Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
File: PnFWq-5roji5BzFd-cVShlrc2ug.mft (raw, json)
Hash identifier: cAZBImCMSD19Uu5Rw/q3I4/rBwuoHJ0e0tfasd6oeGg=
Subject key identifier: 40:0B:E4:11:4A:E6:F0:82:FC:3B:63:36:40:07:31:C8:22:AF:F8:2E
Authority key identifier: 3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8
Certificate issuer: /CN=3e7156abee6ba238b907315df9c552865adcdae8
Certificate serial: 019D389C154FB0C3CF1CE804A8D483C44289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
Manifest number: 0B01
Signing time: Sun 29 Mar 2026 08:00:46 +0000
Manifest this update: Sun 29 Mar 2026 08:00:46 +0000
Manifest next update: Mon 30 Mar 2026 08:00:46 +0000
Files and hashes: 1: 1_igJmtMDXKz9bhBLaRP5dFDztQ.roa (hash: JOImpk+FDhBna11hSj1TGTrJNMUKv4JDlCeaLCzdNVU=)
2: PnFWq-5roji5BzFd-cVShlrc2ug.crl (hash: mcW3RyLSkxxPlxIIzllP0nl6/pWG7JXaESDFB9GHdoI=)
3: X4LcadFcj7rRiTLEgHHTLMKNzsU.roa (hash: Cf5UA76UUfIOCKC2kd8gwCuNI+KqNFW/rTGifC2FORk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:15:4f:b0:c3:cf:1c:e8:04:a8:d4:83:c4:42:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e7156abee6ba238b907315df9c552865adcdae8
Validity
Not Before: Mar 29 08:00:46 2026 GMT
Not After : Mar 30 08:00:46 2026 GMT
Subject: CN=400be4114ae6f082fc3b6336400731c822aff82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9e:6a:3f:66:24:10:f1:2d:f3:d1:28:75:d1:
23:11:8e:e5:8f:b9:81:60:49:e7:eb:46:3d:fe:71:
bd:e3:1a:21:33:77:4e:bf:f0:97:1f:2e:c9:11:4a:
dd:b1:cc:7b:28:b6:9a:be:ce:ca:c6:11:bf:80:b9:
d0:94:88:36:5e:4a:b3:65:6f:3a:45:a7:6e:fc:57:
d8:64:ca:ea:4f:44:78:23:05:95:a5:c6:78:55:5d:
5b:58:e6:cf:7f:28:a4:0c:5c:e2:f2:33:23:16:04:
f9:82:ae:58:4c:a0:14:d0:6f:23:54:ef:50:a5:c4:
2d:bf:f7:2d:ea:b2:68:1a:80:49:7c:e8:16:c3:42:
21:78:6b:91:1e:92:25:0e:32:5c:aa:b3:06:ce:c8:
ee:fc:69:dc:00:05:78:2b:f7:b2:10:a8:5f:59:6b:
bf:98:7f:98:5a:6f:cb:be:92:d0:00:be:0b:60:ce:
fd:89:85:17:b8:f2:86:5f:57:de:07:8e:00:50:0a:
ee:d6:79:31:89:19:c0:bd:ff:a7:ce:49:01:51:40:
0a:9c:78:14:75:c2:a3:d4:e2:a0:cf:8f:13:2e:5d:
75:77:cc:b3:73:c1:18:a3:59:64:94:50:e0:bf:41:
f5:16:cb:36:93:36:46:8d:71:e1:47:d8:9d:fd:76:
27:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0B:E4:11:4A:E6:F0:82:FC:3B:63:36:40:07:31:C8:22:AF:F8:2E
X509v3 Authority Key Identifier:
keyid:3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:84:24:ff:33:24:f0:dc:52:b4:4f:05:ad:09:e1:4c:aa:83:
93:5e:5d:64:e1:4d:0c:cd:f2:9b:a0:d0:81:53:2a:8f:ee:ac:
0b:ca:39:c7:5a:7d:04:05:6e:cc:fa:44:40:94:02:5f:18:03:
f8:73:71:78:cf:d9:a9:04:08:2c:e6:22:d7:a6:c3:50:09:09:
eb:cf:d8:fc:51:ca:b2:bd:78:89:a8:f1:72:9e:2f:de:2b:38:
ed:b4:5d:55:a3:8e:41:35:05:87:65:6d:0a:ea:10:cf:14:a7:
a6:42:bc:35:1c:f9:5a:b7:03:ca:2e:4f:f2:a4:79:3e:67:05:
9a:8b:2e:2e:78:44:24:8e:13:9f:b0:4d:b5:bf:1a:64:f7:fe:
b8:31:14:c0:e4:3b:5d:78:f7:de:ab:1e:c5:7a:b3:c8:78:82:
bd:d2:4f:ca:bc:69:ca:c1:35:e8:c6:32:25:46:48:ff:0a:d7:
58:3c:51:72:b2:ac:37:37:18:a7:87:85:69:3c:b6:5b:98:b2:
0f:da:3d:d9:a9:e2:95:ad:6d:e9:2f:03:73:8a:2a:3d:c9:a7:
5a:f7:ba:46:80:b0:3c:aa:82:d1:28:b6:eb:91:1c:78:83:68:
03:bc:af:8a:86:13:f4:f5:82:7a:aa:35:dc:0e:1f:6e:8e:34:
49:dd:bf:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:20:52 2026 by rpki-client