Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
File: PD9FAh1us0CkKy5d0fv3IaGmbWE.mft (raw, json)
Hash identifier: CI/BCDEPtdyW3uMweQyHTSO8X3qv5+hUCRTe1seX9P4=
Subject key identifier: 3D:EA:2D:14:73:EF:A1:28:8A:8A:AC:10:68:53:39:A0:23:9A:EC:F9
Authority key identifier: 3C:3F:45:02:1D:6E:B3:40:A4:2B:2E:5D:D1:FB:F7:21:A1:A6:6D:61
Certificate issuer: /CN=3c3f45021d6eb340a42b2e5dd1fbf721a1a66d61
Certificate serial: 01A08C0D344930E6A2A1081B573FEE5B4FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
Manifest number: 112F
Signing time: Thu 10 Sep 2026 16:01:10 +0000
Manifest this update: Thu 10 Sep 2026 16:01:10 +0000
Manifest next update: Fri 11 Sep 2026 16:01:10 +0000
Files and hashes: 1: KuWWtknOGKLAtEUJQ2qfl_jNlmg.roa (hash: W5TqBGi3Id1AxwKzwqUslwR28wws2MIYj5VeG6wq05Q=)
2: PD9FAh1us0CkKy5d0fv3IaGmbWE.crl (hash: 2JG/ZdaL2+3KxMK6osv8TFbdyXX02muScU5YAdT1pqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:34:49:30:e6:a2:a1:08:1b:57:3f:ee:5b:4f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c3f45021d6eb340a42b2e5dd1fbf721a1a66d61
Validity
Not Before: Sep 10 16:01:10 2026 GMT
Not After : Sep 11 16:01:10 2026 GMT
Subject: CN=3dea2d1473efa1288a8aac10685339a0239aecf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c9:84:dc:6c:dc:cc:7e:12:a4:7b:57:60:8b:
65:77:28:21:c4:a7:74:65:9c:5e:46:ab:4e:98:b3:
ab:2c:6b:b7:7c:dc:6a:fa:7a:9d:ba:2b:d8:c9:7a:
4b:31:05:c5:3c:de:2b:de:ae:13:d3:b9:58:de:6a:
a3:de:14:45:1f:5f:a1:0a:d7:5a:ec:17:46:b9:df:
b5:ef:42:db:4c:4f:3e:12:42:56:9e:f5:8e:c9:1b:
ce:a7:35:76:fd:af:4d:e6:5e:9a:9b:c5:c6:68:8b:
39:f9:5e:55:03:6b:3b:d8:ae:5f:12:4e:0a:0d:22:
68:66:4e:f7:67:1c:95:5f:70:9a:30:79:af:b3:c0:
93:80:2d:1c:ba:72:20:c5:60:73:07:37:f4:cd:cc:
6c:69:7e:dd:c3:58:16:71:a1:64:ec:23:2f:c9:50:
9b:d4:8c:e4:47:5d:a6:ec:4d:54:99:80:ad:7b:0a:
aa:82:97:fc:ea:d9:79:8b:42:8c:0e:d4:8c:e5:23:
e8:d8:74:d9:05:ae:d1:1f:a5:44:c9:cd:0d:68:a9:
4e:34:b0:19:22:5c:a5:0d:e3:a1:ed:0d:0d:93:2a:
71:87:5a:78:58:fb:89:1d:9f:26:a8:1d:ba:0d:d5:
49:43:af:49:1c:62:d1:97:29:9d:de:7a:1f:51:28:
0c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EA:2D:14:73:EF:A1:28:8A:8A:AC:10:68:53:39:A0:23:9A:EC:F9
X509v3 Authority Key Identifier:
keyid:3C:3F:45:02:1D:6E:B3:40:A4:2B:2E:5D:D1:FB:F7:21:A1:A6:6D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:2b:05:6f:91:69:7e:19:7e:9f:f1:61:fe:ff:cd:2e:3c:a7:
ad:45:a0:f4:a0:79:79:b9:6c:dd:1f:77:47:f9:62:8b:74:7f:
35:13:7c:f0:ba:27:d5:79:05:74:d6:74:b7:c4:b0:29:2e:1a:
c9:e8:f4:39:c4:fe:da:c7:55:46:c2:07:11:e0:07:f8:68:f5:
27:23:ec:15:7f:e5:62:75:45:1a:c9:f9:de:f0:58:09:78:b0:
31:3e:a6:d2:43:91:c7:e2:95:28:13:d4:7b:c1:04:e9:d3:47:
8e:0d:8f:bf:e6:ff:e5:5b:3f:11:c4:44:39:49:80:f0:7d:19:
74:ea:3f:a5:70:48:55:8c:8c:14:26:e9:88:0d:c4:3f:2b:21:
4d:b4:ba:81:96:f0:3a:aa:fb:76:c7:30:e0:31:c4:85:9c:b9:
bb:f9:e7:30:fe:68:b7:5b:77:c1:cc:4c:f8:a5:59:66:e7:68:
61:ad:c1:a1:a6:ca:ce:35:df:ca:1c:ad:db:77:b7:0c:8a:7f:
f2:84:1e:b2:06:53:6b:b7:00:42:00:54:09:76:35:75:3c:ee:
07:ef:4c:05:43:22:6d:ba:fb:26:b7:64:94:5a:c5:cf:34:f7:
f0:ef:69:d5:cd:85:5d:79:8d:9d:52:7e:a5:32:08:bd:25:e2:
24:96:70:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:23:45 2026 by rpki-client