15:25:cc:95:7e:50:85:da:cd:
65:10:36:f9:89:97:46:4a:55:b2:48:f4:35:12:8e:
97:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4B:31:FB:E3:CB:DE:DA:20:42:A8:05:84:CF:DE:6F:FF:85:0B:C7
X509v3 Authority Key Identifier:
keyid:A5:C2:49:EB:6F:A6:B5:DB:AF:6A:B9:DE:B3:A7:77:8E:E0:EB:34:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcJJ62-mtduvarnes6d3juDrNIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b3:19:e7:3f:ed:3c:e8:c3:fb:c6:e3:64:58:32:7c:27:1b:
f3:2d:f2:be:5e:24:14:7e:b1:c4:88:45:77:5c:a2:7e:81:e2:
64:cb:cf:5b:f9:f3:b1:cd:6c:ea:13:f4:3a:8c:eb:25:33:40:
8c:b4:0e:18:cd:77:48:06:9d:9b:1f:84:16:7f:0c:79:d3:6a:
eb:93:1f:2e:b8:b8:8b:67:d7:34:07:14:08:dc:33:8d:99:4b:
00:3c:03:40:cd:2a:cf:56:49:f9:2e:c7:33:5a:70:d6:67:79:
9f:9d:7e:91:6e:80:cb:e1:7d:41:89:8b:3b:03:61:a9:2e:de:
53:e5:35:72:a5:11:2c:b0:e1:14:21:cf:1f:5c:cd:79:53:12:
89:78:35:94:4e:a4:00:ca:c9:e8:29:0c:4c:85:f4:9b:e5:32:
ca:be:b3:b5:22:52:5a:f2:e9:e2:05:5f:d9:c9:df:1d:00:61:
17:db:0f:bc:3e:a0:18:39:d6:74:f4:19:8e:5a:bf:fa:3f:f8:
90:67:e3:4d:b6:bc:55:ba:0f:d0:83:92:b9:f9:a0:10:42:79:
ba:9f:fa:e7:53:de:5c:eb:69:bd:9f:a6:5a:85:f9:b7:70:eb:
3c:cf:97:70:de:c8:43:8e:ed:a2:d1:60:79:3b:b4:80:65:f8:
7d:49:3c:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzscDJgIMnlMccPKHuErlPCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YzI0OWViNmZhNmI1ZGJhZjZhYjlkZWIzYTc3NzhlZTBl
YjM0ODcwHhcNMjYwMzE0MTMwMTQxWhcNMjYwMzE1MTMwMTQxWjAzMTEwLwYDVQQD
EygxNTRiMzFmYmUzY2JkZWRhMjA0MmE4MDU4NGNmZGU2ZmZmODUwYmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nW0v309uXkboxzBRk3XaMps1AYi
ObnmL+bL0CeQBEFnOO2mLPKZtziZIKwuMaOeUucriYRoj+6Gr3ynXTyz/Jb5JEvy
XLoF4JOMcwQZL2r7Lux8IJvy/O1kHgMhHyKM/LL4r6RvONu+mZ2AGSoEf0CSaJu1
koS2WPuVTcFC87UOLOHUqIwH0bKbJgmzqqPU4xk356/I2IbiofqTEDvJ4UUh43XU
HvZa9dPYBNKdWMnLchHRToLeiZPtA6+Zt3ICkiLM8IFX48OCeHbROAwAWyWBS41d
lKemDG+/3kf2A/5VlSLRiPUVJcyVflCF2s1lEDb5iZdGSlWySPQ1Eo6XSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBVLMfvjy97aIEKoBYTP3m//hQvHMB8GA1UdIwQY
MBaAFKXCSetvprXbr2q53rOnd47g6zSHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGNKSjYyLW10ZHV2YXJuZXM2ZDNqdURyTkljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80NTMxOTktNjM0My00YzY3LWI4N2Ut
MzJlYjNhNGVhZDQzLzEvcGNKSjYyLW10ZHV2YXJuZXM2ZDNqdURyTkljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi80NTMxOTktNjM0My00YzY3LWI4N2UtMzJlYjNhNGVhZDQz
LzEvcGNKSjYyLW10ZHV2YXJuZXM2ZDNqdURyTkljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOrMZ5z/t
POjD+8bjZFgyfCcb8y3yvl4kFH6xxIhFd1yifoHiZMvPW/nzsc1s6hP0OozrJTNA
jLQOGM13SAadmx+EFn8MedNq65MfLri4i2fXNAcUCNwzjZlLADwDQM0qz1ZJ+S7H
M1pw1md5n51+kW6Ay+F9QYmLOwNhqS7eU+U1cqURLLDhFCHPH1zNeVMSiXg1lE6k
AMrJ6CkMTIX0m+Uyyr6ztSJSWvLp4gVf2cnfHQBhF9sPvD6gGDnWdPQZjlq/+j/4
kGfjTba8VboP0IOSufmgEEJ5up/651PeXOtpvZ+mWoX5t3DrPM+XcN7IQ47totFg
eTu0gGX4fUk82g==
-----END CERTIFICATE-----
Generated at Sat Mar 14 19:18:29 2026 by rpki-client