Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
File: PfikDGosaZPJ--gd8-p903L5bew.mft (raw, json)
Hash identifier: VjSNMi8idUM0u+kmOjqroTTmNio7VYLyTQ6LhtucHgQ=
Subject key identifier: B3:B0:FA:FD:2B:91:16:73:06:F5:B3:3E:64:98:7B:99:92:75:8D:A8
Authority key identifier: 3D:F8:A4:0C:6A:2C:69:93:C9:FB:E8:1D:F3:EA:7D:D3:72:F9:6D:EC
Certificate issuer: /CN=3df8a40c6a2c6993c9fbe81df3ea7dd372f96dec
Certificate serial: 01A17E4ECB9AF13BD29289D3E606FAFA39B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
Manifest number: 0ECE
Signing time: Tue 27 Oct 2026 17:00:55 +0000
Manifest this update: Tue 27 Oct 2026 17:00:55 +0000
Manifest next update: Wed 28 Oct 2026 17:00:55 +0000
Files and hashes: 1: NiXEkFa2OyOUnxfMEcQON6yPoNg.roa (hash: dVvuF0RyYBJRRTECbqhrE8YUyCue+Lh92GIKr6FebqU=)
2: PfikDGosaZPJ--gd8-p903L5bew.crl (hash: vfRfzQHT5zv1wO7vBUqASt0iOsaBZPWrCfKBuVsGJtI=)
3: gQD3MU7TBpEiOjF9SqTJkR2Y3Hk.roa (hash: yBwTOvwiLlTbqshsC+5AZzg1Ya/CKAPiEghYIW9dRIk=)
4: qWvFNqskXHsPxENe_ElNOi_ZdwU.roa (hash: Lox9iJeR/nzrJwtR4kRDqG6cZUpQudB7+6Z9SNhuzk0=)
5: q_r4ijQpjXZ8n9KPTw-0C5wgwwQ.roa (hash: zq7FtPgWzADBU+GCudKPhOXhQRXlPBFiAI7EZtoOa+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:4e:cb:9a:f1:3b:d2:92:89:d3:e6:06:fa:fa:39:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3df8a40c6a2c6993c9fbe81df3ea7dd372f96dec
Validity
Not Before: Oct 27 17:00:55 2026 GMT
Not After : Oct 28 17:00:55 2026 GMT
Subject: CN=b3b0fafd2b91167306f5b33e64987b9992758da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:53:e0:8a:1b:ac:a0:c5:3b:10:35:47:1a:79:
5c:a6:3c:89:41:e9:a7:ff:01:47:b6:9e:37:81:35:
08:7c:3e:d2:d6:db:0c:aa:ea:4b:86:00:ac:31:54:
df:68:47:ab:3d:9f:cb:e5:7f:f8:6b:ab:b9:22:1f:
23:9d:99:b6:8d:b4:92:8b:c1:f3:40:d2:60:72:de:
41:6a:d5:2c:19:ab:45:71:fb:fa:57:57:7b:e5:9e:
2d:d7:f5:18:5d:d4:2f:57:9d:dc:e0:c7:ef:8e:f5:
0a:ab:d4:81:eb:a8:38:7b:dc:81:54:40:39:90:3c:
18:e5:3b:66:c0:2a:50:66:90:8e:fc:1a:39:e1:a8:
11:f7:b6:4f:9e:70:e2:3f:93:10:63:5d:60:8d:4b:
b5:8b:7d:05:01:c3:6a:e0:93:85:d1:58:1d:12:10:
ac:63:8a:c1:e7:0f:99:3a:12:1c:2e:a2:42:13:53:
e3:8d:55:f1:ad:a8:98:48:0b:66:c0:56:52:c1:35:
2d:6e:bd:94:a0:73:3f:0f:79:fe:c1:28:7c:3f:a1:
37:2b:c6:18:0f:5f:98:30:5e:d9:64:3d:43:31:5a:
08:fc:72:71:06:6b:d2:f4:08:3d:3b:72:fb:16:bc:
dc:f9:77:ed:79:a7:0f:db:0a:ed:76:39:15:cc:93:
64:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B0:FA:FD:2B:91:16:73:06:F5:B3:3E:64:98:7B:99:92:75:8D:A8
X509v3 Authority Key Identifier:
keyid:3D:F8:A4:0C:6A:2C:69:93:C9:FB:E8:1D:F3:EA:7D:D3:72:F9:6D:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f9:2f:f4:f6:71:37:89:f6:2d:19:62:89:96:d0:28:72:73:
24:73:e6:7a:8b:30:52:54:10:b1:99:fe:db:ec:94:54:e8:93:
50:6f:a5:a0:53:c9:da:a2:45:24:a2:f5:c3:a8:c9:0d:d1:03:
0b:d4:03:ed:91:e9:32:02:b8:a2:de:71:a4:3f:fc:e2:dc:46:
d5:1c:f2:49:a3:c9:95:ea:8f:24:a3:a0:47:22:6d:b9:6c:93:
ad:88:c0:de:e2:a4:6c:53:56:c5:55:e0:3f:91:dc:51:cf:51:
05:8a:3a:b2:ce:8d:fd:ea:b1:07:e8:66:f4:65:66:81:d9:5b:
bc:9a:19:5f:e3:07:4a:d9:f4:2c:15:b2:34:74:d0:45:15:94:
ac:37:80:93:91:e8:f4:7e:3a:01:a1:61:70:93:10:c7:40:be:
e0:19:ce:51:a3:65:bd:f6:bd:76:f6:f2:be:b5:99:9d:60:a4:
3b:6f:cf:62:a5:a6:54:57:8c:da:8c:f1:19:c0:26:55:88:53:
f1:a1:23:97:dc:0a:76:ce:f9:1e:ab:a0:0a:99:e1:40:36:7b:
81:e8:a8:2b:3b:97:e4:55:3d:d5:f4:bc:b6:4e:3c:09:59:24:
95:97:24:5a:c4:f2:41:67:ea:4d:f5:ca:2f:83:6f:c3:c0:10:
6f:19:74:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:41:51 2026 by rpki-client