Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
File: Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft (raw, json)
Hash identifier: Mk6SwDx/E5vcqWkbA+bYTzeZJ+9QxaM19Kcv5k8YB+Q=
Subject key identifier: 2C:91:6E:19:DF:A4:E8:82:31:1B:88:0D:97:FB:70:DB:36:7D:7B:49
Authority key identifier: 3E:78:2D:E1:B5:D5:29:2E:DD:13:6D:52:78:25:8C:67:B0:5B:E2:2A
Certificate issuer: /CN=3e782de1b5d5292edd136d5278258c67b05be22a
Certificate serial: 019D37F75D74655E40ED6C53CC9C44E22C47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pngt4bXVKS7dE21SeCWMZ7Bb4io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
Manifest number: 05D3
Signing time: Sun 29 Mar 2026 05:00:51 +0000
Manifest this update: Sun 29 Mar 2026 05:00:51 +0000
Manifest next update: Mon 30 Mar 2026 05:00:51 +0000
Files and hashes: 1: Pngt4bXVKS7dE21SeCWMZ7Bb4io.crl (hash: 7FgohIY0teuCgtHPfl6Gt2GEdkV2dN63bvt+PzvnQvs=)
2: pOmkV0LBKJ_ie5KpU_hqDCEs_2Y.roa (hash: e/l6l1w8wwwscO7GX3Bgn87Cuky5MgruYFfb1OM+CXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pngt4bXVKS7dE21SeCWMZ7Bb4io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:5d:74:65:5e:40:ed:6c:53:cc:9c:44:e2:2c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e782de1b5d5292edd136d5278258c67b05be22a
Validity
Not Before: Mar 29 05:00:51 2026 GMT
Not After : Mar 30 05:00:51 2026 GMT
Subject: CN=2c916e19dfa4e882311b880d97fb70db367d7b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:80:c9:c0:a7:be:47:c4:2b:84:99:26:a9:fe:
5c:c5:83:cf:42:c6:55:4f:5b:9c:31:14:6c:5f:48:
7f:b0:ee:7e:dd:32:0a:4d:46:2a:b1:86:bd:25:bb:
fe:ad:ce:77:b2:9c:11:4a:68:86:22:e6:80:21:22:
3f:b4:68:64:b8:f1:d5:4e:4e:5b:8a:92:ae:92:9a:
87:85:ea:67:68:29:05:ba:cf:41:da:b0:58:f2:f2:
e2:a5:a3:48:25:49:de:76:af:db:44:50:36:64:b1:
46:6d:12:52:c7:06:3f:40:fb:5f:12:3a:e8:c0:0b:
f8:34:86:a1:98:98:88:62:b1:96:12:94:f5:12:2b:
9a:f1:51:f1:ef:6f:3d:36:5e:60:1c:b8:a3:5b:35:
2d:cb:b8:cc:ae:a8:c2:5d:27:5e:d6:fc:53:7f:6c:
58:92:25:24:73:5e:92:00:22:64:0d:a5:f9:bd:c7:
a9:6b:33:49:06:63:91:19:6a:c6:62:4d:2c:a6:ce:
52:57:f8:cc:35:1e:9e:86:ca:98:f9:a9:d6:3f:88:
1d:28:3e:c5:b8:f8:17:e8:16:54:05:f1:cd:fb:61:
ef:56:b0:7e:46:a5:b7:7c:c5:d3:bf:8f:78:83:6d:
82:21:41:88:c9:98:df:66:12:32:98:98:d0:5f:bd:
57:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:91:6E:19:DF:A4:E8:82:31:1B:88:0D:97:FB:70:DB:36:7D:7B:49
X509v3 Authority Key Identifier:
keyid:3E:78:2D:E1:B5:D5:29:2E:DD:13:6D:52:78:25:8C:67:B0:5B:E2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pngt4bXVKS7dE21SeCWMZ7Bb4io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f1:c5:13:46:e5:85:e4:43:48:0f:d9:0d:16:16:59:06:60:
ab:3e:18:fb:60:93:0b:55:7f:7a:0c:ee:1e:52:b8:37:ca:84:
3c:7e:a4:f1:23:8f:58:46:55:c1:8c:9d:37:af:61:0c:3d:02:
ea:cb:a2:38:49:73:7a:51:4e:5f:bd:9c:3a:29:e9:e8:cd:2d:
80:3c:41:4c:a2:5d:97:5d:30:93:b1:c5:14:0f:91:80:ab:7a:
82:66:36:d5:6c:5f:28:d3:f8:7b:04:1b:d2:d2:63:1b:f1:72:
d4:e0:4a:96:f1:66:6e:4b:ff:09:38:30:44:5d:51:97:74:7a:
3a:62:8b:83:8a:08:12:7b:96:d0:ef:4f:6c:57:b2:05:99:b3:
4f:d1:8f:42:fa:ff:a6:ca:1e:56:c9:8b:ea:f2:4f:7f:10:89:
cc:38:21:7f:c0:84:13:c1:d4:ce:15:58:09:57:4d:f0:30:82:
8d:10:ee:fa:a3:89:b4:61:91:19:f4:e2:34:3d:86:67:d5:fb:
49:d7:ee:20:ee:bf:ca:66:8f:b7:7a:dc:9f:ac:1d:ed:bb:3f:
b7:f0:9f:fb:9c:78:ec:d5:3e:39:c1:ed:bd:fc:7f:69:b9:8b:
42:57:40:6e:a0:08:e2:81:6c:54:60:5b:1f:e8:54:87:c2:56:
2e:57:21:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:36 2026 by rpki-client