Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
File: PT-Hu394dKp-Fc_sm79qrjyc4zo.mft (raw, json)
Hash identifier: NpLpD4rwnUywzyG3Z2vAN1LTnalbmOZNSDfCfvHdLtU=
Subject key identifier: 0B:66:77:F0:25:BD:78:94:0E:36:99:FA:E6:1E:90:9C:3C:37:9A:7D
Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
Certificate issuer: /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Certificate serial: 01A17F620C0A7249C5D10CE72F429E6ED87E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
Manifest number: 144A
Signing time: Tue 27 Oct 2026 22:01:34 +0000
Manifest this update: Tue 27 Oct 2026 22:01:34 +0000
Manifest next update: Wed 28 Oct 2026 22:01:34 +0000
Files and hashes: 1: 03e_nKrMH4A4-r2jcWSKOro4hEs.roa (hash: DxycIoEklj35A1jvEiLRJ53FKAfEe2yJnQzuZq37gCQ=)
2: D4w1402cKEkHHCPC0Qrp-ROm6yo.roa (hash: EMcXFEgTqCUtUEK47llV6gmt5p0zphRz9x+4xZgTdwU=)
3: PT-Hu394dKp-Fc_sm79qrjyc4zo.crl (hash: sMrBH9TY9hRWwkrnfbPKTWg2QHGBhB3oehUdrPf4Lok=)
4: Um-gNomxfjSn0kkB0eNJZRkJRcg.roa (hash: CFaWLMSGhMHtWCv6dN79ys4llyYw9LrXF5/UbAwm7l8=)
5: VkvT6baU95xG8FSlVbrDxq01-m0.roa (hash: wuSqKSYOAMUCrbWLjcaG0f0YLG5d5+8uKukQepwPM10=)
6: abaPwP2Q_8OSCHTWIlI0CKnEXZM.roa (hash: dryzgauXbdm4FHRf2Q1oRz+2w9ySHDpr4lqY5orU7Z0=)
7: kXOd5jH86JLvfXHemqDhfdfDdlg.roa (hash: Y1aEFrTSyZUJC/4uUI51ki9mieJNB1Uh1UY/fpEVapk=)
8: l0yUF1IRmtUQWgAm0m-qwhJJad8.roa (hash: zejsAU9sJFQnGEhJNTn/fy3BN2ZirT1vXiw3WbJzNvE=)
9: vZK02KbzwVRGi2dC-9QkubqQgbM.roa (hash: MBCgvZEuhKwH2+MDiEVq/rFuEUra8cPc3evnj5Tch+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:62:0c:0a:72:49:c5:d1:0c:e7:2f:42:9e:6e:d8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Validity
Not Before: Oct 27 22:01:34 2026 GMT
Not After : Oct 28 22:01:34 2026 GMT
Subject: CN=0b6677f025bd78940e3699fae61e909c3c379a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e4:95:aa:da:76:65:99:b0:a6:fd:f3:9f:74:
b2:ef:b2:dc:33:b6:ae:48:2a:04:cc:9e:55:08:ce:
b9:f3:81:26:c1:5c:81:85:05:13:30:71:ad:a5:16:
f1:c6:80:3f:95:4b:da:3f:34:b2:bc:57:58:fa:c9:
de:c9:d0:7b:29:86:4e:34:63:f8:7c:ec:cb:0b:4b:
3f:7f:4e:b0:bf:56:00:f8:56:12:57:16:19:26:40:
95:4a:b5:99:9b:c0:81:e0:f7:fe:bd:19:aa:5e:3b:
76:39:aa:91:62:c2:ce:a8:f4:d7:62:b6:be:96:bc:
68:06:69:21:67:ac:29:86:41:1a:95:39:0a:bc:6e:
bb:b2:83:67:04:e8:fa:0c:d4:0f:f6:51:7e:d3:a1:
ab:29:9c:2f:6c:29:80:cc:2f:18:54:85:1e:2a:06:
3e:b1:33:ec:e2:38:9b:0f:75:44:13:be:fa:25:3b:
ed:57:9b:6d:c5:84:ce:26:30:4d:59:36:5a:87:b2:
79:d2:ab:2d:4b:b4:52:6b:80:e4:07:6a:ac:60:d7:
fd:ed:36:03:cf:2a:cb:ef:f8:9e:05:c4:e2:f8:39:
6f:28:48:eb:73:3b:a3:ab:23:82:70:35:79:c2:2b:
