Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
File: PT-Hu394dKp-Fc_sm79qrjyc4zo.mft (raw, json)
Hash identifier: WHCTVRRr2Bf9aZC/nQEkU3AmzeNME9q7Xc22r/VUeeU=
Subject key identifier: 0E:26:E4:F5:95:67:6A:B3:10:0C:DC:9C:4D:79:62:A8:AA:DB:61:65
Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
Certificate issuer: /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Certificate serial: 01A08FEA6EE4CD770C7B3813984C38748766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
Manifest number: 13CE
Signing time: Fri 11 Sep 2026 10:01:40 +0000
Manifest this update: Fri 11 Sep 2026 10:01:40 +0000
Manifest next update: Sat 12 Sep 2026 10:01:40 +0000
Files and hashes: 1: 03e_nKrMH4A4-r2jcWSKOro4hEs.roa (hash: DxycIoEklj35A1jvEiLRJ53FKAfEe2yJnQzuZq37gCQ=)
2: D4w1402cKEkHHCPC0Qrp-ROm6yo.roa (hash: EMcXFEgTqCUtUEK47llV6gmt5p0zphRz9x+4xZgTdwU=)
3: PT-Hu394dKp-Fc_sm79qrjyc4zo.crl (hash: JkbRaUsUFVirUZ19Xmsh33CARfNXQ2ZUuUbC7OV856A=)
4: Um-gNomxfjSn0kkB0eNJZRkJRcg.roa (hash: CFaWLMSGhMHtWCv6dN79ys4llyYw9LrXF5/UbAwm7l8=)
5: VkvT6baU95xG8FSlVbrDxq01-m0.roa (hash: wuSqKSYOAMUCrbWLjcaG0f0YLG5d5+8uKukQepwPM10=)
6: abaPwP2Q_8OSCHTWIlI0CKnEXZM.roa (hash: dryzgauXbdm4FHRf2Q1oRz+2w9ySHDpr4lqY5orU7Z0=)
7: kXOd5jH86JLvfXHemqDhfdfDdlg.roa (hash: Y1aEFrTSyZUJC/4uUI51ki9mieJNB1Uh1UY/fpEVapk=)
8: l0yUF1IRmtUQWgAm0m-qwhJJad8.roa (hash: zejsAU9sJFQnGEhJNTn/fy3BN2ZirT1vXiw3WbJzNvE=)
9: vZK02KbzwVRGi2dC-9QkubqQgbM.roa (hash: MBCgvZEuhKwH2+MDiEVq/rFuEUra8cPc3evnj5Tch+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:ea:6e:e4:cd:77:0c:7b:38:13:98:4c:38:74:87:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Validity
Not Before: Sep 11 10:01:40 2026 GMT
Not After : Sep 12 10:01:40 2026 GMT
Subject: CN=0e26e4f595676ab3100cdc9c4d7962a8aadb6165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2d:69:4c:65:60:58:a4:a2:4f:18:c0:63:a1:
41:eb:1b:f8:39:d8:53:bf:d6:5c:60:e9:ce:35:4d:
82:cb:63:49:f9:23:0c:0f:e3:90:cc:9a:4e:a2:d0:
22:79:a4:b9:9b:e4:1c:26:7d:d5:e8:0e:87:13:21:
69:b5:ad:2b:4f:6e:7b:f1:0f:fe:23:0d:d3:78:da:
97:4b:1e:c2:b1:f0:94:d6:f8:e3:1a:9d:bf:ba:1c:
2f:ea:2a:43:80:4a:04:7c:e6:33:e5:28:34:f6:ce:
91:c8:ff:c1:22:54:c9:ce:fb:d0:07:35:92:83:96:
ec:de:25:6e:f3:09:6e:8f:97:d7:85:e0:20:12:63:
ff:06:31:a7:1f:1c:11:92:b6:2d:05:7f:c1:6c:b2:
94:a5:2f:70:c0:92:f6:ff:48:01:9d:5c:48:a8:db:
d7:77:c6:0a:41:52:3d:b2:6c:90:db:5a:1b:a2:25:
ab:7a:6e:83:78:d3:a2:f8:e2:65:6b:b0:f8:1b:ca:
51:ca:ac:48:81:8d:9c:2c:f2:c7:32:94:f1:61:21:
a1:57:16:a5:62:52:3c:42:dc:0b:66:8e:52:ab:6d:
25:30:c8:e8:f1:da:cf:14:f3:38:7a:8e:2c:1d:0e:
76:0e:f0:55:16:c1:a5:3a:5a:4d:84:01:a2:ac:07:
21:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:26:E4:F5:95:67:6A:B3:10:0C:DC:9C:4D:79:62:A8:AA:DB:61:65
X509v3 Authority Key Identifier:
keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:2a:5f:13:99:e1:00:c5:0c:3e:45:f1:da:4a:16:43:b9:25:
05:34:e8:25:69:95:8c:b5:63:50:e2:ce:39:56:b6:87:0e:82:
04:77:10:a3:e9:1a:3a:c7:b8:75:89:fa:0b:e8:ca:3f:4b:c5:
d0:d3:19:ac:41:11:bc:e8:40:fc:dd:a6:e9:5b:ad:64:6b:05:
a2:59:35:3b:ea:9b:ac:b9:db:98:34:b0:f0:07:33:38:bb:29:
08:5e:18:bd:19:f0:01:2c:5b:bb:ab:f1:da:a8:a3:75:bc:c9:
ef:51:73:4a:f5:da:36:44:03:92:3c:81:7e:b6:32:fd:c9:ad:
fa:69:04:ab:47:76:15:ba:1d:ab:38:29:6a:33:69:70:84:eb:
1e:bb:55:4f:c8:57:a8:10:b3:74:f4:b9:10:99:6b:d4:63:59:
8a:a8:e2:b8:e6:9f:00:ef:db:11:f3:9b:39:bd:cc:0b:b7:ef:
02:0a:cc:c4:43:fe:99:85:bb:f1:75:89:60:1a:4d:0e:d9:db:
74:8c:1c:17:6c:a8:a2:e6:09:4b:31:25:32:73:a8:ad:5b:3c:
11:af:74:1d:f4:33:56:af:36:af:78:e8:98:6e:34:c2:0b:f8:
ce:8f:bc:16:56:01:d8:17:04:14:44:a4:5e:1c:ef:56:7f:ef:
93:94:cf:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 17:15:27 2026 by rpki-client