Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
File: PnFWq-5roji5BzFd-cVShlrc2ug.mft (raw, json)
Hash identifier: 5iwRZd124DNP4EDuQYC1qMkNwCthlbkBwRoWyFlULPI=
Subject key identifier: 10:53:3F:34:27:A3:9F:27:23:4E:0C:7D:10:CD:38:60:08:BD:80:F3
Authority key identifier: 3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8
Certificate issuer: /CN=3e7156abee6ba238b907315df9c552865adcdae8
Certificate serial: 01A003266A90EB8B993D80D426A877EF0995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
Manifest number: 0C73
Signing time: Sat 15 Aug 2026 02:00:44 +0000
Manifest this update: Sat 15 Aug 2026 02:00:44 +0000
Manifest next update: Sun 16 Aug 2026 02:00:44 +0000
Files and hashes: 1: 1_igJmtMDXKz9bhBLaRP5dFDztQ.roa (hash: JOImpk+FDhBna11hSj1TGTrJNMUKv4JDlCeaLCzdNVU=)
2: PnFWq-5roji5BzFd-cVShlrc2ug.crl (hash: o38a+J3g7ZYPDi/DEussnVSxPShAyaBOJ4xjbqZVWY0=)
3: X4LcadFcj7rRiTLEgHHTLMKNzsU.roa (hash: Cf5UA76UUfIOCKC2kd8gwCuNI+KqNFW/rTGifC2FORk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:26:6a:90:eb:8b:99:3d:80:d4:26:a8:77:ef:09:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e7156abee6ba238b907315df9c552865adcdae8
Validity
Not Before: Aug 15 02:00:44 2026 GMT
Not After : Aug 16 02:00:44 2026 GMT
Subject: CN=10533f3427a39f27234e0c7d10cd386008bd80f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:79:f1:63:57:7c:71:41:f2:dd:46:29:22:f1:
4f:4c:d7:88:81:e9:fe:2e:dc:a9:c4:64:fc:74:27:
71:90:d7:3c:e1:b3:d4:02:b5:a2:30:f7:f7:3a:33:
e9:33:08:eb:9d:15:bd:bc:c3:dc:35:d6:21:b8:82:
3a:bf:eb:7a:86:80:ea:89:e2:d9:02:d9:a4:73:09:
ce:15:52:a8:7a:a6:74:a1:ed:69:23:6d:f2:55:31:
20:8d:c1:e7:d0:a3:52:67:b8:c0:58:0f:65:3a:d4:
81:4d:1e:15:b3:04:df:28:29:35:1b:b4:e1:8e:e3:
ec:7d:1d:cd:97:01:2a:9f:78:fb:9a:af:e0:a9:35:
3c:aa:9b:99:c9:4a:65:76:60:08:05:0d:c0:95:8b:
63:0b:7e:13:c7:fe:e7:7f:cb:1b:14:1f:df:96:3e:
c3:61:75:f4:2b:30:fd:ce:65:25:be:27:6a:24:0f:
8e:3f:67:8d:d4:16:71:5d:b8:53:1a:17:5d:7e:aa:
ff:01:c6:45:c4:37:5b:34:4f:18:cb:66:f3:a8:d2:
12:56:93:17:da:d7:23:d7:26:3d:f5:6d:71:d5:2e:
6b:0d:4f:1b:a4:9c:a6:15:14:1b:df:31:39:1e:32:
c3:54:a1:ff:43:ef:46:64:8a:3e:fd:5c:11:80:9e:
3f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:53:3F:34:27:A3:9F:27:23:4E:0C:7D:10:CD:38:60:08:BD:80:F3
X509v3 Authority Key Identifier:
keyid:3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:89:a8:98:f6:fc:0e:f8:88:d6:6e:21:31:11:3a:23:35:b3:
