Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
File: PnXUne0gVmynRcKPgM_ZqS9LfUc.mft (raw, json)
Hash identifier: c2xOF71xcPYP4Xd97qXNdUWAu+HDj2mjIYSyYiGAXEM=
Subject key identifier: 17:49:5E:34:08:EA:1A:E8:58:42:89:BE:32:EE:39:11:0F:B9:77:E8
Authority key identifier: 3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
Certificate issuer: /CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Certificate serial: 01A08C0CE30B8349AAB2723857DA854B1459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
Manifest number: 1A4C
Signing time: Thu 10 Sep 2026 16:00:49 +0000
Manifest this update: Thu 10 Sep 2026 16:00:49 +0000
Manifest next update: Fri 11 Sep 2026 16:00:49 +0000
Files and hashes: 1: FOGBosGtZtXrIIBUEMbGPRMUnSM.roa (hash: 5uENltgcvqTpOLwVKmOle08cC/EenM/q/RZwRZFg1ZU=)
2: PnXUne0gVmynRcKPgM_ZqS9LfUc.crl (hash: x0WOSQE+qVhbdk1f0MNrtGKBEkFoGOfwrItHIHFm0xo=)
3: uYYAF2CgTPmwA1qAHQwLxmLvnnQ.roa (hash: iO1PoQ5KtnZAzQ3JC5Zi0gRiLIzhMEqyWnF2lTVAOrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0c:e3:0b:83:49:aa:b2:72:38:57:da:85:4b:14:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Validity
Not Before: Sep 10 16:00:49 2026 GMT
Not After : Sep 11 16:00:49 2026 GMT
Subject: CN=17495e3408ea1ae8584289be32ee39110fb977e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:63:16:4e:1a:12:00:51:9a:24:60:48:cd:b7:
2b:b8:cd:d9:66:9b:23:a3:70:92:72:cc:c2:19:12:
22:eb:3d:dd:36:f1:65:0d:82:b0:d6:d5:5b:bd:e2:
d3:5c:25:e0:b2:e2:32:0f:9e:96:1f:77:51:0b:c5:
e7:da:fd:09:d4:1a:a9:b4:1b:f8:38:37:3f:7f:b3:
b8:4c:d0:78:6d:51:7a:17:46:fd:d6:3d:09:8e:ec:
3a:32:53:12:e0:c5:05:d3:f8:fa:e5:04:ee:37:6f:
79:23:c7:83:87:9e:b3:b3:33:c4:6b:41:59:2e:a9:
7b:4e:6f:74:bf:ce:74:97:96:68:3d:ed:57:8a:2c:
a8:fc:d5:6b:ed:12:56:e6:4f:44:2f:1d:35:99:5f:
e6:a1:9b:77:6e:e4:f7:e3:6d:71:43:b4:28:86:6d:
a5:a2:74:52:da:54:69:ea:66:0b:84:2c:cf:c5:94:
09:94:47:f8:1f:69:29:ba:cf:c5:1a:d4:a9:7c:c2:
2e:3b:48:de:90:b0:b2:b3:80:96:70:19:11:bd:f8:
8a:89:ba:5b:ee:72:8a:23:be:60:24:fc:39:bb:7b:
7e:97:52:48:af:90:7b:d4:8f:c3:a5:69:78:f3:a8:
54:87:46:71:04:57:79:ee:e6:ba:f2:e9:a1:ce:58:
99:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:49:5E:34:08:EA:1A:E8:58:42:89:BE:32:EE:39:11:0F:B9:77:E8
X509v3 Authority Key Identifier:
keyid:3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:dc:7e:1c:69:48:29:3a:84:3c:8e:f8:d9:e6:0e:c6:67:61:
5e:61:01:bc:ae:5d:a2:00:b1:76:26:3c:60:21:c3:06:2d:ab:
98:16:aa:1e:b5:a3:3a:2c:82:f5:8d:10:c8:73:fc:56:e5:ba:
b8:36:62:d8:bb:5f:33:4c:8c:7a:04:d5:dd:1e:5d:3e:e6:4d:
43:97:50:c9:13:60:a1:43:b0:65:ed:4c:93:9e:4e:2c:0b:87:
96:b5:76:3c:e7:c7:38:11:8b:d2:bb:fb:1e:dc:7b:65:d1:4d:
d8:bc:1d:c0:0c:57:04:0b:b4:5f:b3:18:d0:b2:ea:70:89:d8:
f0:dd:af:97:86:9b:25:b8:84:b3:f2:fd:b2:8b:02:76:b1:ad:
77:87:0d:63:72:70:d8:95:a6:96:cc:f3:61:46:de:d5:6f:d0:
90:e8:57:f5:48:3a:1f:3e:87:32:b9:85:8c:a5:0e:33:aa:5e:
17:98:53:29:3d:2f:fd:02:07:26:62:03:aa:a3:b6:29:d6:1f:
21:69:a3:41:ae:44:ab:00:f9:d9:a3:bb:ca:09:a7:e2:52:88:
a7:74:b7:32:ea:a2:74:cc:20:07:8a:fb:17:15:54:a3:6e:08:
03:2d:6d:1b:cb:c7:7c:0a:cb:6d:4f:11:4e:9e:a0:55:58:8d:
f3:6e:4f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:13:55 2026 by rpki-client