Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
File: PcOGJxwOCo0B-xkNaNhf92TRatQ.mft (raw, json)
Hash identifier: W/2psxPvKi6G0V3kkLMCd69aZteEtYeEO/RE+KEXo/U=
Subject key identifier: 70:D8:E1:34:89:6C:53:C9:7A:B4:18:C6:6A:84:AD:89:C8:D4:F9:93
Authority key identifier: 3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4
Certificate issuer: /CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4
Certificate serial: 01A08C7BD715D2DF69F4A0F10FF0FF06CA50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
Manifest number: 0825
Signing time: Thu 10 Sep 2026 18:02:01 +0000
Manifest this update: Thu 10 Sep 2026 18:02:01 +0000
Manifest next update: Fri 11 Sep 2026 18:02:01 +0000
Files and hashes: 1: 6Nl-yKrSE7jmZ8LWgcVcWgQlgFg.roa (hash: /v6LQ7GwS5mzr12Ho4pwZqcEQ6oaSt3ITA8fvgcD220=)
2: PcOGJxwOCo0B-xkNaNhf92TRatQ.crl (hash: CgR7Z0IkXogI96UuSEeaou3uRF9UzjSkNFkHB3SoOio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:d7:15:d2:df:69:f4:a0:f1:0f:f0:ff:06:ca:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4
Validity
Not Before: Sep 10 18:02:01 2026 GMT
Not After : Sep 11 18:02:01 2026 GMT
Subject: CN=70d8e134896c53c97ab418c66a84ad89c8d4f993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c3:fe:f0:d8:fe:0c:8e:d1:bd:39:02:e9:23:
80:f7:1e:69:a8:34:6e:3d:44:6e:ec:8b:07:32:40:
29:0f:ae:99:95:f2:c5:b1:3f:13:75:38:f1:4c:14:
48:30:2d:aa:07:a5:81:b4:d1:1f:8e:19:6b:f9:64:
c2:09:42:34:fb:b5:f2:fe:80:84:5f:af:db:9c:6d:
5b:17:00:72:a7:b9:99:5b:fe:c5:6b:84:ad:5b:b7:
83:d1:6f:64:0b:bc:67:f3:54:be:6d:47:b4:f5:46:
0f:bc:ed:39:56:7d:64:7b:75:ce:d1:d5:1b:c1:7a:
be:06:73:2f:11:52:a2:ab:dd:1a:92:7c:a6:b5:67:
2b:41:4d:7b:69:55:45:42:72:18:c3:e7:10:88:ae:
41:b7:92:b4:4d:03:b1:62:f6:35:a9:fc:42:7d:62:
c9:d7:81:13:0b:66:4b:f1:28:86:83:fc:05:df:5b:
7b:75:ed:2d:cb:d5:5d:41:9e:75:1c:9c:8b:47:b0:
75:58:8c:bc:36:32:b8:39:40:e6:30:e7:41:08:a7:
3d:b1:a3:72:f5:6e:e2:70:98:de:49:5b:ef:d9:6f:
3e:9b:6b:16:75:d5:69:f5:10:a2:1a:b3:65:f1:96:
b1:8f:d0:99:ae:96:82:b5:64:c7:3a:ac:75:99:92:
8c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D8:E1:34:89:6C:53:C9:7A:B4:18:C6:6A:84:AD:89:C8:D4:F9:93
X509v3 Authority Key Identifier:
keyid:3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:42:58:75:20:f2:97:17:43:92:68:98:6f:f7:d7:4d:6c:8e:
19:c4:d0:a3:c1:07:47:11:0b:31:ff:06:eb:80:40:e4:bd:8e:
8c:c8:60:72:85:a7:40:b7:89:59:18:f3:72:9e:67:b3:65:6c:
b4:8e:6a:fa:2b:06:a3:90:80:16:7d:96:b4:ee:ca:f3:d2:9f:
d7:12:a3:15:98:9f:b6:83:ec:80:cf:0f:4f:cd:05:26:ae:f5:
a5:4f:c7:10:b4:10:05:01:18:1c:45:fc:44:51:ae:15:9f:33:
ac:a7:d6:20:45:3a:91:51:a6:69:12:38:de:5a:7e:c8:cc:94:
cf:31:d7:c7:2d:b2:12:ba:94:c1:cd:c1:09:2f:cc:f8:7a:31:
ef:7f:e4:98:d5:1b:6d:f6:82:e0:78:57:f8:a8:47:d9:34:a3:
de:a6:92:9a:43:8f:58:db:94:ac:a5:d2:f4:d1:f8:cf:99:86:
c6:4b:d6:ae:10:8b:eb:55:9d:ae:76:f7:1d:e9:ff:b2:5e:38:
4a:d2:fc:f1:b0:29:eb:9c:d3:f5:3d:81:fa:41:a7:08:50:6e:
38:25:1b:dc:df:d3:fa:c0:93:5b:16:5b:27:ea:7c:2e:73:06:
7c:e0:fe:cd:ca:21:dd:0b:89:15:af:1c:a4:2b:29:b0:06:b2:
0f:5c:29:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:02:16 2026 by rpki-client