Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft
File: Pn1HTATkiliTr3HDWnfN1oJv0zk.mft (raw, json)
Hash identifier: 6m87fWc4AN9qcbP8/xJi1PN4YW2q8Os8XROwKh4/V+0=
Subject key identifier: E6:9F:65:95:80:24:79:A2:08:AD:BD:95:FE:39:62:B8:85:25:A6:DF
Authority key identifier: 3E:7D:47:4C:04:E4:8A:58:93:AF:71:C3:5A:77:CD:D6:82:6F:D3:39
Certificate issuer: /CN=3e7d474c04e48a5893af71c35a77cdd6826fd339
Certificate serial: 01A1291EE72B1700CB2AB2342F5A00F17D12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pn1HTATkiliTr3HDWnfN1oJv0zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft
Manifest number: 0947
Signing time: Sun 11 Oct 2026 04:00:53 +0000
Manifest this update: Sun 11 Oct 2026 04:00:53 +0000
Manifest next update: Mon 12 Oct 2026 04:00:53 +0000
Files and hashes: 1: 59MC3zCDEqoB6qxXydRSjiwklTA.asa (hash: hvU4mJ/8GiJoU66ydLaONKkQ68qHgCJGT50x/0n4g2c=)
2: Pn1HTATkiliTr3HDWnfN1oJv0zk.crl (hash: AKZPuQrlQFQRnFB4GlzRYM0WKLkx9qcXXzHOa4zdO60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pn1HTATkiliTr3HDWnfN1oJv0zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:1e:e7:2b:17:00:cb:2a:b2:34:2f:5a:00:f1:7d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e7d474c04e48a5893af71c35a77cdd6826fd339
Validity
Not Before: Oct 11 04:00:53 2026 GMT
Not After : Oct 12 04:00:53 2026 GMT
Subject: CN=e69f6595802479a208adbd95fe3962b88525a6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d7:1f:04:34:ec:db:39:a6:88:48:7b:e8:ea:
af:d4:be:7e:c1:08:41:fd:32:8d:c1:4d:41:a0:f8:
9b:3d:94:0c:c3:a0:05:18:6c:b6:42:cc:7f:00:01:
6a:d2:b0:1a:c6:8a:3c:84:27:69:fc:84:de:be:6c:
fb:92:bb:dc:33:4e:a5:ae:bf:5c:81:9f:2d:48:4e:
9b:86:09:58:61:40:86:f1:97:6b:f4:9f:13:48:78:
af:89:d2:a8:f5:5a:5b:0a:9f:05:f4:9b:74:bf:e9:
34:d3:e2:75:8c:c7:34:d6:6f:e2:2f:18:c4:fb:92:
5b:35:fd:f5:e7:30:a8:67:06:20:5e:c1:8d:e2:e1:
5d:26:b9:c4:a6:7a:8e:58:8f:80:f1:12:dd:34:e2:
18:f4:c0:12:50:95:84:e4:fb:4c:a0:3f:55:bd:2d:
fc:f4:80:37:d9:e4:6d:a6:88:e1:9b:50:8e:c6:b5:
42:69:ea:63:01:db:59:2f:23:c6:b1:5d:67:ce:e5:
f7:2e:3c:81:78:e9:3c:24:76:15:30:1d:b4:e0:23:
1a:b3:56:6d:d7:cb:c8:aa:66:10:be:9c:0b:94:c2:
55:4f:c1:3a:77:d4:9d:1d:15:e1:8b:f0:69:09:5b:
d4:93:47:86:51:03:80:38:2e:60:a8:fd:af:78:7b:
bb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9F:65:95:80:24:79:A2:08:AD:BD:95:FE:39:62:B8:85:25:A6:DF
X509v3 Authority Key Identifier:
keyid:3E:7D:47:4C:04:E4:8A:58:93:AF:71:C3:5A:77:CD:D6:82:6F:D3:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pn1HTATkiliTr3HDWnfN1oJv0zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:ef:6c:6d:29:11:68:98:92:31:03:f1:7f:66:b4:18:71:57:
e4:4f:75:a8:b9:42:e0:02:c2:4f:d6:15:4e:e2:2d:19:fc:d8:
ed:5d:f9:ff:e8:dc:e4:c7:8b:ab:d1:5d:31:62:f5:44:dd:8c:
f7:83:8d:7e:30:1f:11:88:9f:21:f3:0f:de:28:ba:0b:17:8e:
bb:c3:c3:2a:43:12:0c:45:84:d9:52:b8:a1:8f:78:fc:27:00:
40:ec:f4:1e:db:ec:55:06:f4:4d:c8:fb:8b:28:fd:86:c4:ea:
23:74:55:e6:d3:fe:f4:4a:33:23:86:c0:92:6b:31:8a:fb:d1:
9f:a6:76:e3:3f:5f:4e:3a:f6:3f:f6:bf:8e:02:aa:3b:c1:93:
a1:9e:b7:7a:82:32:c9:d8:7c:b6:d1:00:a3:38:8e:e5:f4:33:
a2:66:d0:cd:23:27:b5:71:f5:b1:11:6e:03:93:30:61:5f:d4:
2f:3f:ce:7e:d4:9e:fd:c0:42:a7:64:a9:f5:0c:66:22:e8:ae:
d3:2e:bf:49:a4:ec:a6:58:42:a0:d7:05:62:12:d8:4a:b5:9b:
77:9d:18:b2:50:92:a0:4a:e1:07:24:79:4e:32:21:7e:e6:62:
49:87:dd:96:27:6b:79:bd:f2:8b:ef:cd:5d:0c:ff:ee:e7:8c:
7b:2a:f3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:48:47 2026 by rpki-client