Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
File: PFaMWdeoMZnDp56g6DdblG7YhOI.mft (raw, json)
Hash identifier: Ioftwdo/J3U50G37EohKa/dCiM9Jfcycp2HuXlTKgas=
Subject key identifier: AA:1E:D1:0A:F8:BB:0F:FF:66:35:60:C7:FD:F1:71:DC:90:7E:A1:B9
Authority key identifier: 3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
Certificate issuer: /CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Certificate serial: 01A06CEFADFEBAD9784D9E36CC22583F32DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
Manifest number: 1A3A
Signing time: Fri 04 Sep 2026 15:00:41 +0000
Manifest this update: Fri 04 Sep 2026 15:00:41 +0000
Manifest next update: Sat 05 Sep 2026 15:00:41 +0000
Files and hashes: 1: 0ZH3kxew36RRFzQg_mo4-7q2H4U.roa (hash: k3MKGbvdmLnbLs9zehodMhvSl8HPr3KY+BJ978CUfo8=)
2: AydP7XNvWxhhDMLSuOqc0Oa5dE0.roa (hash: jUVgcjRvFoEADtpRITq72Z8KeRsnl4848PEL4Me2SIw=)
3: PFaMWdeoMZnDp56g6DdblG7YhOI.crl (hash: KY4A5AXC9ZJSFzctnawsZVCb/oNFx0YdgHCfpBtHVBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:ef:ad:fe:ba:d9:78:4d:9e:36:cc:22:58:3f:32:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Validity
Not Before: Sep 4 15:00:41 2026 GMT
Not After : Sep 5 15:00:41 2026 GMT
Subject: CN=aa1ed10af8bb0fff663560c7fdf171dc907ea1b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ce:c8:9e:b2:c2:83:36:84:77:f5:75:33:8a:
27:a3:ee:76:18:f1:8c:79:29:e2:0d:86:a7:64:af:
9b:cb:df:ec:21:03:b1:12:82:86:64:ee:0e:7d:75:
0e:47:f0:5c:36:1a:eb:8f:66:7e:f5:22:77:8f:7a:
0c:60:4e:4f:ee:e9:6d:07:9c:c5:3e:3e:b3:f7:bf:
68:be:00:dc:52:2b:80:ae:b1:2a:48:21:3a:e4:e8:
c8:59:29:78:14:26:85:5e:14:d9:83:34:8c:73:1e:
b2:21:ce:cf:1c:d2:00:45:73:74:c2:85:af:4f:c1:
f0:52:23:7a:2f:79:49:21:84:e0:fb:46:76:40:51:
fe:4b:c9:a4:ca:41:7a:e1:91:75:2d:7f:83:64:5d:
f0:93:1b:e0:32:8e:3b:17:98:ce:89:11:b3:5a:65:
9c:a2:54:4d:1a:3f:da:f5:85:ad:e4:b9:09:72:31:
08:60:e2:98:80:0a:4f:7d:4c:13:08:92:2d:ba:22:
eb:02:2a:dd:86:a4:ca:ed:1f:94:bf:b8:91:52:c3:
ee:a1:0a:66:cd:30:c5:77:7f:28:ee:87:0e:c8:a5:
60:63:86:46:84:46:70:83:e3:ed:0e:eb:fd:73:83:
0a:a5:dd:9b:61:07:dc:35:29:53:c5:9d:a4:c0:1c:
e4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1E:D1:0A:F8:BB:0F:FF:66:35:60:C7:FD:F1:71:DC:90:7E:A1:B9
X509v3 Authority Key Identifier:
keyid:3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:db:d1:1c:14:b3:e1:c9:e7:da:93:68:39:6e:c1:42:b8:1a:
56:39:9e:30:27:19:27:b6:4f:a4:d8:33:0c:b5:e9:87:2d:e5:
7c:36:da:85:9a:ab:f9:d0:ba:73:7e:f2:46:56:dc:26:24:a2:
4b:fe:96:0c:50:3c:ee:ce:40:5d:65:e8:b4:a7:48:e3:71:af:
21:a5:cf:9d:77:63:51:ea:39:b2:5b:e4:db:1a:ab:11:92:69:
11:bc:c6:35:79:39:a9:1b:d7:7d:ea:50:2d:92:c7:0f:14:9e:
e4:62:86:b0:79:b1:8f:6d:e5:a3:87:c8:12:59:0c:50:aa:5d:
52:77:31:46:04:ff:a8:a7:cf:b2:21:c7:f2:25:a4:7e:7a:47:
0d:32:e4:d1:2e:cb:8c:ca:cf:67:0b:be:14:02:cc:df:3c:cd:
c2:6a:26:4c:83:fc:64:49:7e:5f:5f:80:67:a7:dc:2f:31:40:
50:28:6b:99:6e:72:7d:93:7b:ab:88:83:93:e4:ec:8e:89:8e:
c6:c4:dc:83:65:65:cf:a4:c0:66:b9:89:05:5c:6d:22:3a:ff:
18:a4:d6:85:e1:58:f1:53:b6:96:cf:c9:31:3c:fa:90:07:3b:
3f:c5:ad:72:41:6a:c9:a9:64:c7:36:bb:2e:03:1b:47:cd:08:
11:ff:28:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:09:37 2026 by rpki-client