Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
File: PNKqcak6qcEye3NTigR45PeC9vc.mft (raw, json)
Hash identifier: 2Q7UX4ToT2/rH9SOcubOlhj7vZzORo4Swr7/1hkDLlM=
Subject key identifier: E6:89:E0:65:FF:AF:B7:91:26:A7:58:A3:E6:EA:E8:CE:84:37:65:17
Authority key identifier: 3C:D2:AA:71:A9:3A:A9:C1:32:7B:73:53:8A:04:78:E4:F7:82:F6:F7
Certificate issuer: /CN=3cd2aa71a93aa9c1327b73538a0478e4f782f6f7
Certificate serial: 019FF346441A7B968CBE82B064B0714F642A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
Manifest number: 1173
Signing time: Wed 12 Aug 2026 00:01:36 +0000
Manifest this update: Wed 12 Aug 2026 00:01:36 +0000
Manifest next update: Thu 13 Aug 2026 00:01:36 +0000
Files and hashes: 1: PNKqcak6qcEye3NTigR45PeC9vc.crl (hash: g8rYKvSA5L9qe6C8p+Q+gDbWOn89+mA8RQl2G4pvkvk=)
2: uW_Gdpnt7OwD3cAseMegdu6xN8M.roa (hash: 3VkXuruUsY9wPEkXG/tiCZgs9rIhDAAbcoWQ4X0SwBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Aug 2026 21:32:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f3:46:44:1a:7b:96:8c:be:82:b0:64:b0:71:4f:64:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd2aa71a93aa9c1327b73538a0478e4f782f6f7
Validity
Not Before: Aug 12 00:01:36 2026 GMT
Not After : Aug 13 00:01:36 2026 GMT
Subject: CN=e689e065ffafb79126a758a3e6eae8ce84376517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6b:80:60:9e:92:70:49:7f:b6:f7:80:3b:5b:
d2:69:5c:4d:2f:b7:90:0c:06:be:44:a8:c4:9d:08:
d0:dc:59:3e:d5:6c:47:b4:cf:b8:c5:38:a5:12:ac:
9b:1e:51:18:25:47:e1:7e:b9:f5:be:e2:4d:19:fe:
1f:82:97:37:05:44:9c:0a:91:c5:aa:1f:5d:b0:a7:
0a:4b:e5:22:18:14:a8:b5:15:05:df:82:14:e9:36:
33:b4:0a:ab:d1:fc:1e:6c:6e:2a:b9:9c:a2:d3:e2:
d3:63:da:d7:9d:cf:22:65:4e:21:0e:a6:6b:23:f3:
69:58:4f:29:99:ab:f5:2f:68:63:0d:f7:ce:16:80:
65:f9:2e:f3:5c:8e:fe:d0:69:59:8d:a4:40:49:e9:
ba:93:a3:a8:83:9c:fb:6d:a0:d6:d3:ca:30:ba:b7:
fd:66:b0:42:f8:2d:e3:8b:31:10:c4:05:77:05:1b:
3f:48:23:3f:7b:ff:46:57:c7:60:b6:e0:00:20:6f:
cf:d2:43:ca:0d:99:f7:55:ed:72:82:06:52:56:27:
80:ec:79:7c:31:c9:7e:24:60:5f:fe:2a:82:86:99:
2b:9f:c7:c1:0e:11:68:55:b5:8f:a0:a0:4f:bd:84:
ca:48:7e:27:10:7b:96:e2:30:66:79:0f:93:5f:55:
12:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:89:E0:65:FF:AF:B7:91:26:A7:58:A3:E6:EA:E8:CE:84:37:65:17
X509v3 Authority Key Identifier:
keyid:3C:D2:AA:71:A9:3A:A9:C1:32:7B:73:53:8A:04:78:E4:F7:82:F6:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:4e:3d:7d:0b:c3:8f:ad:8b:32:87:6d:f9:b9:3d:58:ce:98:
34:0d:4c:7a:69:9f:dc:bf:77:66:e9:e7:fb:ee:74:75:c8:8b:
01:22:e9:d0:c4:92:0c:ac:9a:eb:48:4e:ee:08:97:8f:93:84:
fb:11:e1:ab:e1:03:0f:4c:c5:16:0c:65:ed:4e:a3:69:bf:94:
c6:74:9c:02:bf:db:1a:e0:98:d2:66:71:1c:57:fa:b1:a8:65:
b7:77:2f:f2:15:b7:53:4a:99:26:e7:bf:18:81:26:10:e1:17:
31:36:35:7f:89:2c:5f:c0:74:f8:ae:b1:56:66:cc:26:ef:3b:
eb:9f:b5:f9:c4:f7:16:2c:8c:f1:1a:e1:cd:9f:38:1a:67:07:
7f:81:e0:34:1b:a4:b8:cb:b5:af:56:48:d8:a8:54:b0:ad:31:
c2:72:77:02:b8:89:88:d4:74:f8:58:7d:2a:94:9a:ea:be:92:
a5:07:42:36:06:5d:1a:41:86:ef:24:a5:c7:a8:f1:31:6d:7f:
5d:7a:1e:cf:88:dc:04:47:9a:05:52:6e:fe:81:9b:9a:80:bb:
bd:c6:39:ed:c6:2b:01:5a:52:91:df:07:2b:c2:fb:dc:cd:86:
cd:d8:65:b2:e4:7e:10:f8:e3:ea:c8:c1:e1:3b:c2:96:8b:52:
6f:2e:0a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 05:11:13 2026 by rpki-client