Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
File: PcOGJxwOCo0B-xkNaNhf92TRatQ.mft (raw, json)
Hash identifier: OJoF6djHqMSAaS1MgrxCauJtT/KxVW+UWQKJC+07Tfk=
Subject key identifier: CF:7D:B6:0E:5E:61:02:58:C3:D9:4D:64:9E:A3:CD:F5:4F:0E:79:93
Authority key identifier: 3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4
Certificate issuer: /CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4
Certificate serial: 019D38D2CC499323C359FF7917FCD4000E2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
Manifest number: 066C
Signing time: Sun 29 Mar 2026 09:00:32 +0000
Manifest this update: Sun 29 Mar 2026 09:00:32 +0000
Manifest next update: Mon 30 Mar 2026 09:00:32 +0000
Files and hashes: 1: 6Nl-yKrSE7jmZ8LWgcVcWgQlgFg.roa (hash: /v6LQ7GwS5mzr12Ho4pwZqcEQ6oaSt3ITA8fvgcD220=)
2: PcOGJxwOCo0B-xkNaNhf92TRatQ.crl (hash: S8M+uU4Py31Xe6d0roOfAJHBTRN87fp3qhOEEkA1S/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:cc:49:93:23:c3:59:ff:79:17:fc:d4:00:0e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4
Validity
Not Before: Mar 29 09:00:32 2026 GMT
Not After : Mar 30 09:00:32 2026 GMT
Subject: CN=cf7db60e5e610258c3d94d649ea3cdf54f0e7993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:40:78:68:ee:c3:90:27:f4:b9:2c:5c:38:f1:
3d:36:04:e2:0f:84:06:e8:3f:6e:b1:8e:2d:62:a9:
5e:80:ba:d0:23:33:62:bd:9b:4d:c6:5f:3e:b6:ac:
c5:50:c0:b5:39:36:12:5e:fa:4c:0f:69:21:27:7e:
f7:aa:70:5c:69:62:e1:4c:49:ed:03:6f:16:3e:fd:
0f:e6:10:61:5e:d8:3f:3f:78:ad:01:1d:3b:08:c0:
40:eb:ba:51:48:7e:12:57:f5:bc:c5:70:ab:a4:60:
6c:aa:f5:2b:4f:8f:2b:3f:f6:fe:de:22:13:15:3e:
bd:d4:5f:0f:7b:70:f0:ff:fe:ad:f8:cd:b3:05:97:
14:e8:77:2c:46:ed:ab:09:c3:01:06:d3:64:43:11:
17:59:6b:4d:41:18:39:28:41:d9:96:8d:d9:32:b8:
8e:82:98:8f:4c:d8:20:61:b2:1a:1e:46:84:06:85:
59:0f:86:8d:7d:27:e6:82:0b:f7:8f:ac:30:7e:e9:
d1:9a:c4:35:0b:83:2f:2a:f9:8d:d5:cd:6f:a4:46:
c9:25:aa:da:d2:3c:d9:95:49:bb:06:72:ce:a9:93:
27:3f:ec:06:54:e1:f6:6e:22:3a:f3:f7:6e:2e:f6:
3b:8e:13:77:5a:a0:5e:e7:e3:ef:ce:32:e6:5c:b2:
33:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7D:B6:0E:5E:61:02:58:C3:D9:4D:64:9E:A3:CD:F5:4F:0E:79:93
X509v3 Authority Key Identifier:
keyid:3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:7a:0f:12:2a:41:19:08:b8:49:c2:81:3c:66:84:84:69:cb:
00:af:28:22:f3:be:03:ca:7a:2d:02:f6:e1:44:41:c1:eb:8a:
2a:8c:50:9d:af:91:32:0e:8e:54:c3:88:0b:d2:b6:b3:d4:36:
e8:e7:07:45:4c:57:1b:9f:fe:e6:28:8c:94:f1:50:7b:72:89:
ac:29:97:a3:d6:56:c6:8b:a9:d3:b0:cd:2c:86:22:02:1d:61:
8c:6e:be:f0:38:21:3d:23:0e:af:34:3e:31:d6:89:a0:20:70:
42:19:31:33:9b:01:50:a8:2c:0d:34:12:7a:35:0f:71:c9:6f:
82:9d:12:f1:d4:13:a0:6d:46:96:a8:11:71:a5:df:c9:7f:ff:
9e:b4:91:1b:f7:db:5b:8b:a8:3f:3c:2d:2f:37:b5:2c:dd:74:
c1:54:b9:3a:6e:c1:83:c6:de:5b:39:2c:61:a7:a7:df:70:f8:
42:e6:38:f5:81:1f:77:ca:75:1a:e3:b9:d5:ab:3a:b8:e2:97:
3e:76:79:0f:58:a8:dd:81:f6:7d:3a:10:f5:57:ca:1c:ed:96:
bf:dd:17:8f:c0:a6:d2:d8:57:9d:62:a7:fb:98:52:26:29:13:
c4:33:d3:88:ce:42:23:5b:9a:80:ce:8d:92:54:6d:69:b5:28:
82:0b:58:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:23 2026 by rpki-client