Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
File: PnXUne0gVmynRcKPgM_ZqS9LfUc.mft (raw, json)
Hash identifier: GIlw5ir4OIMeylVXSGv3OaOF8p0ad+rBAQ2QxVyp9HE=
Subject key identifier: DD:97:0D:98:26:40:84:D9:A6:F2:95:EC:E1:62:FC:FB:A2:28:8E:8E
Authority key identifier: 3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
Certificate issuer: /CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Certificate serial: 019CE36CBA5ACDE87CC92483C5BBD7E0C0D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
Manifest number: 1866
Signing time: Thu 12 Mar 2026 19:01:19 +0000
Manifest this update: Thu 12 Mar 2026 19:01:19 +0000
Manifest next update: Fri 13 Mar 2026 19:01:19 +0000
Files and hashes: 1: DaMOJU-jBrrr4RoMTTYusmitb4Y.roa (hash: JaWn7XzXCxX7Vb9+fDuk+/iiSPUdUFQByfCjt0a4ezU=)
2: Gzc5BxD8yLe_aSYEhdH7qxC53Bk.roa (hash: K0PmYBi2jbuDcvq/ABfyge5LDH1NQzitSjirHjoyzGI=)
3: PnXUne0gVmynRcKPgM_ZqS9LfUc.crl (hash: crKBCLTYLlMXF+QQxULS9q1QeZAFxq5rtcQr1D06wWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 19:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:6c:ba:5a:cd:e8:7c:c9:24:83:c5:bb:d7:e0:c0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Validity
Not Before: Mar 12 19:01:19 2026 GMT
Not After : Mar 13 19:01:19 2026 GMT
Subject: CN=dd970d98264084d9a6f295ece162fcfba2288e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ae:e9:20:1a:2c:a4:a5:f4:2b:11:1b:1f:6f:
10:31:3d:7f:68:91:fb:40:d6:d1:cb:de:06:26:61:
a4:d1:ba:7e:43:21:79:a7:39:75:9c:b1:9c:8c:29:
20:09:27:c7:f9:fc:48:ee:76:b7:a3:68:a8:3d:c0:
50:de:bb:75:b0:59:f1:7b:a3:42:88:fc:39:ef:a1:
1f:18:eb:27:07:a3:77:b8:06:5d:40:e9:bf:50:9d:
e7:e6:05:d1:df:7d:24:5c:99:2f:b9:54:dc:d8:ea:
11:d1:40:f5:78:d9:e4:63:70:c8:c1:f8:0e:d5:64:
a4:17:63:f4:46:da:c3:b9:61:c2:64:d4:15:11:e8:
6d:76:10:6e:ac:8f:73:00:60:aa:b3:79:07:99:5c:
98:2d:b1:ec:22:6e:8b:73:10:31:9f:a4:c7:bc:05:
21:6b:96:b3:df:1d:e8:b4:ec:ec:d3:52:df:8d:b8:
a6:b4:6d:96:d2:4b:77:ce:f9:87:ec:24:4b:ab:8c:
8a:a3:aa:5f:9e:cb:56:d0:3b:53:70:f5:68:bf:c9:
ac:31:b6:92:96:82:2e:67:e0:e2:b4:1a:56:77:21:
ff:8c:ee:f8:6b:7e:5d:fd:03:2a:42:dc:f8:72:1f:
cc:bd:0d:e4:a8:0e:fb:17:53:a8:81:08:1e:db:c9:
f3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:97:0D:98:26:40:84:D9:A6:F2:95:EC:E1:62:FC:FB:A2:28:8E:8E
X509v3 Authority Key Identifier:
keyid:3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:3f:d5:04:f9:30:b9:03:a7:c1:3d:bd:74:ba:d6:46:16:ff:
e6:90:3d:bb:79:60:f5:c5:3e:33:64:59:fe:13:e0:fc:b0:3d:
be:ad:ac:3b:7d:45:9b:22:84:a7:ff:58:3c:73:d2:e5:20:4a:
2f:e3:dc:89:29:cc:f9:85:69:57:43:93:6e:29:95:fa:69:29:
bc:15:9e:e1:c1:a1:d7:91:c3:cc:fb:28:a3:92:bc:85:df:67:
bf:f3:43:94:c2:a4:ed:51:bb:c0:fb:f8:ea:a6:f9:3d:c7:cf:
e7:ed:75:5a:03:ac:99:68:f4:db:71:5f:a1:60:18:db:74:55:
5f:d8:e2:87:56:ac:fd:9a:46:cd:6a:d2:66:b6:53:c6:06:61:
d6:62:31:0a:0a:a4:c0:b0:7a:e8:7b:31:7e:fb:95:40:22:2a:
52:34:17:ce:ad:7c:1a:97:32:6c:fc:fa:18:e0:7a:ac:f6:9a:
d2:54:7e:c6:ac:b5:46:da:83:9e:b1:aa:ab:4d:60:c8:41:67:
9b:94:e8:ea:8c:f4:76:c2:ce:3a:a2:64:a8:be:71:53:6a:c4:
80:38:dd:a3:ac:d7:4f:e2:3f:7e:4f:ea:22:26:aa:7a:e3:34:
89:24:a0:fa:3e:3d:20:7a:e0:cd:74:08:3e:c4:60:8e:97:c3:
66:5f:6f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:32:02 2026 by rpki-client