Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
File: PnXUne0gVmynRcKPgM_ZqS9LfUc.mft (raw, json)
Hash identifier: erMXvKAWoPU6VCU57uLaccC6yiQSi15kfAO0o/uHWH0=
Subject key identifier: 90:09:CC:A2:56:0F:71:55:9A:D3:9A:D3:8F:11:D1:EA:D3:6B:47:08
Authority key identifier: 3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
Certificate issuer: /CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Certificate serial: 01A08A1EEC574536C20C057571D74B82803C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
Manifest number: 1A4B
Signing time: Thu 10 Sep 2026 07:01:17 +0000
Manifest this update: Thu 10 Sep 2026 07:01:17 +0000
Manifest next update: Fri 11 Sep 2026 07:01:17 +0000
Files and hashes: 1: FOGBosGtZtXrIIBUEMbGPRMUnSM.roa (hash: 5uENltgcvqTpOLwVKmOle08cC/EenM/q/RZwRZFg1ZU=)
2: PnXUne0gVmynRcKPgM_ZqS9LfUc.crl (hash: kZXZaQlifkfqxkCRYbilXfuXyJ9MunX8HBCcooTAlEY=)
3: uYYAF2CgTPmwA1qAHQwLxmLvnnQ.roa (hash: iO1PoQ5KtnZAzQ3JC5Zi0gRiLIzhMEqyWnF2lTVAOrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:1e:ec:57:45:36:c2:0c:05:75:71:d7:4b:82:80:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Validity
Not Before: Sep 10 07:01:17 2026 GMT
Not After : Sep 11 07:01:17 2026 GMT
Subject: CN=9009cca2560f71559ad39ad38f11d1ead36b4708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ae:dc:56:8e:f0:89:25:f1:ce:d0:48:3c:75:
81:d4:f4:86:17:fd:c0:4f:93:7d:9a:81:28:8a:42:
d5:47:3f:fd:ce:03:d6:9a:2f:5c:67:90:c6:9e:e6:
97:c7:4f:64:40:4f:65:ab:57:7f:fa:2e:47:73:b9:
e4:26:dd:55:6e:ce:ab:11:4e:e1:0a:4a:8d:cf:b2:
9f:fa:f5:41:2f:1e:2c:b0:1e:be:93:b6:9c:22:5f:
13:96:4f:49:1d:f4:8e:4d:07:e6:3d:63:98:39:7c:
55:1e:65:80:df:c8:60:a5:6d:c0:84:bc:d9:fc:2b:
08:48:3a:ef:34:2a:89:a6:0e:88:f2:08:ca:19:2d:
1a:b8:7f:32:4a:16:1d:ca:02:ba:40:43:6e:fc:f5:
bf:da:14:f1:4a:31:8a:3a:5d:b3:d9:84:89:b7:8e:
af:25:b3:3d:5d:07:be:f7:4e:b6:ec:32:bc:55:d2:
ed:e1:76:50:b2:46:b1:6d:98:26:ed:7e:8c:78:b4:
e0:c3:fe:3c:3c:53:5a:53:f0:da:13:cd:35:27:67:
3f:a0:27:4f:75:31:b4:86:3d:57:da:9f:57:70:26:
d0:d3:9b:06:0b:69:f4:81:61:27:4a:0b:0f:c8:07:
12:ae:1e:98:67:9c:fe:25:fb:34:b5:e7:5c:b9:cb:
73:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:09:CC:A2:56:0F:71:55:9A:D3:9A:D3:8F:11:D1:EA:D3:6B:47:08
X509v3 Authority Key Identifier:
keyid:3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:de:f2:30:e6:1d:a3:67:87:33:24:c3:73:b8:df:cc:78:2b:
49:ab:86:8c:86:3b:da:74:1a:72:8c:08:50:ea:8e:41:a7:49:
42:a3:33:17:cd:c0:e4:68:94:a2:30:7a:9a:c4:23:f5:27:11:
3e:4d:bb:02:95:c1:13:b5:fd:45:5d:46:95:c1:3f:39:07:87:
db:24:17:e7:a1:31:8e:2b:0b:80:ed:da:bb:4e:4f:07:8c:ca:
a5:ef:53:07:bc:c1:05:44:38:00:dc:d7:ef:3a:98:8e:4e:22:
6a:a7:0b:6c:bd:72:b1:c1:88:e9:34:db:d6:c3:10:b3:f6:e2:
71:b8:c1:a7:a6:57:84:c0:9f:0b:c5:1f:d1:b7:6d:3b:90:2b:
ea:57:39:8f:fb:e8:f2:f4:9d:79:3d:55:7c:ab:48:59:96:f8:
1e:d7:b0:39:2c:8a:a8:af:f7:a8:d4:95:77:ff:a4:aa:88:6d:
eb:ac:f9:49:d5:1b:9e:ee:42:99:03:6a:26:54:4b:f0:a2:91:
57:89:67:05:37:5a:52:35:0a:2c:b7:e8:8e:25:19:21:79:af:
07:aa:e9:af:fa:0c:fa:51:ae:c7:d2:78:ed:77:d5:b2:bc:44:
bc:38:0c:fd:b5:51:67:e2:e1:57:b8:d0:7e:b0:5a:e3:bd:9a:
05:5a:84:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:32:58 2026 by rpki-client