Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
File: PNVhnbjXcXN5lW1Op1t22ybRwck.mft (raw, json)
Hash identifier: SykQVbgzhgSdu8hvXxccnQTX6ICd4nk1L26RTZdvPEA=
Subject key identifier: 20:92:DD:67:CA:51:A3:FD:B2:20:12:AC:1F:10:8C:AB:56:FC:87:FE
Authority key identifier: 3C:D5:61:9D:B8:D7:71:73:79:95:6D:4E:A7:5B:76:DB:26:D1:C1:C9
Certificate issuer: /CN=3cd5619db8d7717379956d4ea75b76db26d1c1c9
Certificate serial: 019EB87CEC0D9AACA5E17480C23D6781F378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
Manifest number: 1956
Signing time: Thu 11 Jun 2026 21:00:55 +0000
Manifest this update: Thu 11 Jun 2026 21:00:55 +0000
Manifest next update: Fri 12 Jun 2026 21:00:55 +0000
Files and hashes: 1: PNVhnbjXcXN5lW1Op1t22ybRwck.crl (hash: t+Rsl94TrUc2xOKXfEj2QCAVfRY+0YeivS7M0dSA7MY=)
2: W2_YVtahS9AF_suIxs_GQQbdje4.roa (hash: tnC0EkMLLcLXQXoDsLNC9jDbiWksa5OYi1IQus+om1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:ec:0d:9a:ac:a5:e1:74:80:c2:3d:67:81:f3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd5619db8d7717379956d4ea75b76db26d1c1c9
Validity
Not Before: Jun 11 21:00:55 2026 GMT
Not After : Jun 12 21:00:55 2026 GMT
Subject: CN=2092dd67ca51a3fdb22012ac1f108cab56fc87fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:34:42:cd:44:9d:ca:18:76:b7:9d:fd:51:d5:
4b:79:fa:01:26:18:15:7a:5a:57:68:d1:06:e0:9d:
cc:bc:bd:8f:b7:e8:71:2f:40:f3:08:19:6f:25:be:
a6:13:3d:e5:37:4a:75:82:52:29:7b:6e:fd:79:54:
5f:f3:33:78:19:85:1e:98:24:e5:25:7b:f0:69:c2:
de:47:b2:7d:12:bc:c3:fd:24:76:44:68:26:e1:d3:
e1:78:27:29:49:82:12:66:3c:e4:b1:a5:b9:2c:ed:
95:25:b7:16:10:3d:c7:d8:ca:df:05:c7:f5:55:cf:
e6:b7:6d:85:87:a0:dc:c9:18:ff:12:ef:a2:f6:b7:
e5:f9:c1:ae:21:cd:4d:14:41:77:58:ab:6c:fc:8f:
08:18:90:fd:4e:10:a1:6a:8e:27:5b:d9:e2:b6:8b:
7b:05:0c:6d:72:14:1d:c0:f5:ac:63:06:31:ff:97:
4a:34:0b:dc:8f:6a:e2:ce:f8:3a:50:0e:36:e3:04:
6a:5d:2f:36:1b:80:45:53:e1:aa:0d:08:85:b0:ac:
ab:be:1b:df:ca:67:85:8e:b7:88:97:c2:49:ea:9c:
cc:9f:0f:89:95:26:82:b5:36:96:23:e7:de:a2:92:
23:80:80:36:77:a1:26:23:bc:a9:45:65:a5:33:2a:
64:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:92:DD:67:CA:51:A3:FD:B2:20:12:AC:1F:10:8C:AB:56:FC:87:FE
X509v3 Authority Key Identifier:
keyid:3C:D5:61:9D:B8:D7:71:73:79:95:6D:4E:A7:5B:76:DB:26:D1:C1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ca:db:ce:d5:78:2d:1e:97:95:ab:e4:3c:4c:aa:8e:12:eb:
98:db:be:23:26:4b:5d:57:e3:da:f8:02:5a:11:7d:16:03:93:
3b:f3:1e:13:c9:ca:f7:e7:89:b3:24:24:0c:62:3f:1e:71:91:
5d:c0:d6:18:28:94:c2:5f:2b:2a:a2:bd:41:18:3a:bd:19:f7:
16:5b:c0:3b:87:70:48:54:fc:70:d1:6e:25:7c:62:23:ae:f1:
c9:87:76:62:19:6c:bf:e9:f9:53:b0:44:49:c6:97:75:c7:f5:
b7:0f:38:e4:7a:d4:ee:d6:cf:29:81:42:62:fc:9e:43:2d:1a:
43:6d:6b:ad:4a:13:57:34:e4:20:c5:ec:01:12:fd:8a:cb:ed:
7e:c9:7c:cb:ea:74:2b:b4:3a:9e:87:a4:71:61:e3:06:e7:d6:
cf:76:35:d3:ed:db:59:26:05:34:ad:43:f0:40:02:5f:a6:51:
c2:17:11:20:03:ab:21:6a:30:c7:98:01:e8:d4:f6:92:61:0c:
20:5b:65:a2:60:80:c5:57:d7:54:4d:71:e7:92:ad:39:95:c5:
ba:3f:4e:f1:5b:b2:c9:f0:3c:a4:d6:f9:f7:c3:03:04:69:c0:
9f:6c:f4:39:af:a4:4e:9f:72:d2:fa:3b:23:57:05:cc:f5:71:
47:57:20:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:11:03 2026 by rpki-client