Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
File: PP8fKxF18GBdAl5RAXNpwcqLGkY.mft (raw, json)
Hash identifier: HSwtcLJpHIYG2UslD6jk1QfpBGWhDB1sWew5xN3MZGg=
Subject key identifier: 9D:AB:B7:82:2D:6A:D4:B3:95:6E:11:56:36:3D:2B:DF:55:D2:CD:2C
Authority key identifier: 3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46
Certificate issuer: /CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46
Certificate serial: 019D394105FBAA90BD9BC307BA029DED7A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 11:00:55 +0000
Manifest this update: Sun 29 Mar 2026 11:00:55 +0000
Manifest next update: Mon 30 Mar 2026 11:00:55 +0000
Files and hashes: 1: PP8fKxF18GBdAl5RAXNpwcqLGkY.crl (hash: 92tNqtLJXjxePJwn8uTP6uw0QPKqeXkjQLkT7E3A90Q=)
2: wXINTHM3KqkNQiOuyaFEznGq6_I.roa (hash: CBrAjvZnvJ+pznTkA8zKPHX79jqdqYinxbkP2/HU+Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:05:fb:aa:90:bd:9b:c3:07:ba:02:9d:ed:7a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46
Validity
Not Before: Mar 29 11:00:55 2026 GMT
Not After : Mar 30 11:00:55 2026 GMT
Subject: CN=9dabb7822d6ad4b3956e1156363d2bdf55d2cd2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1c:3b:7f:1e:10:eb:79:27:90:d9:65:67:a4:
31:31:6c:ca:f9:99:d6:fc:34:c2:7c:bf:52:32:7e:
50:0f:ca:d8:97:0b:a6:ca:f5:1a:f7:65:a9:11:cc:
e2:3a:16:86:a2:e6:70:d8:a9:c2:56:d4:c1:1f:b5:
c0:2e:7b:c9:13:78:c4:19:bd:30:35:b6:9f:74:89:
97:93:53:35:a6:61:ab:51:3f:a7:0e:6d:a2:b5:22:
d4:91:28:74:3d:37:b3:90:bf:4a:32:23:80:68:6c:
70:ee:4b:7e:f4:7a:57:90:89:fd:14:e7:88:63:6f:
d1:2e:38:cc:c5:ae:1d:01:9a:d4:24:90:fb:38:78:
f0:6b:f3:04:ba:56:6e:9b:0b:f4:40:eb:72:da:e5:
66:b7:9b:71:77:5b:6b:2f:ed:86:d4:8f:90:bc:ff:
70:a5:f8:81:2e:6a:58:f1:3f:d9:1d:48:b0:2c:f1:
64:21:e5:8e:c7:a8:cb:d4:48:6e:0b:69:6c:3b:72:
e8:c2:a6:f0:f3:8e:ad:32:7c:3b:8c:85:62:fa:18:
0b:55:57:d2:79:db:86:eb:58:93:ec:5a:b3:47:b6:
45:7f:e5:c5:91:30:1b:ed:d1:55:22:48:ae:f1:a0:
2b:1d:0a:24:5f:97:45:e8:a5:fd:5e:46:d1:59:7a:
9f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AB:B7:82:2D:6A:D4:B3:95:6E:11:56:36:3D:2B:DF:55:D2:CD:2C
X509v3 Authority Key Identifier:
keyid:3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:59:ec:55:38:09:3e:66:08:19:e9:af:bf:92:2a:4b:05:44:
1a:fd:fe:a5:85:3f:1c:6c:17:94:6a:8b:69:4a:be:8d:69:0c:
7b:5b:d1:63:19:26:e9:23:f4:23:70:6a:31:c3:50:22:27:00:
9b:41:36:46:e8:4d:1f:08:0d:57:aa:27:e3:3f:5f:0a:0e:ec:
17:e3:2f:01:4c:cc:71:1a:25:5c:d0:aa:10:50:9c:ca:ce:1d:
c5:2b:83:f2:2e:fe:74:9a:b4:85:74:cd:51:60:e5:aa:01:56:
9c:c2:88:8f:a0:c7:a8:32:f3:81:52:70:68:9b:f8:13:06:3f:
0a:26:cc:2d:d5:e1:50:90:d0:18:b2:08:5b:6f:37:a8:79:82:
89:be:31:b6:8c:69:2d:84:b6:c6:e5:ea:cb:da:53:e6:89:ff:
c3:4a:f8:5b:4d:cf:49:40:52:a6:bf:f6:68:e2:fa:b3:c9:77:
92:38:9f:ba:b9:3f:a0:cd:0b:0e:aa:83:f7:c5:fd:57:c0:fa:
bb:ab:fc:ca:79:c6:cd:78:dd:3f:a4:02:90:9c:22:a4:cf:ed:
d0:25:5b:b0:91:f8:07:f8:f4:59:c9:75:58:99:1f:66:04:32:
02:fc:f7:20:36:ef:01:86:a2:1a:b3:3a:3d:a4:ef:57:5e:e9:
2d:f5:1d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:31 2026 by rpki-client