Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft
File: pnac0wPoTc03o3XW52tgKfzDZ7Q.mft (raw, json)
Hash identifier: MB33/I0NV3bljpr5PsMiYbXTqd87YzLQu8WQyWeGa2w=
Subject key identifier: 0E:07:32:DD:65:46:34:6E:E8:30:8D:F7:6A:6F:D8:65:BC:8B:1C:1E
Authority key identifier: A6:76:9C:D3:03:E8:4D:CD:37:A3:75:D6:E7:6B:60:29:FC:C3:67:B4
Certificate issuer: /CN=a6769cd303e84dcd37a375d6e76b6029fcc367b4
Certificate serial: 019F8A21217A405A0F2391602E313B0DBEEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnac0wPoTc03o3XW52tgKfzDZ7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft
Manifest number: 034E
Signing time: Wed 22 Jul 2026 14:00:54 +0000
Manifest this update: Wed 22 Jul 2026 14:00:54 +0000
Manifest next update: Thu 23 Jul 2026 14:00:54 +0000
Files and hashes: 1: ODmnFvkoRJ8KBXIwmG3VyMbhpMg.roa (hash: UzQ9zfqJ6GmOojpgnIMRQs0ikmH8yfkpdXYgZqB0SfM=)
2: pnac0wPoTc03o3XW52tgKfzDZ7Q.crl (hash: 0zL3HpYlsRb/CJafk4GSRj/U1MNnDTX7EMZwoEZ9c00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnac0wPoTc03o3XW52tgKfzDZ7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:21:21:7a:40:5a:0f:23:91:60:2e:31:3b:0d:be:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6769cd303e84dcd37a375d6e76b6029fcc367b4
Validity
Not Before: Jul 22 14:00:54 2026 GMT
Not After : Jul 23 14:00:54 2026 GMT
Subject: CN=0e0732dd6546346ee8308df76a6fd865bc8b1c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ac:f8:1a:32:85:0b:62:d6:77:b8:09:8c:0c:
a1:13:4b:ab:ae:cc:c5:fd:89:c1:64:3a:19:4c:cf:
01:29:de:0b:41:46:58:3a:e4:bd:59:ac:42:d5:b6:
c4:07:e0:7a:85:4a:3b:7d:46:7d:2a:49:0a:ab:57:
15:ad:0e:ba:35:92:27:d5:df:4c:52:5c:e1:d7:72:
81:6d:10:c6:6b:b8:ab:ae:d7:43:35:a4:aa:67:48:
1c:8a:8f:e0:5d:75:9e:8e:da:a1:9b:81:b9:8d:37:
fb:9f:dc:42:28:88:34:ac:4b:5f:29:a3:09:a9:c0:
58:db:4c:e2:f0:da:db:da:44:2d:04:70:1b:80:22:
3b:ca:9e:5c:a2:08:db:46:aa:35:b1:82:bd:f9:29:
92:63:03:c3:0a:b9:11:ef:25:4a:1e:be:54:35:48:
82:59:ed:8e:65:cc:21:fd:37:68:71:4b:58:62:43:
f2:c7:01:8b:b1:53:30:bf:58:2b:b3:a7:f8:fc:36:
ea:79:a8:47:2a:f4:0b:15:f8:bf:00:29:69:55:29:
07:8c:dd:58:87:cf:d5:18:ad:25:17:3b:5c:f1:dd:
cc:0a:22:2d:bf:2f:83:0b:22:3a:1b:5c:ab:92:87:
83:63:28:37:64:ff:9c:e1:68:37:60:7a:68:ee:bc:
30:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:07:32:DD:65:46:34:6E:E8:30:8D:F7:6A:6F:D8:65:BC:8B:1C:1E
X509v3 Authority Key Identifier:
keyid:A6:76:9C:D3:03:E8:4D:CD:37:A3:75:D6:E7:6B:60:29:FC:C3:67:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnac0wPoTc03o3XW52tgKfzDZ7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e3:e4:dd:59:e7:00:3b:56:0b:3d:cc:80:76:b6:58:04:b3:
d0:3c:ab:61:27:66:23:11:15:99:39:b6:09:1e:c5:87:88:c6:
81:a5:2b:73:93:98:b6:d3:75:96:aa:4d:ec:6d:0b:34:55:39:
4c:f1:09:4d:62:e8:9c:a9:03:9e:e4:d6:5d:1d:eb:46:cb:bb:
48:5a:9a:30:0c:07:70:98:46:87:65:2e:7c:e1:33:2b:47:7d:
4c:2a:86:2a:10:b6:f8:da:fd:9a:be:8d:43:b7:e0:11:e7:43:
f9:35:4d:1c:b9:29:4c:f4:ab:e2:4b:c9:80:26:a8:59:39:bb:
3a:3c:f2:73:e5:3a:c6:b2:f1:fc:73:60:78:75:8e:33:64:d6:
06:5e:75:63:a5:2f:f3:54:ed:b1:df:3e:51:ba:35:09:98:54:
d5:60:1f:d5:d7:72:6c:62:21:7d:08:97:37:3d:08:80:7d:55:
d6:c4:2f:89:5e:0d:e7:0a:30:e7:bc:d9:39:92:42:d8:02:e1:
a9:65:25:09:04:3a:76:19:1a:61:37:7e:19:84:99:41:06:1a:
87:4c:b9:a8:bd:61:a6:e1:04:08:2e:29:d7:87:86:33:34:0b:
39:4c:78:35:b7:85:b1:5c:c6:ba:23:95:1f:35:87:62:51:b9:
9f:5c:d9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 22:42:05 2026 by rpki-client