Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
File: PiDHANmNdqnGQBc4ifk2faneiZc.mft (raw, json)
Hash identifier: djZhisdhnLmgS3YTu+5t6aZve1mlT6/MG92hkyHwq2M=
Subject key identifier: 5D:F9:13:33:4A:A6:F1:CD:DC:34:71:FC:5B:F1:04:91:F4:42:3A:3B
Authority key identifier: 3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97
Certificate issuer: /CN=3e20c700d98d76a9c640173889f9367da9de8997
Certificate serial: 01A17CCE74B489C00494641C2ABF7C2A4CB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
Manifest number: 1ACF
Signing time: Tue 27 Oct 2026 10:01:07 +0000
Manifest this update: Tue 27 Oct 2026 10:01:07 +0000
Manifest next update: Wed 28 Oct 2026 10:01:07 +0000
Files and hashes: 1: 3Y2bsvd6Ko2TakhACGAC13OxWgg.roa (hash: hop+YCd6wtmHiz87UpYcHYekpewszM4DMDY6Yajc55g=)
2: DEt4Y-_VZKpKHUQGndzBwGKa-hI.roa (hash: Pn+dJyctNTmeoTcdBPCYjrOipk+Ikj5vYjRfpzr/AfY=)
3: Fd0my4VD8yFhFNY23xVFQ5bNE7o.roa (hash: Xq0TLzzFqkURQ7QOU8lzKIy+PNOHeKXumeKowKwhe0E=)
4: PiDHANmNdqnGQBc4ifk2faneiZc.crl (hash: Jcc/uSnVyLHOUs3txiYL2GOUpnx353MPOahLygTJYG4=)
5: XfL7J3_lKAhMT6FV_AAy67CADLI.roa (hash: Cja0K8hb1CFlq8SDbTIyn6C1tgY/4LTLk6lQT4K0o4Q=)
6: uekau7rSPung7Kbe6f858ZuB0t8.roa (hash: M2Y/E4DYJ0oSGWPcmXmrI0IqZMHXZ+8X2D2MD5VVJU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:ce:74:b4:89:c0:04:94:64:1c:2a:bf:7c:2a:4c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e20c700d98d76a9c640173889f9367da9de8997
Validity
Not Before: Oct 27 10:01:07 2026 GMT
Not After : Oct 28 10:01:07 2026 GMT
Subject: CN=5df913334aa6f1cddc3471fc5bf10491f4423a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:48:f3:78:05:a3:26:39:5d:64:c3:1c:08:45:
5e:3c:65:b3:38:df:bf:89:ff:99:44:7a:20:b3:b7:
cb:be:3c:59:44:84:5f:74:74:68:6b:a1:c0:1f:e2:
0f:35:5f:4c:aa:2a:bc:37:b2:bc:aa:e3:e5:b6:89:
b2:c0:4e:99:a8:09:3f:68:07:c3:f5:25:cc:12:e2:
47:f0:5a:7f:c4:75:37:e9:bd:57:9b:ec:dd:4f:65:
68:7a:8d:2c:c6:f4:d7:6d:a6:81:b4:43:9a:24:ed:
f4:fd:2a:18:63:89:4f:00:7c:32:a9:98:c1:28:9d:
68:24:eb:e0:b4:26:0f:d3:3e:a3:2c:c6:cf:b3:f6:
67:9d:d6:c0:ac:a3:c0:9c:79:00:92:1d:51:95:d1:
50:22:73:bd:b6:c4:7d:e4:56:9f:5c:cf:23:57:35:
18:37:64:bd:04:df:f8:44:8e:3f:95:c6:c8:62:b1:
4f:50:b0:7d:41:0d:07:8f:bf:43:3e:43:e4:3c:64:
76:95:c6:e3:1f:44:27:03:af:f8:17:31:6e:48:48:
5f:ff:c6:bf:30:79:20:dc:34:c7:20:86:27:91:ac:
74:f8:8e:d5:77:64:bb:a8:f5:2e:68:7a:47:5d:3d:
76:32:90:11:f1:4e:88:24:0a:b8:93:a0:90:bb:77:
68:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F9:13:33:4A:A6:F1:CD:DC:34:71:FC:5B:F1:04:91:F4:42:3A:3B
X509v3 Authority Key Identifier:
keyid:3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b3:27:b3:d9:f7:71:19:b0:4b:f6:8e:c0:39:b0:13:d5:f1:
c9:90:e5:e2:45:18:ed:63:6a:fe:6e:f8:15:d2:61:d9:49:60:
9e:7b:cb:c3:b2:2a:d3:b3:e2:16:ab:d2:2c:a5:73:58:9b:b7:
f1:31:8c:ce:01:6b:63:11:ca:00:7d:cc:59:9e:f1:2f:fe:53:
bb:54:27:47:7f:df:61:c6:e8:ba:e9:fa:5d:04:c8:49:3a:b0:
d4:65:d7:0a:a3:3c:48:80:6b:21:31:3f:73:f7:c1:c5:5f:ad:
34:32:2e:96:6c:b0:75:4b:32:ad:3a:b3:39:df:c0:46:17:b2:
b6:cb:f2:a5:49:1c:ea:27:07:07:56:56:11:3a:21:9c:b3:5e:
34:2f:f7:0e:de:dc:f5:94:3e:62:40:3f:c8:99:df:78:44:cb:
81:07:ac:51:d5:06:f1:27:53:e3:c6:32:34:7e:4f:12:f9:1e:
c0:78:90:db:e8:d9:54:b4:ca:33:29:bf:31:a8:2f:c2:17:49:
4e:fc:f0:8b:11:93:1e:42:86:fa:6a:84:89:fe:da:dd:eb:99:
08:e0:8b:bb:03:91:24:d0:5c:50:51:24:a6:d2:65:c4:93:69:
e7:bf:6d:19:ef:da:54:3a:0d:3f:37:28:57:1d:10:28:4e:31:
90:54:ac:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 19:24:25 2026 by rpki-client