Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
File: PnXUne0gVmynRcKPgM_ZqS9LfUc.mft (raw, json)
Hash identifier: FowI4FiVcIatAIyj7P70OAKUCCGfQRtnJsRd/bWzYNw=
Subject key identifier: D1:07:5D:EE:00:2C:01:CB:90:B9:D1:35:6F:D0:6D:51:5C:9D:84:A3
Authority key identifier: 3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
Certificate issuer: /CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Certificate serial: 019EB8B430D898B02C6EFF2BDC5CF956784F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
Manifest number: 195A
Signing time: Thu 11 Jun 2026 22:01:17 +0000
Manifest this update: Thu 11 Jun 2026 22:01:17 +0000
Manifest next update: Fri 12 Jun 2026 22:01:17 +0000
Files and hashes: 1: FOGBosGtZtXrIIBUEMbGPRMUnSM.roa (hash: 5uENltgcvqTpOLwVKmOle08cC/EenM/q/RZwRZFg1ZU=)
2: PnXUne0gVmynRcKPgM_ZqS9LfUc.crl (hash: +QjFrrBHk6xGCw5m4fWXBkjHBhGQBjzhoz7KwmZB9hA=)
3: uYYAF2CgTPmwA1qAHQwLxmLvnnQ.roa (hash: iO1PoQ5KtnZAzQ3JC5Zi0gRiLIzhMEqyWnF2lTVAOrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:b4:30:d8:98:b0:2c:6e:ff:2b:dc:5c:f9:56:78:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Validity
Not Before: Jun 11 22:01:17 2026 GMT
Not After : Jun 12 22:01:17 2026 GMT
Subject: CN=d1075dee002c01cb90b9d1356fd06d515c9d84a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d9:55:0a:7b:53:91:7a:6f:e3:d8:d0:1f:9c:
fd:d9:36:12:70:74:61:0d:cc:7b:ce:2a:a0:63:8f:
db:75:06:b9:19:96:e7:55:85:71:b6:b7:18:2b:57:
f6:0e:ef:59:8b:59:a4:fe:ca:60:72:da:7f:e2:44:
ca:a4:4d:43:c4:08:84:dd:5f:ee:60:c4:e2:be:57:
f9:3a:30:be:34:36:48:f8:79:fc:33:48:e3:7f:cf:
4e:e7:df:17:5d:6b:d5:94:73:74:de:27:44:5c:fc:
59:e1:4e:20:fb:a2:79:ce:57:c9:af:32:f3:07:f7:
09:4f:cf:e2:01:aa:bc:d2:88:e7:aa:69:c9:c5:70:
9d:ab:8c:b4:87:8e:00:90:60:d4:13:64:4e:fd:ce:
f7:9a:51:76:e8:3d:58:c4:55:fa:ef:7a:06:da:bf:
2e:5b:ec:da:6f:64:07:19:47:f1:d7:68:1a:40:c2:
15:27:f7:b6:c7:0e:a3:ec:f4:0b:1f:3e:7a:7a:4a:
86:e0:c7:a0:19:16:2e:f3:2d:00:f7:8f:35:ce:c7:
d1:6b:4b:d2:d2:d4:12:85:56:2d:69:53:01:a5:79:
df:6e:84:c6:4e:4a:b9:f4:d9:f5:6b:e3:8b:37:f2:
91:1a:33:bd:0a:61:a2:55:37:96:e4:b6:ee:61:e3:
ca:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:07:5D:EE:00:2C:01:CB:90:B9:D1:35:6F:D0:6D:51:5C:9D:84:A3
X509v3 Authority Key Identifier:
keyid:3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:df:6c:19:69:ba:a0:b0:48:ea:03:37:9a:0a:e4:0b:e1:06:
fa:0e:fd:62:e6:73:f3:fd:50:b5:dd:b7:31:b4:5c:f4:e8:9c:
67:b2:eb:04:f7:c6:3b:b5:f2:94:3c:7b:67:c6:37:cc:f4:ec:
9c:a0:39:e3:41:39:45:2a:76:14:27:9f:ce:71:6f:87:c4:54:
e1:f1:49:69:27:8a:9e:74:3f:b5:9c:f7:41:61:f7:cf:78:25:
b9:f1:b1:ee:01:92:88:d5:09:0a:02:a6:d7:2c:98:05:83:2e:
7c:74:75:ce:02:92:58:a2:7a:20:63:56:39:2a:1e:b0:c9:a3:
90:7b:d7:d1:e3:73:94:44:d1:03:c3:d5:1a:0e:bd:26:af:ab:
57:96:49:3d:6e:94:89:2b:08:06:5a:20:c6:27:9d:28:37:80:
35:79:56:34:9f:f1:dc:a6:d4:f4:f0:76:af:c3:65:17:45:d0:
52:2e:b9:72:ed:53:e2:45:84:e6:da:30:38:ee:2f:c7:e7:2b:
a4:c2:68:eb:2a:2c:a3:ee:95:e9:7a:f3:f9:2a:c7:09:e7:88:
03:93:65:f1:db:d8:df:97:3a:d9:52:e2:8b:41:01:0b:33:9d:
75:33:50:5f:74:60:ed:ed:3c:2b:d1:3b:2a:b4:7e:7b:f6:c6:
29:34:56:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:40:49 2026 by rpki-client