Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
File: PD9FAh1us0CkKy5d0fv3IaGmbWE.mft (raw, json)
Hash identifier: eLVvGN1eFO6iRMt4B0g5+voqM5DD88ZhBUL2nw/BbpE=
Subject key identifier: BD:3F:B6:49:40:B3:7A:89:F1:9A:F6:D8:8A:8E:F7:81:B1:D4:43:F6
Authority key identifier: 3C:3F:45:02:1D:6E:B3:40:A4:2B:2E:5D:D1:FB:F7:21:A1:A6:6D:61
Certificate issuer: /CN=3c3f45021d6eb340a42b2e5dd1fbf721a1a66d61
Certificate serial: 019EE70D0E10C10EAA75E11462E3E2CE1BA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
Manifest number: 1055
Signing time: Sat 20 Jun 2026 22:00:52 +0000
Manifest this update: Sat 20 Jun 2026 22:00:52 +0000
Manifest next update: Sun 21 Jun 2026 22:00:52 +0000
Files and hashes: 1: KuWWtknOGKLAtEUJQ2qfl_jNlmg.roa (hash: W5TqBGi3Id1AxwKzwqUslwR28wws2MIYj5VeG6wq05Q=)
2: PD9FAh1us0CkKy5d0fv3IaGmbWE.crl (hash: jQY0AZ/txI2tlhiUL0+slUsYB0pYA5GDx2EQfA93xUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 21:52:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e7:0d:0e:10:c1:0e:aa:75:e1:14:62:e3:e2:ce:1b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c3f45021d6eb340a42b2e5dd1fbf721a1a66d61
Validity
Not Before: Jun 20 22:00:52 2026 GMT
Not After : Jun 21 22:00:52 2026 GMT
Subject: CN=bd3fb64940b37a89f19af6d88a8ef781b1d443f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:12:95:fd:6d:45:7d:c8:95:21:b4:e1:9d:96:
25:bf:1c:d4:02:dd:e5:46:41:82:3e:e8:01:cd:d7:
66:92:60:6e:b1:58:06:9c:3d:91:8c:9a:d4:cb:e7:
1e:ae:d2:8f:d7:db:0a:2d:df:b0:28:ac:a4:ef:08:
2f:d8:18:a5:3c:e3:9d:b7:92:0e:e8:54:f3:f0:86:
cc:af:1b:9a:5b:db:88:3a:43:d6:39:33:42:20:d4:
be:b0:56:86:7e:71:66:60:7a:d1:4d:9d:60:d5:4f:
32:47:8a:43:0d:0a:af:80:39:26:02:8c:cb:e8:fb:
2f:74:3c:ee:c5:18:23:e3:1b:bc:d7:38:fb:05:a0:
8f:9d:32:80:05:15:c4:0e:3e:2b:7a:03:45:32:c5:
21:b6:8f:25:db:34:40:c9:d6:e2:9f:34:d3:b2:ec:
52:57:ec:45:90:9b:dc:64:60:51:62:f1:62:11:43:
dd:69:f9:02:88:c1:54:f8:95:90:0e:11:32:a9:ef:
30:1c:e8:3b:fd:7b:04:84:33:77:39:e8:9a:32:98:
c4:36:4c:fc:b8:4a:13:d4:67:b1:d3:ac:13:8e:fe:
d8:46:80:82:33:19:5c:3a:65:1d:54:59:5c:ba:b6:
8b:7a:f2:ec:da:f7:23:a6:98:43:2f:f4:28:d6:57:
44:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3F:B6:49:40:B3:7A:89:F1:9A:F6:D8:8A:8E:F7:81:B1:D4:43:F6
X509v3 Authority Key Identifier:
keyid:3C:3F:45:02:1D:6E:B3:40:A4:2B:2E:5D:D1:FB:F7:21:A1:A6:6D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:dd:1e:95:57:8e:7b:27:a4:5b:80:28:0d:c3:04:a8:d3:5b:
f3:5c:11:c0:96:f1:63:22:c4:ca:df:46:84:53:dc:4e:6b:2f:
46:6c:77:e5:03:9d:98:9b:f8:93:e4:5b:92:c1:44:ce:c9:d2:
72:1e:da:e0:3f:9e:cc:d4:d8:67:45:9b:8d:ec:cd:4a:43:94:
4a:fc:a8:6d:3a:fc:19:64:73:06:8c:01:b8:73:f6:6b:bb:00:
94:b8:38:99:6d:1f:5b:9e:b6:2e:e2:7f:37:87:19:f1:34:3d:
b3:cd:ea:e2:a9:b5:b4:59:ea:2b:4f:d8:1a:bb:23:bd:0f:38:
96:02:1d:db:cd:85:62:1e:33:b7:33:7d:e3:2d:f3:18:63:86:
7a:dc:ac:07:dd:88:e3:dd:e8:bf:c6:5d:cf:db:d5:b0:a6:2f:
41:ca:24:20:3f:c5:93:03:68:08:56:c7:9a:51:70:5a:f4:cf:
91:da:83:1d:17:28:9f:fa:c4:fc:0b:c8:7e:ba:f6:f4:85:48:
95:83:04:f7:65:a7:55:14:5b:5f:51:8d:e9:08:5e:cb:39:18:
73:d4:53:4c:11:8c:0d:69:d1:e1:53:39:ea:02:c9:56:2b:69:
f5:70:95:5b:18:08:b1:c7:fc:ec:06:0f:c5:c9:49:4a:c4:dd:
bf:e9:3f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 08:06:30 2026 by rpki-client