Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft
File: Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft (raw, json)
Hash identifier: SPDVSQ0F4dUOfcOrlHrm+usGYHE+oORML7vjiWHARCE=
Subject key identifier: 8D:2F:BE:39:1C:48:40:E3:F0:EA:38:6F:96:B9:12:C2:AA:65:6B:68
Authority key identifier: 3F:29:6F:E9:45:A2:31:80:75:3F:67:F7:74:8E:6F:29:9D:2E:67:2A
Certificate issuer: /CN=3f296fe945a23180753f67f7748e6f299d2e672a
Certificate serial: 01A1160620E8089F6A12AADF8CC45C518F98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft
Manifest number: 1175
Signing time: Wed 07 Oct 2026 11:01:02 +0000
Manifest this update: Wed 07 Oct 2026 11:01:02 +0000
Manifest next update: Thu 08 Oct 2026 11:01:02 +0000
Files and hashes: 1: NgG8sLNb-W8-OHBCGxZ73IB5nDI.roa (hash: lrLVn7ENnn4C2ElW6lbxmaOhdEvNhEpkcSeT7X4B1AQ=)
2: Pylv6UWiMYB1P2f3dI5vKZ0uZyo.crl (hash: CPz1fPfzagz0vUZ3Jep5r6A8Lv7vVC8d/y34HDNy4do=)
3: ogybvPCYv0zaHbI7IAnfqKXESCM.roa (hash: LonaEgi/rXosvauw091QvQs3rhGZRi+ZXg091i9IY6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:06:20:e8:08:9f:6a:12:aa:df:8c:c4:5c:51:8f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f296fe945a23180753f67f7748e6f299d2e672a
Validity
Not Before: Oct 7 11:01:02 2026 GMT
Not After : Oct 8 11:01:02 2026 GMT
Subject: CN=8d2fbe391c4840e3f0ea386f96b912c2aa656b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ac:98:37:5d:8a:2f:a6:8c:fa:61:93:68:84:
34:d7:9b:db:8c:1c:15:5b:a4:70:80:be:c6:d0:3a:
83:83:9f:2d:8e:a5:f9:c0:86:d6:f1:38:b3:8b:d6:
a1:0f:89:10:ff:79:b6:de:02:bb:56:83:fc:d9:29:
53:5c:cb:92:07:f7:71:0a:d9:a2:1f:6d:61:93:68:
7f:fe:1b:eb:85:2e:c2:a8:45:f9:e4:bb:65:84:a0:
2f:c5:24:83:70:45:07:fb:6f:c9:8b:35:13:5a:5b:
8d:2c:1f:23:8f:87:6e:47:48:f3:c3:b2:4b:5d:5b:
ad:5e:7a:cc:7f:77:5d:6d:b8:51:25:16:1f:79:21:
d9:14:e0:24:48:a4:0b:68:08:f9:94:4d:04:06:9c:
4c:ac:40:72:96:00:c4:14:35:da:5e:43:73:52:63:
56:1c:f9:37:3a:04:02:7d:3b:e9:40:6d:f0:20:36:
82:29:e7:e9:a6:e8:84:64:1f:d2:c5:3c:96:d2:8e:
2f:8b:cd:df:ea:4d:6b:82:18:64:40:cc:8e:57:3d:
27:35:68:54:bd:1e:be:7d:00:57:7b:f6:2c:fc:eb:
f5:42:03:1a:23:56:ea:89:37:4c:a8:17:35:a2:85:
4c:9b:d8:7d:80:7d:9f:8b:95:b6:e8:ab:05:e6:da:
89:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2F:BE:39:1C:48:40:E3:F0:EA:38:6F:96:B9:12:C2:AA:65:6B:68
X509v3 Authority Key Identifier:
keyid:3F:29:6F:E9:45:A2:31:80:75:3F:67:F7:74:8E:6F:29:9D:2E:67:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e4:6b:12:eb:37:e6:8c:a2:29:85:8a:52:5c:b4:ca:b6:01:
53:73:17:25:d6:6f:35:b1:ab:c9:a7:b4:7c:ba:47:5e:6e:c6:
2e:c1:61:60:bb:3f:11:6e:ec:5a:d5:65:d0:8d:40:10:3b:71:
13:3c:98:91:2e:a7:4c:2f:a9:51:74:d8:c5:26:2d:1e:bb:06:
9e:2d:49:de:97:8d:2d:e4:c7:02:b1:29:cc:ba:da:a1:2d:71:
4e:c1:79:ef:3c:ce:d6:23:02:ac:fa:a5:df:03:3f:77:b3:62:
bc:53:e1:4d:22:2f:1a:3d:93:07:50:1e:9b:49:f6:17:5f:62:
6f:3a:4e:b4:03:21:f8:17:c0:fb:96:1e:85:e3:b8:96:33:e5:
90:e4:87:cb:c3:b3:d8:a2:66:fe:97:e5:08:f3:4e:49:0d:46:
0d:e1:72:60:c8:46:6d:bc:2b:5f:9b:c7:25:df:c1:85:31:c2:
58:1d:cb:25:6b:1b:ad:5e:c8:57:f4:a8:b7:6e:ee:01:52:da:
3d:c1:5a:36:f8:aa:6f:d7:dd:f7:6a:b2:1b:19:2c:8d:cb:06:
54:f8:87:aa:89:28:ad:d7:43:a3:7c:14:f9:d8:b8:32:2f:29:
ae:43:bc:c3:d9:43:c2:b2:11:e5:09:0c:62:8c:34:ba:e6:8c:
1c:7f:fa:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 19:28:48 2026 by rpki-client