Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
File: PnFWq-5roji5BzFd-cVShlrc2ug.mft (raw, json)
Hash identifier: ygPIzJBYGNrke53yMfEZ7b1zEFHx2vOx7zsGNs2Ei48=
Subject key identifier: C8:94:E8:8A:60:25:4C:52:45:94:5A:EC:31:50:4F:09:A4:50:45:CA
Authority key identifier: 3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8
Certificate issuer: /CN=3e7156abee6ba238b907315df9c552865adcdae8
Certificate serial: 019F197A6BF9A7C0388B220057992B5A1528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
Manifest number: 0BFA
Signing time: Tue 30 Jun 2026 17:01:21 +0000
Manifest this update: Tue 30 Jun 2026 17:01:21 +0000
Manifest next update: Wed 01 Jul 2026 17:01:21 +0000
Files and hashes: 1: 1_igJmtMDXKz9bhBLaRP5dFDztQ.roa (hash: JOImpk+FDhBna11hSj1TGTrJNMUKv4JDlCeaLCzdNVU=)
2: PnFWq-5roji5BzFd-cVShlrc2ug.crl (hash: RwSOrLeZCSzCdIGs5aREXXbfFR3cdN3n9tn11Eyu6Ms=)
3: X4LcadFcj7rRiTLEgHHTLMKNzsU.roa (hash: Cf5UA76UUfIOCKC2kd8gwCuNI+KqNFW/rTGifC2FORk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:7a:6b:f9:a7:c0:38:8b:22:00:57:99:2b:5a:15:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e7156abee6ba238b907315df9c552865adcdae8
Validity
Not Before: Jun 30 17:01:21 2026 GMT
Not After : Jul 1 17:01:21 2026 GMT
Subject: CN=c894e88a60254c5245945aec31504f09a45045ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3d:b6:e8:bb:3e:20:d9:ac:f9:d2:54:cf:8b:
02:da:3c:e9:d7:fd:fb:18:2c:eb:17:02:35:26:29:
93:c5:c5:5f:3e:3c:5c:91:d0:20:a2:4c:9b:c4:af:
75:78:1c:1c:12:07:7f:d4:ee:d2:1f:ab:6e:da:5f:
a3:79:89:dc:6e:c4:b0:eb:f2:75:9b:2b:f8:39:6a:
9b:b3:a3:a0:51:b3:08:7e:04:20:fa:3d:c1:9f:c0:
95:ad:94:ad:59:13:eb:fe:57:58:cd:28:42:55:b1:
cf:ab:11:97:ca:8a:87:f9:61:3a:78:fa:25:94:dd:
e5:12:a1:4b:93:4b:26:7a:a8:03:8f:9a:75:eb:b4:
27:e4:17:b2:ba:81:bd:64:5c:f4:5e:53:f9:c8:77:
57:94:16:15:00:4e:6a:89:b6:2e:43:6d:e7:c5:63:
47:04:63:cb:b8:ac:7d:e2:19:df:40:fa:9e:c1:89:
f3:2a:a2:45:be:a6:40:47:47:dd:b3:54:83:a8:69:
e2:d3:66:64:dd:1e:65:86:87:fc:a8:62:95:6c:3b:
c8:66:eb:7b:79:b7:8e:d7:5c:af:c4:bf:00:b4:00:
f8:4e:24:93:b8:8d:b7:d7:f9:70:7b:5f:cc:f6:31:
4f:b2:ec:c9:bd:15:0a:db:14:09:b6:84:59:41:2c:
7c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:94:E8:8A:60:25:4C:52:45:94:5A:EC:31:50:4F:09:A4:50:45:CA
X509v3 Authority Key Identifier:
keyid:3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:e8:6c:bc:c8:e0:22:9d:40:70:2a:61:11:e1:c1:1b:1e:27:
2f:39:72:cc:84:a2:16:77:4a:39:51:ca:59:a3:8a:7e:d0:e7:
4e:ef:79:7d:21:26:a9:6d:eb:e9:d1:dd:54:e1:3e:aa:5b:8b:
a1:01:7b:46:13:65:83:fc:73:f6:ca:65:2d:66:16:d1:04:9a:
4d:2e:e8:8d:4f:a8:fd:3b:61:ca:17:f2:ab:2d:05:2d:d1:eb:
87:1f:39:3d:e9:c3:7a:58:36:16:cd:82:b9:3b:05:23:05:50:
39:c6:1e:3c:92:1e:c3:f5:2d:19:f0:68:f8:9f:45:3c:ce:35:
13:89:90:d7:7e:81:ad:42:cb:ba:e6:e1:92:6d:e1:b4:be:d2:
49:a1:a9:90:bb:06:12:ff:bd:19:8b:9d:8d:3d:9a:7c:6a:6e:
de:d2:b3:a0:c3:29:ac:b5:6e:86:1b:f8:9a:d6:cd:4d:00:27:
19:e4:67:f1:2a:f5:05:ad:13:05:b5:0a:c7:40:42:cd:cf:ef:
b4:ca:6d:4e:fd:01:49:10:5f:99:6b:62:02:1a:ae:71:c3:4b:
72:71:7f:85:f1:8c:27:a3:3f:97:ec:3a:16:fd:97:2d:8b:19:
58:e3:ef:a4:31:d0:9f:5e:8e:39:1c:4d:6a:c6:4c:46:73:d1:
4a:a4:e6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:34:00 2026 by rpki-client