Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
File: PN4kcMhWOUlIej54dDxUTJnsimQ.mft (raw, json)
Hash identifier: eKnP+Bk9QloN1hiGhio+5lLpHKdMyrNutAvbFDmW4Dw=
Subject key identifier: 1D:45:E9:A9:47:45:23:B8:25:E3:AD:98:66:44:E5:76:CD:66:A2:4A
Authority key identifier: 3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
Certificate issuer: /CN=3cde2470c8563949487a3e78743c544c99ec8a64
Certificate serial: 01A065DC432A1019DCF4C36BA2E86478809D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
Manifest number: 0CB7
Signing time: Thu 03 Sep 2026 06:02:08 +0000
Manifest this update: Thu 03 Sep 2026 06:02:08 +0000
Manifest next update: Fri 04 Sep 2026 06:02:08 +0000
Files and hashes: 1: 6dIzMwo0G6tAhuml4GfIJNjdjVQ.roa (hash: wpsN0tsYTVD9eZ1wIkFPmbb5yPxiazJ0MhFoB9FJQW4=)
2: DR9MoQCYtXaLoml4Dm1_5qJwPs4.roa (hash: nXlN3VKxLNyqdBBXWDPV2SzM6R5K4D1KJpMD50qdg/A=)
3: PN4kcMhWOUlIej54dDxUTJnsimQ.crl (hash: ppcsUpyC1LOeylSEQPGC0W+rfaSGFG1uJ7AOqtUV8ZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:65:dc:43:2a:10:19:dc:f4:c3:6b:a2:e8:64:78:80:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cde2470c8563949487a3e78743c544c99ec8a64
Validity
Not Before: Sep 3 06:02:08 2026 GMT
Not After : Sep 4 06:02:08 2026 GMT
Subject: CN=1d45e9a9474523b825e3ad986644e576cd66a24a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:21:68:09:f6:85:fc:e1:50:3b:07:23:2a:13:
f4:57:7a:22:b2:47:ae:e4:55:3e:f7:ef:8b:3c:69:
b1:3b:e5:11:6f:25:8c:b6:c3:03:12:8b:db:1a:ff:
3d:00:ad:2c:64:fc:2f:5f:8d:73:45:c4:a5:0f:15:
27:92:46:52:fa:a9:49:3f:dc:85:99:dd:06:cd:c0:
1d:a6:50:42:a4:89:2d:df:76:7c:a3:c0:f2:6c:41:
b6:9c:e6:a5:1b:02:f2:5f:b6:c0:f1:e3:a2:9d:51:
0e:52:fb:45:62:88:0d:f4:07:29:41:13:3a:48:74:
fa:f0:00:20:5a:e3:d3:ef:03:8b:81:13:3d:ab:02:
22:3b:5a:14:73:cc:31:18:3e:2d:6c:c7:3e:91:16:
a5:5c:5a:89:a4:1f:d5:ce:61:0c:66:9d:59:40:94:
b0:bc:3b:22:8e:7d:bd:8b:4e:29:43:a2:f4:79:12:
68:fa:4a:d3:4d:7d:6f:c3:a1:b5:8e:a7:3d:17:5f:
70:8b:f0:a6:02:c7:59:98:40:a6:61:98:e3:6d:30:
2d:0b:68:62:30:c1:da:72:b8:e2:7e:25:a8:c6:35:
a4:bb:6b:19:b8:09:a3:1f:15:5b:b4:8a:3e:65:f6:
ad:fa:d8:63:e8:48:70:05:1b:11:f3:e1:df:3b:f7:
08:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:45:E9:A9:47:45:23:B8:25:E3:AD:98:66:44:E5:76:CD:66:A2:4A
X509v3 Authority Key Identifier:
keyid:3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:e9:c3:39:7d:f3:c6:7d:f3:e0:00:47:e1:f2:47:a4:be:e0:
8d:bf:3e:16:fa:31:d9:85:d6:2b:94:48:14:22:a2:40:a0:63:
92:82:6f:ff:d4:fe:d5:95:ee:4d:99:61:42:92:95:ff:61:e2:
ee:63:55:e6:d0:15:d1:08:c4:1a:44:01:ca:17:5c:e6:ef:4b:
bc:28:b0:3c:fb:ec:4a:99:b0:30:6d:27:56:53:31:c7:63:de:
78:93:7a:6f:bc:e8:06:a7:4d:fe:82:85:9c:75:bf:7c:9c:82:
5e:b9:26:29:44:0d:31:53:ca:bb:08:8e:20:37:1d:0c:e2:ae:
48:46:cd:73:e0:6b:c2:79:0e:e4:d9:7d:f0:81:ed:28:a1:f8:
b5:64:eb:b6:94:fd:db:38:9f:dc:68:5f:2f:17:76:17:54:2c:
d9:39:95:89:d1:fd:d2:9f:30:90:c5:a2:40:f7:8e:05:f4:76:
af:c5:87:22:9e:61:54:60:21:95:77:ca:b1:33:d6:ec:0d:37:
58:51:ba:3a:35:c0:6b:48:df:93:5e:8e:77:7a:0a:df:5f:cb:
6a:0a:6b:18:b9:06:23:a1:4d:75:13:cd:6b:c5:ec:26:0e:d7:
39:76:75:2b:41:b8:64:d1:34:91:15:d3:87:1b:18:d4:5b:04:
13:99:01:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:09:54 2026 by rpki-client