
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
File: PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft (raw, json)
Hash identifier: qtim9AIyTSBiTYSvs8Bx4ZwOH9jeboRrmptUmUTDTF4=
Subject key identifier: 46:28:08:57:90:BF:AA:74:59:2A:F7:86:F0:24:1F:0F:3D:26:F4:68
Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
Certificate issuer: /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Certificate serial: 01A0867899411F56D7976C53D4968C9B85A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
Manifest number: 1486
Signing time: Wed 09 Sep 2026 14:00:45 +0000
Manifest this update: Wed 09 Sep 2026 14:00:45 +0000
Manifest next update: Thu 10 Sep 2026 14:00:45 +0000
Files and hashes: 1: Owu-o7JvEybmXtpQNjtKXjhH9ug.roa (hash: 89sGeUxvhpVypElkHwSDvmrZnRJHBtaKeL9yMz7nC6U=)
2: PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl (hash: FKtJuNeMqLIUVaZmydy8gYsjspARf0OYH24qWci9ZOI=)
3: _b_jh41DtvYlyJbVt2vmUxy_03c.roa (hash: Y4f7kKKKelGhsZykUm6x2Et6p6M+4yMQNJ8fkfC21Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:78:99:41:1f:56:d7:97:6c:53:d4:96:8c:9b:85:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Validity
Not Before: Sep 9 14:00:45 2026 GMT
Not After : Sep 10 14:00:45 2026 GMT
Subject: CN=4628085790bfaa74592af786f0241f0f3d26f468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:43:16:65:b2:ac:f4:52:9b:0a:b3:03:bf:c4:
50:4d:aa:d2:61:63:1a:91:8e:13:36:c3:81:e7:e9:
3c:db:1a:07:d0:3d:f1:25:38:02:c3:46:11:5f:2c:
8a:16:2b:f8:ff:10:db:0a:6f:47:39:82:cf:dc:d6:
ec:c8:35:a0:fd:c0:41:40:8f:5d:38:31:63:aa:7a:
79:71:3e:06:b4:00:9f:3c:fb:a4:88:7a:71:e8:bc:
93:0e:c8:2c:30:7e:20:e2:67:73:09:33:be:31:79:
62:70:db:68:05:ba:d6:70:e3:e9:57:59:e0:db:35:
25:45:dc:a3:b5:bb:4a:cd:2f:a0:9d:08:16:28:bd:
ac:ad:d2:2a:9b:ab:9c:eb:38:9c:46:72:8f:fe:f4:
62:7c:84:71:5a:0b:07:1f:08:33:06:56:95:eb:ec:
c8:ee:40:06:47:a1:56:48:ea:93:5a:90:91:cc:90:
f3:32:79:ff:41:15:70:fa:d7:ce:8d:fe:d9:66:2e:
3b:3b:7f:c5:48:15:df:15:c3:92:1a:9c:c4:87:c1:
e6:5b:c0:f6:5b:eb:82:15:5a:ce:12:14:ad:02:42:
97:7f:43:15:ac:de:0f:02:96:e8:9f:66:0d:9f:ae:
7f:73:1e:f6:b6:c6:28:5c:55:05:c4:ce:46:c2:63:
e8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:28:08:57:90:BF:AA:74:59:2A:F7:86:F0:24:1F:0F:3D:26:F4:68
X509v3 Authority Key Identifier:
keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ea:77:10:94:9d:0a:b6:51:da:c5:90:1e:52:bf:34:e2:d6:
b7:9c:6f:d3:49:5d:6d:23:4d:11:52:96:54:58:d2:21:88:72:
9b:7c:b5:d1:0d:08:dc:ce:c9:04:1d:a5:ee:a4:7e:aa:8f:85:
d1:45:09:75:0a:cd:95:07:59:5a:f2:73:e6:cc:70:1c:28:e5:
f1:74:fe:85:a7:dc:1b:39:da:99:2e:b6:c9:42:72:e5:d9:94:
b6:01:c6:41:c0:61:7b:f9:b8:05:e2:13:0b:7d:03:ca:5c:4b:
3a:f5:33:2f:dc:8d:84:d2:23:f9:3e:ab:07:fa:21:92:a9:8c:
7b:44:21:dd:8a:e2:57:b0:55:ae:10:45:6e:1d:b3:14:ae:ed:
4e:48:df:77:8c:b8:aa:f5:d3:7a:cd:0b:e4:1b:d0:b6:fc:bb:
a9:fc:ca:30:e4:f3:cd:77:d2:f0:31:f0:cd:85:72:34:35:d4:
09:2e:0a:86:d2:06:bd:59:16:bc:03:35:94:f2:dd:3f:f9:d8:
4d:93:fe:24:50:dd:dd:15:5e:dd:17:0d:06:49:09:56:18:2c:
54:75:21:f3:9a:aa:d1:ff:42:65:66:89:ba:83:e5:48:35:19:
03:6c:5b:70:21:47:66:54:03:ea:ea:12:ca:83:56:ff:0f:19:
82:6d:f8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 17:22:38 2026 by rpki-client