Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/PM6ikJsxCrIUek4InbjQLWM67aU.mft
File: PM6ikJsxCrIUek4InbjQLWM67aU.mft (raw, json)
Hash identifier: +blurlPO1M7spkFCtgJ4hZ/jraH8RGjBFIPv1Tj7+dY=
Subject key identifier: 26:B7:14:9A:9E:65:0A:AF:F5:CA:28:23:AC:69:30:C3:2E:40:34:AB
Authority key identifier: 3C:CE:A2:90:9B:31:0A:B2:14:7A:4E:08:9D:B8:D0:2D:63:3A:ED:A5
Certificate issuer: /CN=3ccea2909b310ab2147a4e089db8d02d633aeda5
Certificate serial: 01A082D2DD85DC091F5B37A51E65F17096A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PM6ikJsxCrIUek4InbjQLWM67aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/PM6ikJsxCrIUek4InbjQLWM67aU.mft
Manifest number: BD
Signing time: Tue 08 Sep 2026 21:00:52 +0000
Manifest this update: Tue 08 Sep 2026 21:00:52 +0000
Manifest next update: Wed 09 Sep 2026 21:00:52 +0000
Files and hashes: 1: PM6ikJsxCrIUek4InbjQLWM67aU.crl (hash: 7ElndW3w17/bzjpg24lxF1vivJCjYehSFSyTLnR2IHM=)
2: UOM6gziwTgthgiT-MMgDEZJHkKw.roa (hash: zJtaUU6Qy0ipND2taxR1aWCjYr5rjwd98bLyWYvXmh4=)
3: htL6EkfhzoE25fJ7cW4uqIL-_6Y.roa (hash: qbYEhkyiHcqaqoWIYEZ+ftQZbk2jPVv+9gYHwpRtHyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/PM6ikJsxCrIUek4InbjQLWM67aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/PM6ikJsxCrIUek4InbjQLWM67aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PM6ikJsxCrIUek4InbjQLWM67aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:82:d2:dd:85:dc:09:1f:5b:37:a5:1e:65:f1:70:96:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ccea2909b310ab2147a4e089db8d02d633aeda5
Validity
Not Before: Sep 8 21:00:52 2026 GMT
Not After : Sep 9 21:00:52 2026 GMT
Subject: CN=26b7149a9e650aaff5ca2823ac6930c32e4034ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:86:71:21:30:7e:8c:8c:73:0c:70:a6:f9:56:
1b:cd:76:fd:33:b3:5e:aa:bc:03:87:c7:40:bd:b2:
52:fc:a0:06:23:ab:f9:28:96:df:07:66:b6:94:0f:
78:82:e9:26:6e:e0:bf:9a:f9:63:6f:b7:67:4a:c8:
f8:c1:d1:f2:a7:39:7b:8e:ae:df:73:3e:bf:fb:45:
8d:d1:12:45:79:4a:63:0a:2d:88:e9:e9:64:4f:e6:
58:1f:f9:93:b5:ef:e3:90:74:f3:15:d5:c9:f9:cb:
d8:21:ec:cf:44:b0:06:50:93:a3:44:b8:bb:f9:8b:
2a:89:79:a8:2d:6f:0c:8a:e0:a8:2a:7e:a5:be:e0:
11:10:d5:6c:79:3a:7e:73:fe:10:c7:17:f2:6b:47:
02:34:9b:29:21:79:5c:14:03:04:f9:4f:04:9e:02:
25:49:e4:9a:3f:67:e3:b9:85:ee:69:5c:a9:76:7f:
ba:5e:65:2f:7f:f1:11:d7:58:6a:d1:2d:28:e5:62:
c1:c0:6e:f6:c1:f5:7b:4f:c8:79:d8:0e:64:04:67:
95:e1:9e:c4:75:1c:e6:de:0e:b3:10:2d:db:4b:c1:
2c:e5:7c:b4:1c:17:67:4e:2b:ea:a0:70:49:9a:b4:
54:ba:fa:01:40:7b:cf:f7:d9:b8:19:36:65:c0:d7:
0b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B7:14:9A:9E:65:0A:AF:F5:CA:28:23:AC:69:30:C3:2E:40:34:AB
X509v3 Authority Key Identifier:
keyid:3C:CE:A2:90:9B:31:0A:B2:14:7A:4E:08:9D:B8:D0:2D:63:3A:ED:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PM6ikJsxCrIUek4InbjQLWM67aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/PM6ikJsxCrIUek4InbjQLWM67aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/PM6ikJsxCrIUek4InbjQLWM67aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e9:12:44:5d:b9:c6:0e:8f:a2:cb:0e:ea:d2:e9:ef:ef:81:
a8:33:3a:67:76:f5:dc:e2:f7:8c:7a:36:a4:f1:00:ac:29:0c:
c7:d9:a0:73:18:1d:56:36:4b:5c:95:a8:23:a3:d9:cf:c7:77:
cd:e9:cb:5f:ca:42:a5:ad:26:97:67:d2:5a:f0:15:92:94:39:
b8:a2:df:8c:e6:80:ce:2c:02:f0:03:92:da:23:9b:e4:ed:02:
24:08:e8:fd:3c:96:e0:1f:3b:26:05:d0:89:f8:1a:b3:38:92:
b8:79:f2:87:f2:d3:75:1e:0d:ea:31:e2:49:c7:0c:6a:2a:b5:
c5:bc:ec:b3:a5:4e:ce:4e:9b:28:9c:bd:78:e3:24:db:97:f4:
d5:5c:55:73:03:d9:83:32:60:2e:2b:bb:02:d7:86:60:1d:cc:
2d:4f:b7:32:00:ac:52:7c:a8:f0:40:3c:1a:2f:6b:95:44:f7:
d3:ca:9c:f2:2c:7e:d6:68:b5:41:69:70:db:3b:d2:45:6e:23:
c4:a9:fa:db:ce:46:bd:41:f4:a3:bc:32:63:6d:ab:62:7b:98:
9d:c5:e3:48:d0:31:dd:a2:7d:33:af:f8:1a:76:22:b5:44:8b:
84:54:7a:19:72:c3:7e:59:81:6e:6f:fe:fa:0a:b9:16:36:36:
ce:ef:89:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 02:09:52 2026 by rpki-client