Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
File: PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft (raw, json)
Hash identifier: kla7kRwWKFEKRUumPMonJyUbpjEI1/d0rhiL4yDSrjM=
Subject key identifier: 71:F2:2D:BD:DF:51:D3:DB:E7:CC:51:83:8D:E9:E0:27:74:58:A9:59
Authority key identifier: 3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44
Certificate issuer: /CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44
Certificate serial: 01A08A8D3108A26B3DE678AE53FC1C130D4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
Manifest number: 0384
Signing time: Thu 10 Sep 2026 09:01:43 +0000
Manifest this update: Thu 10 Sep 2026 09:01:43 +0000
Manifest next update: Fri 11 Sep 2026 09:01:43 +0000
Files and hashes: 1: 52gTPJdQN2IyRsgf9iKgbNid4cI.roa (hash: 5lE63bjKcJ3503lnep/t29RA6BQhkuc041jpBZfJLfo=)
2: PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl (hash: sfj+etsVUM4hN8EmJtKD2ea0Wmh8NURqqgZ4x+ekyMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:31:08:a2:6b:3d:e6:78:ae:53:fc:1c:13:0d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44
Validity
Not Before: Sep 10 09:01:43 2026 GMT
Not After : Sep 11 09:01:43 2026 GMT
Subject: CN=71f22dbddf51d3dbe7cc51838de9e0277458a959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d4:9b:fe:40:2e:1c:5f:3a:5f:8a:33:c2:b5:
0a:85:8e:18:5f:78:a7:df:e1:d2:6b:9d:b8:d4:bc:
05:63:7f:8c:84:13:b5:e4:c9:d5:e6:12:88:56:9d:
67:85:12:96:75:11:6e:16:d0:e4:94:6c:59:a8:5a:
4c:6c:70:25:03:4c:34:f4:9b:bd:9d:40:4b:06:c6:
03:b4:8e:77:66:a4:74:ec:a3:3e:73:eb:33:68:cf:
91:d6:c6:02:4a:da:cb:67:b4:63:1c:38:ae:87:f6:
c6:34:15:d8:af:05:fc:85:dd:ed:37:b1:36:8a:a6:
1c:95:f0:6c:2c:bf:11:5d:fe:6e:39:f7:fa:84:73:
ae:c7:4b:a1:d4:a8:7f:0c:f0:c4:c3:19:b7:91:5b:
6b:5a:3c:3c:17:72:38:d2:06:16:d7:f8:1c:05:e0:
15:a5:1e:ec:65:41:ed:e2:3f:94:bf:ad:3d:1e:65:
22:0a:88:25:9a:01:2c:a2:81:5d:e6:d3:8d:3d:4c:
00:68:c3:4d:2a:6b:43:6a:36:b5:a3:dd:07:51:5b:
18:31:2a:22:ef:48:73:cb:a8:bc:cb:cf:21:44:8d:
69:97:ea:e0:ae:c7:4b:a8:9e:c4:e6:a5:6c:c1:fc:
fb:e1:85:c6:50:fe:ea:96:6c:2b:5e:7b:c3:c5:11:
41:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F2:2D:BD:DF:51:D3:DB:E7:CC:51:83:8D:E9:E0:27:74:58:A9:59
X509v3 Authority Key Identifier:
keyid:3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:9f:57:58:0b:1c:23:3a:6d:ef:a2:29:43:cb:bb:87:85:29:
98:ec:9c:2e:d6:df:52:11:41:7b:d4:d1:a7:f3:c8:96:81:64:
f4:26:c6:08:18:c0:09:09:0b:01:fd:df:55:b0:a7:82:18:56:
c8:af:e9:b4:30:52:93:39:a8:79:cb:e3:9e:da:16:55:f6:ad:
1b:dc:47:fd:4e:d4:91:96:8c:55:7e:4a:05:fb:1d:c1:1d:d9:
fc:9d:58:04:fd:7d:89:93:77:3b:9c:3e:94:02:03:ac:9e:7b:
ca:54:39:2c:72:5b:90:87:5e:05:47:37:f4:78:a7:41:5d:e1:
0b:c2:c8:48:28:47:5f:2d:02:96:a0:d5:99:4f:14:62:1e:8d:
aa:ce:dc:07:81:c1:14:07:6a:30:59:67:f3:36:b5:4e:8b:9a:
c5:8c:6c:50:53:42:9b:7b:c6:ed:dc:5d:60:9e:ae:d4:d8:5d:
dc:e5:4c:05:b6:5c:0b:9b:4d:31:b8:17:75:4d:b9:26:6e:77:
88:23:1f:19:ed:3d:2a:e9:47:ce:a2:77:40:64:f4:a0:08:82:
fc:61:99:7b:1e:d9:e9:78:02:c0:67:d1:26:00:09:df:29:5d:
a6:e9:0f:2b:8c:2f:ca:1c:a0:c4:b2:d1:54:3d:ae:b9:33:80:
79:dd:45:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:24:49 2026 by rpki-client