Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
File: PiDHANmNdqnGQBc4ifk2faneiZc.mft (raw, json)
Hash identifier: Y9JBOQoBtPsZiJiSaUQBNkcYjy6rm4pMPv0Y4Pcusow=
Subject key identifier: 8D:F7:22:BD:9F:6F:BF:AC:CE:08:EB:E2:BE:66:41:79:AA:56:61:01
Authority key identifier: 3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97
Certificate issuer: /CN=3e20c700d98d76a9c640173889f9367da9de8997
Certificate serial: 01A18299E5FC3F1133B092220AB416962B8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
Manifest number: 1AD2
Signing time: Wed 28 Oct 2026 13:01:26 +0000
Manifest this update: Wed 28 Oct 2026 13:01:26 +0000
Manifest next update: Thu 29 Oct 2026 13:01:26 +0000
Files and hashes: 1: 3Y2bsvd6Ko2TakhACGAC13OxWgg.roa (hash: hop+YCd6wtmHiz87UpYcHYekpewszM4DMDY6Yajc55g=)
2: DEt4Y-_VZKpKHUQGndzBwGKa-hI.roa (hash: Pn+dJyctNTmeoTcdBPCYjrOipk+Ikj5vYjRfpzr/AfY=)
3: Fd0my4VD8yFhFNY23xVFQ5bNE7o.roa (hash: Xq0TLzzFqkURQ7QOU8lzKIy+PNOHeKXumeKowKwhe0E=)
4: PiDHANmNdqnGQBc4ifk2faneiZc.crl (hash: Z67rmfFausC7F1ugG6CAKcewpZq2P9ukGIqFmokGIvo=)
5: XfL7J3_lKAhMT6FV_AAy67CADLI.roa (hash: Cja0K8hb1CFlq8SDbTIyn6C1tgY/4LTLk6lQT4K0o4Q=)
6: uekau7rSPung7Kbe6f858ZuB0t8.roa (hash: M2Y/E4DYJ0oSGWPcmXmrI0IqZMHXZ+8X2D2MD5VVJU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:99:e5:fc:3f:11:33:b0:92:22:0a:b4:16:96:2b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e20c700d98d76a9c640173889f9367da9de8997
Validity
Not Before: Oct 28 13:01:26 2026 GMT
Not After : Oct 29 13:01:26 2026 GMT
Subject: CN=8df722bd9f6fbfacce08ebe2be664179aa566101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:16:45:65:7a:04:d8:0b:70:2e:a3:ff:65:f6:
3c:b9:07:23:b8:ca:ec:90:f8:24:90:92:e8:a7:0f:
56:b9:5f:08:02:b5:dd:8d:04:ad:4d:cb:35:7b:f3:
84:d3:38:21:a8:3a:ec:ae:44:51:00:96:1b:a0:0d:
2f:ef:8b:c5:37:36:4c:4e:17:fb:3f:e1:4c:9b:02:
7e:2b:fe:52:fb:80:fd:17:36:c0:54:30:7a:f9:10:
24:76:84:e9:cd:e4:79:f4:7d:a8:1f:77:88:ac:df:
00:46:7f:6e:c7:45:31:13:8a:3d:ff:36:b5:a5:e1:
36:76:b2:6b:52:a3:8e:80:af:ee:6c:74:85:3e:f5:
73:84:2b:33:63:72:4b:24:f5:c2:00:38:a7:4d:33:
75:3d:d5:c2:80:40:35:7f:35:d9:47:4c:0b:93:26:
de:d5:16:42:5c:0f:a8:54:67:08:4a:40:e4:06:e4:
63:33:2c:5c:16:f2:24:43:61:45:bf:32:fd:fe:b5:
71:4e:47:db:1a:07:47:db:94:d5:12:1e:66:9a:81:
f6:1f:80:d1:b2:96:bf:ab:26:42:8d:8d:c2:7f:36:
e7:25:b7:e0:eb:5a:f9:c7:46:de:52:f5:37:e4:2d:
22:cc:f1:d0:7f:ec:72:bb:3a:2a:0b:90:52:db:eb:
91:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F7:22:BD:9F:6F:BF:AC:CE:08:EB:E2:BE:66:41:79:AA:56:61:01
X509v3 Authority Key Identifier:
keyid:3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:46:5e:28:5a:e1:d9:26:a4:95:a7:25:3c:9a:87:fa:f4:cb:
63:5c:e4:68:2f:f3:3c:bf:01:22:ad:9b:0f:01:93:da:86:99:
5e:92:66:26:cd:98:4c:a6:0b:77:89:2e:bb:76:6c:1a:64:e4:
1a:b6:8d:ac:63:bc:1e:b4:bb:28:74:cf:32:07:59:44:97:c0:
79:e3:3a:1e:26:bc:48:59:31:42:82:40:92:cb:0d:1e:8b:21:
a2:16:af:74:ac:be:00:36:8f:4a:23:be:bc:31:90:5c:c3:d6:
53:69:d9:2a:c1:46:40:df:8e:c5:fb:54:6f:58:eb:45:0e:3a:
36:a5:bc:fd:31:6b:81:55:13:83:a7:c0:24:5e:ba:3a:a7:33:
92:38:c9:5f:1b:a9:b7:96:cf:25:14:d5:12:36:8f:3a:3c:37:
9b:90:7d:4d:26:42:fb:b3:1e:96:5c:53:34:96:32:53:49:28:
72:a1:67:e4:20:dd:48:97:36:25:65:6e:9f:a5:42:39:cd:c5:
10:13:3a:4f:60:6d:75:0b:eb:50:9e:b0:87:c6:f5:2b:d0:07:
cc:4c:2a:e8:9b:67:b8:cd:2a:26:bb:b1:0d:b5:8b:77:ec:62:
46:ca:e4:29:f1:35:a0:3a:b9:49:4a:cb:4e:50:0e:ff:c5:30:
a7:ea:12:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:21:18 2026 by rpki-client