Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
File: PnXUne0gVmynRcKPgM_ZqS9LfUc.mft (raw, json)
Hash identifier: wriLrL/LYOILxQtwfQfLbp6lnRgVattHiVpbFs1lTco=
Subject key identifier: 81:BF:2B:A7:2F:B8:36:58:F0:10:26:6E:10:4B:62:D0:6D:33:A0:AF
Authority key identifier: 3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
Certificate issuer: /CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Certificate serial: 01A18AF7807C85BF10F7D871CFF42855D6C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
Manifest number: 1AD0
Signing time: Fri 30 Oct 2026 04:00:38 +0000
Manifest this update: Fri 30 Oct 2026 04:00:38 +0000
Manifest next update: Sat 31 Oct 2026 04:00:38 +0000
Files and hashes: 1: FOGBosGtZtXrIIBUEMbGPRMUnSM.roa (hash: 5uENltgcvqTpOLwVKmOle08cC/EenM/q/RZwRZFg1ZU=)
2: PnXUne0gVmynRcKPgM_ZqS9LfUc.crl (hash: vavwkzpC328YgIEG3yDlALtMrxDWL+H+nRQluc8VF6Q=)
3: uYYAF2CgTPmwA1qAHQwLxmLvnnQ.roa (hash: iO1PoQ5KtnZAzQ3JC5Zi0gRiLIzhMEqyWnF2lTVAOrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8a:f7:80:7c:85:bf:10:f7:d8:71:cf:f4:28:55:d6:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Validity
Not Before: Oct 30 04:00:38 2026 GMT
Not After : Oct 31 04:00:38 2026 GMT
Subject: CN=81bf2ba72fb83658f010266e104b62d06d33a0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:52:e9:d6:ff:87:1e:97:5d:91:85:6c:c3:89:
08:b9:97:0b:b0:c8:28:b1:83:56:3a:28:b1:21:43:
aa:ad:08:49:50:4b:b4:ca:a6:bf:63:79:77:f3:9d:
8b:9c:ab:71:b7:84:0a:3b:6a:77:25:ea:9a:08:a9:
b4:76:98:0f:81:6e:86:89:1d:fe:4d:64:5c:8b:0f:
bf:c7:84:f3:13:57:08:6d:6d:e1:64:f7:d9:02:d2:
01:c1:63:68:46:c9:ff:ba:f0:ac:de:89:dd:b2:86:
71:f6:b6:cf:43:3e:13:ee:b5:60:01:31:2b:ee:14:
78:c4:27:37:9c:ae:32:16:9b:ed:35:98:ad:66:23:
dd:70:21:e1:85:f4:2b:ae:fa:d8:a4:0b:f1:eb:c9:
db:b3:90:aa:cf:6c:0e:b2:a2:13:d4:9c:fe:7a:57:
8b:40:3e:46:72:78:89:c9:f5:66:65:5d:93:b2:1c:
ad:1e:f3:c9:5c:77:54:df:ad:88:18:7c:40:21:6b:
74:72:82:46:3d:57:28:f9:a8:9d:55:96:a4:3d:e7:
28:83:66:14:8e:70:11:c1:b9:2a:c7:98:9d:fc:16:
a7:52:51:a7:48:a7:89:0c:7e:2d:f3:36:1e:02:2e:
bb:97:28:a1:05:83:0b:ad:0a:d0:55:b6:4f:15:45:
67:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BF:2B:A7:2F:B8:36:58:F0:10:26:6E:10:4B:62:D0:6D:33:A0:AF
X509v3 Authority Key Identifier:
keyid:3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ad:5c:bb:d7:cb:e3:80:3e:cb:3f:1b:22:eb:79:fe:4b:12:
d9:35:39:00:a8:d5:f9:c3:72:c2:0a:76:e8:30:07:b0:0a:0f:
96:43:8b:e6:2c:c6:67:e4:74:e2:b8:d9:97:c9:54:38:0f:bd:
ce:a4:08:6d:f5:93:26:70:c3:b4:2e:0b:49:2f:5f:3c:bf:ed:
64:6a:2a:2d:68:0a:52:07:f4:59:71:3f:53:f4:d2:27:bb:9f:
07:c9:1f:65:81:58:c7:93:41:ad:2e:bb:87:ce:14:1a:63:83:
32:7d:69:c6:9e:f8:c2:d2:50:1b:8d:cd:b7:40:85:a3:e9:f5:
cf:2b:b3:95:c5:41:2f:88:1a:7d:81:90:a6:92:2f:3b:43:69:
7e:73:9e:71:28:f6:ef:26:6f:57:23:40:2c:4b:75:e8:4c:7b:
ce:df:06:0c:3c:63:7a:67:15:d5:d3:99:51:e4:11:0c:c8:9d:
05:26:b5:83:7d:4a:6c:53:10:54:4d:fd:a0:02:43:c3:de:26:
57:26:e6:21:a1:16:f8:46:66:10:29:03:a6:1f:41:44:21:0e:
79:d8:27:3b:a8:df:d7:e6:3f:af:20:90:6c:c5:05:fb:02:84:
84:2a:b5:0d:bd:ab:44:bd:a8:b9:42:19:3c:dc:79:2d:89:2b:
fa:3e:22:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:25:42 2026 by rpki-client