7d:09:58:20:db:85:6c:9e:dc:2d:1d:fd:82:0b:01:aa:ab:d5:
fa:cc:cb:e6:60:10:8e:1b:7c:16:d5:d0:e0:be:be:b6:68:af:
50:c4:63:1b:9a:a6:1e:64:52:6f:93:18:9f:fe:80:a8:0e:09:
b3:9c:9c:f0:7e:29:dd:5a:27:67:cc:ab:83:d9:34:57:e6:aa:
e3:fb:d3:04:b8:4e:06:63:22:27:be:ca:51:17:5b:eb:63:be:
60:ec:bf:cb:3d:47:0b:f0:d8:a7:09:59:dc:a2:4c:0a:40:3e:
04:39:8f:b8:6f:24:54:cb:1c:a4:9e:f2:bf:d9:91:e6:95:23:
49:3a:7b:f0:19:de:04:f0:94:b1:ec:55:c8:ce:8a:62:e3:67:
f8:02:5d:69:53:d8:6e:8b:e6:1d:34:f4:e3:90:17:fa:fb:6e:
a3:8d:08:bf:5b:e8:b7:40:f0:8b:3c:86:15:76:49:94:74:cf:
a8:b0:2d:09:90:2d:01:cc:b2:f2:2d:21:9d:ef:62:31:8d:c7:
57:a6:20:dc:68:ad:95:a0:c1:86:06:78:6d:2e:8b:2a:ee:c2:
d6:9e:44:21:00:fc:11:5b:83:46:40:b9:35:cf:71:b3:7e:9e:
48:dc:44:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaADJmqQ64uZPYDUJqh37wmVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNzE1NmFiZWU2YmEyMzhiOTA3MzE1ZGY5YzU1Mjg2NWFk
Y2RhZTgwHhcNMjYwODE1MDIwMDQ0WhcNMjYwODE2MDIwMDQ0WjAzMTEwLwYDVQQD
EygxMDUzM2YzNDI3YTM5ZjI3MjM0ZTBjN2QxMGNkMzg2MDA4YmQ4MGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXnxY1d8cUHy3UYpIvFPTNeIgen+
LtypxGT8dCdxkNc84bPUArWiMPf3OjPpMwjrnRW9vMPcNdYhuII6v+t6hoDqieLZ
AtmkcwnOFVKoeqZ0oe1pI23yVTEgjcHn0KNSZ7jAWA9lOtSBTR4VswTfKCk1G7Th
juPsfR3NlwEqn3j7mq/gqTU8qpuZyUpldmAIBQ3AlYtjC34Tx/7nf8sbFB/flj7D
YXX0KzD9zmUlvidqJA+OP2eN1BZxXbhTGhddfqr/AcZFxDdbNE8Yy2bzqNISVpMX
2tcj1yY99W1x1S5rDU8bpJymFRQb3zE5HjLDVKH/Q+9GZIo+/VwRgJ4/wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBTPzQno58nI04MfRDNOGAIvYDzMB8GA1UdIwQY
MBaAFD5xVqvua6I4uQcxXfnFUoZa3NroMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG5GV3EtNXJvamk1QnpGZC1jVlNobHJjMnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9hNGEwZjctN2RiZC00YjAzLWI3Zjkt
NThmMmQ0NGZmMjgxLzEvUG5GV3EtNXJvamk1QnpGZC1jVlNobHJjMnVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9hNGEwZjctN2RiZC00YjAzLWI3ZjktNThmMmQ0NGZmMjgx
LzEvUG5GV3EtNXJvamk1QnpGZC1jVlNobHJjMnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWomomPb8
DviI1m4hMRE6IzWzfQlYINuFbJ7cLR39ggsBqqvV+szL5mAQjht8FtXQ4L6+tmiv
UMRjG5qmHmRSb5MYn/6AqA4Js5yc8H4p3VonZ8yrg9k0V+aq4/vTBLhOBmMiJ77K
URdb62O+YOy/yz1HC/DYpwlZ3KJMCkA+BDmPuG8kVMscpJ7yv9mR5pUjSTp78Bne
BPCUsexVyM6KYuNn+AJdaVPYbovmHTT045AX+vtuo40Iv1vot0DwizyGFXZJlHTP
qLAtCZAtAcyy8i0hne9iMY3HV6Yg3GitlaDBhgZ4bS6LKu7C1p5EIQD8EVuDRkC5
Nc9xs36eSNxEsA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 04:41:29 2026 by rpki-client