Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
File: PnXUne0gVmynRcKPgM_ZqS9LfUc.mft (raw, json)
Hash identifier: kcZ84AFVB7FDxRV1QqtevZhF1EdDr9u3ZWZl+QlMSXk=
Subject key identifier: 60:B4:37:76:45:43:06:E2:55:1B:40:72:2C:00:E9:B0:D9:F4:95:45
Authority key identifier: 3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
Certificate issuer: /CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Certificate serial: 01A1871AC570A48357DC54AC323505C9C56E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
Manifest number: 1ACE
Signing time: Thu 29 Oct 2026 10:00:40 +0000
Manifest this update: Thu 29 Oct 2026 10:00:40 +0000
Manifest next update: Fri 30 Oct 2026 10:00:40 +0000
Files and hashes: 1: FOGBosGtZtXrIIBUEMbGPRMUnSM.roa (hash: 5uENltgcvqTpOLwVKmOle08cC/EenM/q/RZwRZFg1ZU=)
2: PnXUne0gVmynRcKPgM_ZqS9LfUc.crl (hash: Tk7PacAPdelPJw0/1Nd8JCt1XOucJwZdzGk3W/UVUZg=)
3: uYYAF2CgTPmwA1qAHQwLxmLvnnQ.roa (hash: iO1PoQ5KtnZAzQ3JC5Zi0gRiLIzhMEqyWnF2lTVAOrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:1a:c5:70:a4:83:57:dc:54:ac:32:35:05:c9:c5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Validity
Not Before: Oct 29 10:00:40 2026 GMT
Not After : Oct 30 10:00:40 2026 GMT
Subject: CN=60b43776454306e2551b40722c00e9b0d9f49545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7c:51:34:5d:ff:e4:f1:3f:50:3b:54:1c:3d:
87:c0:de:cf:b7:48:5f:35:fd:ff:61:1e:40:8b:b8:
55:f1:e4:79:be:3d:d6:4a:07:f8:c8:5e:91:3b:6b:
5e:9c:d9:26:df:db:75:af:14:8a:88:53:14:1c:1d:
d4:10:1a:59:d1:56:75:c3:94:30:97:a9:bb:73:65:
c8:fd:81:81:a8:0d:d9:6a:03:b3:68:57:6a:70:53:
a2:a0:2d:1d:5f:b4:91:e5:55:9c:af:49:41:1e:55:
4f:3f:89:3c:47:d7:4f:09:9e:c6:d4:df:1f:c4:8b:
31:b3:c7:fa:52:b7:65:dd:60:f2:d9:cf:15:34:ba:
d3:50:73:c3:ee:52:eb:37:48:e0:3c:45:9c:be:a5:
92:5a:11:02:4b:80:d5:50:fa:31:b4:e3:57:5a:b1:
a4:19:4d:54:0f:34:c2:03:4b:19:27:62:e7:21:24:
a5:92:4d:8f:aa:62:3f:64:6e:68:32:38:50:e4:88:
6a:1a:51:83:a0:92:ab:74:12:b9:69:70:90:60:41:
ed:5e:45:71:bd:8e:28:bc:82:4e:c2:5c:cd:43:b4:
25:07:9c:ee:fa:c6:43:2c:72:05:1c:92:1e:54:e4:
1f:7c:c5:06:32:ec:ce:58:19:6a:35:29:36:fd:53:
83:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B4:37:76:45:43:06:E2:55:1B:40:72:2C:00:E9:B0:D9:F4:95:45
X509v3 Authority Key Identifier:
keyid:3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ab:09:09:6a:5c:c2:8d:38:5c:69:7f:e6:3d:09:9c:f4:88:
b1:10:3c:56:77:8f:00:38:db:b6:bd:30:28:ff:e8:2f:f8:f1:
e6:a2:c2:5d:71:56:37:cc:ff:b9:a7:59:67:50:6e:a9:f5:95:
33:a7:86:0c:91:a4:79:bd:e2:98:1d:21:39:0b:30:e4:53:55:
46:ac:a7:4e:de:e4:74:d6:39:91:a3:79:0b:77:54:26:cf:49:
7b:87:21:f4:af:50:11:46:9e:cb:05:a7:c7:67:3d:5a:1f:3c:
67:51:86:db:c4:31:89:4e:a9:ae:47:e3:8d:a4:c3:87:b3:85:
5c:27:16:ab:a3:14:1e:06:e9:86:4b:16:6b:a4:d8:da:be:ff:
2e:80:30:15:fd:03:6a:d2:d1:f0:43:8e:ca:b2:9a:ea:1f:41:
a4:73:e7:01:04:88:55:41:ef:f5:d2:8c:ac:bf:d0:23:00:f3:
5c:87:b3:68:73:83:0f:cb:14:dc:aa:2f:e7:3a:12:39:88:41:
99:b0:65:ed:c2:08:1e:12:74:c8:9e:c6:21:bd:42:e8:8d:c9:
a2:85:fc:6d:9e:39:cb:9c:19:ac:ca:89:a5:69:b7:3c:d4:2a:
74:7c:13:ca:7e:00:b5:30:b1:a9:60:c0:09:a8:f7:35:9a:62:
c5:b7:55:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 18:11:56 2026 by rpki-client