Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
File: PnFWq-5roji5BzFd-cVShlrc2ug.mft (raw, json)
Hash identifier: C7g14kJEp0M9jRVVdeABNhrYEV41dvGeua8LFHZxX7w=
Subject key identifier: F3:9A:90:C0:42:5F:5B:A1:FB:88:33:BA:19:FA:DB:3C:61:A0:7B:AA
Authority key identifier: 3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8
Certificate issuer: /CN=3e7156abee6ba238b907315df9c552865adcdae8
Certificate serial: 01A104001780A2B284F2AEFDB408A3301A7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
Manifest number: 0CF8
Signing time: Sat 03 Oct 2026 23:01:17 +0000
Manifest this update: Sat 03 Oct 2026 23:01:17 +0000
Manifest next update: Sun 04 Oct 2026 23:01:17 +0000
Files and hashes: 1: 1_igJmtMDXKz9bhBLaRP5dFDztQ.roa (hash: JOImpk+FDhBna11hSj1TGTrJNMUKv4JDlCeaLCzdNVU=)
2: PnFWq-5roji5BzFd-cVShlrc2ug.crl (hash: +lcsi8kdKycDeQ1ms9ogYfXx4xfDI0ZlawDfNCjb2qk=)
3: X4LcadFcj7rRiTLEgHHTLMKNzsU.roa (hash: Cf5UA76UUfIOCKC2kd8gwCuNI+KqNFW/rTGifC2FORk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:00:17:80:a2:b2:84:f2:ae:fd:b4:08:a3:30:1a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e7156abee6ba238b907315df9c552865adcdae8
Validity
Not Before: Oct 3 23:01:17 2026 GMT
Not After : Oct 4 23:01:17 2026 GMT
Subject: CN=f39a90c0425f5ba1fb8833ba19fadb3c61a07baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fd:c8:b9:10:14:a5:35:05:b4:79:bc:7c:43:
d8:b1:9c:19:16:47:27:97:18:4b:15:fd:57:e4:23:
04:1b:9b:a0:24:d9:46:f3:ca:a5:12:ee:0e:ee:d3:
16:c2:f4:2a:8e:67:db:7d:2d:8e:d6:c6:21:fe:24:
97:5f:e4:01:8c:98:70:63:83:42:ab:9e:41:59:21:
32:cb:57:8f:fd:2b:d9:b3:cb:d0:27:32:86:f2:2a:
8d:2f:62:e0:6c:0a:72:66:31:68:da:f3:24:2a:e2:
89:d9:57:e1:0a:ae:9d:4d:84:97:9c:6f:73:ce:42:
5f:73:d3:de:a8:f4:7a:84:8e:ff:f2:bb:aa:55:1d:
83:6b:5c:65:c4:d5:bf:9e:d4:98:bc:bc:47:1d:5b:
d0:22:61:06:f9:f3:73:ef:31:b7:29:a2:fa:11:7b:
cb:39:ec:d5:0e:42:de:e5:f3:d4:f2:20:d3:53:4c:
22:2e:15:2f:f0:7d:97:24:9e:7e:5e:1b:77:45:72:
6a:2a:d9:bc:cf:ad:b9:0f:3f:0a:8d:c5:81:c2:ae:
e0:9b:a7:cd:c7:6c:2c:97:c4:a2:e1:b9:c6:fb:e0:
e8:76:89:97:be:58:e7:8b:35:db:81:4e:8c:3c:c5:
ca:c9:46:ea:db:7e:a9:d2:97:72:5f:f6:e2:f8:80:
45:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9A:90:C0:42:5F:5B:A1:FB:88:33:BA:19:FA:DB:3C:61:A0:7B:AA
X509v3 Authority Key Identifier:
keyid:3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:be:ef:ce:6d:1c:7a:65:a3:8f:3c:21:ea:06:d9:75:3f:ee:
50:ee:71:90:fe:74:30:bd:d1:05:b2:ce:9f:ef:81:5b:e9:62:
8e:6a:ff:93:59:c4:93:ff:27:2b:8b:e1:58:33:15:78:74:a0:
a4:02:1d:c2:f1:d5:f9:62:ca:11:67:7b:4f:dc:4b:e6:95:aa:
44:d4:5c:b0:bb:67:2d:e6:c9:25:90:4e:ce:70:3f:6e:10:73:
11:39:4a:77:ef:39:57:03:a0:30:e2:b3:95:34:9e:71:10:87:
3c:ea:e6:04:23:f7:c9:2b:67:f0:76:ad:e5:00:d3:62:44:e7:
a8:bf:2b:3c:29:6f:34:15:68:e7:73:7d:22:e7:d2:90:80:0e:
fd:94:ba:8d:c0:83:6e:3f:08:42:6a:4c:3a:4f:34:d3:ee:aa:
cb:ce:d6:7c:86:3b:84:99:a2:d4:4e:18:c0:3e:06:e5:0b:3f:
12:1f:71:00:43:62:85:c1:74:04:9c:8f:a9:01:7c:2d:e6:5c:
da:ab:83:52:15:de:df:b6:b5:3f:41:0b:19:b5:e6:58:cf:ae:
be:8c:3e:51:84:7e:02:c9:b8:b7:73:86:de:cf:d3:80:3e:78:
a7:b2:05:95:17:99:3e:65:02:4c:4d:91:f6:49:39:68:1f:df:
36:21:44:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:33:53 2026 by rpki-client