55:d9:6b:61:23:ce:11:2c:a5:e3:09:1a:26:b0:b9:
4b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:66:77:F0:25:BD:78:94:0E:36:99:FA:E6:1E:90:9C:3C:37:9A:7D
X509v3 Authority Key Identifier:
keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:91:e3:0e:7a:08:10:66:85:6f:bc:d6:2d:03:08:8b:26:62:
f3:e8:a9:be:82:b5:a4:b1:23:0e:47:0a:de:32:f7:f0:7f:63:
9c:90:bf:6e:9a:56:0e:8c:2a:0f:20:20:8d:76:6e:ed:85:12:
66:f6:37:0f:64:44:c3:c3:19:20:f5:88:86:a8:1a:98:5a:64:
ed:7f:42:8d:8e:6d:ed:0d:49:35:bd:9c:da:69:22:83:b2:b0:
71:d5:6f:05:78:11:50:23:13:8d:22:7a:0f:e7:9b:d2:82:1d:
7d:b5:0e:f6:7c:af:d6:5e:d3:b0:e5:be:de:a6:2f:62:0b:69:
61:3a:28:c6:ac:7e:7c:31:c4:e1:21:5f:80:c2:1b:63:33:ed:
57:8a:22:ae:55:61:d2:df:63:47:f9:b9:14:14:09:ae:34:9e:
9c:e2:90:7d:23:3a:0b:8f:1c:fe:d2:69:37:b6:65:80:7e:12:
46:ca:be:70:5a:07:63:fb:65:ec:0f:35:95:8d:b9:3d:76:be:
d1:d2:4e:ba:a9:12:55:10:9d:b4:d2:84:e5:59:c5:a4:6e:5e:
1d:f3:b7:8f:29:4d:72:b4:ce:35:7b:0d:df:97:e8:43:1f:63:
d3:41:89:d2:8c:27:8c:86:92:24:5f:5e:13:94:ac:f3:cd:3c:
59:21:3f:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF/YgwKcknF0QznL0Kebth+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkM2Y4N2JiN2Y3ODc0YWE3ZTE1Y2ZlYzliYmY2YWFlM2M5
Y2UzM2EwHhcNMjYxMDI3MjIwMTM0WhcNMjYxMDI4MjIwMTM0WjAzMTEwLwYDVQQD
EygwYjY2NzdmMDI1YmQ3ODk0MGUzNjk5ZmFlNjFlOTA5YzNjMzc5YTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7+SVqtp2ZZmwpv3zn3Sy77LcM7au
SCoEzJ5VCM6584EmwVyBhQUTMHGtpRbxxoA/lUvaPzSyvFdY+sneydB7KYZONGP4
fOzLC0s/f06wv1YA+FYSVxYZJkCVSrWZm8CB4Pf+vRmqXjt2OaqRYsLOqPTXYra+
lrxoBmkhZ6wphkEalTkKvG67soNnBOj6DNQP9lF+06GrKZwvbCmAzC8YVIUeKgY+
sTPs4jibD3VEE776JTvtV5ttxYTOJjBNWTZah7J50qstS7RSa4DkB2qsYNf97TYD
zyrL7/ieBcTi+DlvKEjrczujqyOCcDV5witV2WthI84RLKXjCRomsLlLBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtmd/AlvXiUDjaZ+uYekJw8N5p9MB8GA1UdIwQY
MBaAFD0/h7t/eHSqfhXP7Ju/aq48nOM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MTAxNWEtMTFiZS00NzFlLTk1OTIt
NjJiZTUzNDI1Njc2LzEvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC83MTAxNWEtMTFiZS00NzFlLTk1OTItNjJiZTUzNDI1Njc2
LzEvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE5HjDnoI
EGaFb7zWLQMIiyZi8+ipvoK1pLEjDkcK3jL38H9jnJC/bppWDowqDyAgjXZu7YUS
ZvY3D2REw8MZIPWIhqgamFpk7X9CjY5t7Q1JNb2c2mkig7KwcdVvBXgRUCMTjSJ6
D+eb0oIdfbUO9nyv1l7TsOW+3qYvYgtpYTooxqx+fDHE4SFfgMIbYzPtV4oirlVh
0t9jR/m5FBQJrjSenOKQfSM6C48c/tJpN7ZlgH4SRsq+cFoHY/tl7A81lY25PXa+
0dJOuqkSVRCdtNKE5VnFpG5eHfO3jylNcrTONXsN35foQx9j00GJ0ownjIaSJF9e
E5Ss8808WSE/Lg==
-----END CERTIFICATE-----
Generated at Wed Oct 28 03:53:16 2026 by rpki-client