Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/PmifxCLwpi1rXa7hqmuHnGBbZVc.mft
File: PmifxCLwpi1rXa7hqmuHnGBbZVc.mft (raw, json)
Hash identifier: 1OCYRi0+ZILTE+uqZjp3nDylxQGSxZuA5C5p5eHUE8w=
Subject key identifier: 71:FF:CF:AA:FE:F2:3B:90:D4:6C:A0:1C:73:7C:3E:30:7A:6D:CA:E9
Authority key identifier: 3E:68:9F:C4:22:F0:A6:2D:6B:5D:AE:E1:AA:6B:87:9C:60:5B:65:57
Certificate issuer: /CN=3e689fc422f0a62d6b5daee1aa6b879c605b6557
Certificate serial: 01A0035E2228C75F3849C55BC1F494CB7098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmifxCLwpi1rXa7hqmuHnGBbZVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/PmifxCLwpi1rXa7hqmuHnGBbZVc.mft
Manifest number: 7B
Signing time: Sat 15 Aug 2026 03:01:35 +0000
Manifest this update: Sat 15 Aug 2026 03:01:35 +0000
Manifest next update: Sun 16 Aug 2026 03:01:35 +0000
Files and hashes: 1: 7ollTNSFSY1I3Oksob2f8HRCUnA.roa (hash: aG8toklA3hCbimSvopqnfapWwydOj77jkZAjRvt9sqI=)
2: PmifxCLwpi1rXa7hqmuHnGBbZVc.crl (hash: ZOakv6yX0MFBEXreB3xteqgTL0lU+AZEZfpYpBi9brI=)
3: RZQMyy5Mzg5d9uibtuU5J2s3ExY.roa (hash: cNhKdW/jIBlVmgalNBzdMb1dmA2lXN3oMfaoDZgTu1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/PmifxCLwpi1rXa7hqmuHnGBbZVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/PmifxCLwpi1rXa7hqmuHnGBbZVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmifxCLwpi1rXa7hqmuHnGBbZVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:5e:22:28:c7:5f:38:49:c5:5b:c1:f4:94:cb:70:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e689fc422f0a62d6b5daee1aa6b879c605b6557
Validity
Not Before: Aug 15 03:01:35 2026 GMT
Not After : Aug 16 03:01:35 2026 GMT
Subject: CN=71ffcfaafef23b90d46ca01c737c3e307a6dcae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a4:f5:e2:11:e6:78:96:82:ea:5b:9c:78:b9:
0a:5f:59:cb:b9:4a:a2:cf:7e:87:76:01:e0:43:a8:
84:47:46:34:12:9c:d1:b8:86:aa:33:fb:e3:c3:f7:
f8:17:ea:5c:e5:1c:72:7a:1d:f3:60:ff:aa:35:41:
76:f7:b5:59:9b:c5:82:2c:06:cc:1a:7e:cb:aa:b2:
47:03:2c:ab:bb:9b:8c:74:bf:96:54:4e:2a:9a:89:
77:3c:ce:e0:62:9f:a4:74:60:c6:33:fc:ad:9a:46:
fa:e7:81:39:7a:17:fe:70:f0:ef:81:86:4f:d6:14:
d8:ed:0d:42:24:bd:43:47:f3:f1:14:88:a1:72:57:
11:be:20:6a:89:43:1e:16:13:1c:b3:58:a6:4d:f9:
94:b1:0a:22:e1:cc:66:83:1d:46:40:27:e5:23:18:
e9:9d:cb:38:89:a7:cb:2d:e4:da:31:43:47:76:3d:
19:03:81:6b:72:11:d6:12:ba:29:02:66:a6:35:54:
3f:bc:77:a4:16:e8:2d:91:10:23:da:08:66:95:91:
df:92:76:f1:0c:f3:7c:db:23:4c:14:05:38:28:6e:
56:63:1f:a1:57:f1:05:61:f2:9e:61:80:29:b1:53:
94:82:aa:8b:3f:93:5e:23:47:af:ba:ab:86:8b:f9:
a6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FF:CF:AA:FE:F2:3B:90:D4:6C:A0:1C:73:7C:3E:30:7A:6D:CA:E9
X509v3 Authority Key Identifier:
keyid:3E:68:9F:C4:22:F0:A6:2D:6B:5D:AE:E1:AA:6B:87:9C:60:5B:65:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmifxCLwpi1rXa7hqmuHnGBbZVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/PmifxCLwpi1rXa7hqmuHnGBbZVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/PmifxCLwpi1rXa7hqmuHnGBbZVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:50:ae:c6:fe:87:bf:a8:52:80:a8:9b:02:81:74:7c:55:51:
bb:ba:de:96:45:d4:d6:75:73:6c:5c:9e:fd:01:c1:a3:89:70:
f4:2d:8a:7f:62:33:e6:c5:91:05:5a:0e:58:d4:51:7b:7c:25:
c1:f6:d3:5f:c6:92:f3:f2:64:38:c3:9e:1b:ad:67:98:d4:83:
09:e9:bc:88:50:cc:12:68:b7:8b:4b:2a:c3:be:1f:d5:ea:fe:
e3:05:70:ef:8f:4e:70:02:a5:84:f4:1b:3f:a3:8c:a5:de:81:
33:24:ae:e2:cd:e5:ec:65:9d:e9:d7:e4:7f:00:c3:92:23:95:
b2:c1:28:de:39:cd:0b:0d:57:57:d2:35:02:42:3e:4e:1a:3f:
57:52:ff:e0:c8:ea:cc:60:8f:a7:5c:02:5b:b9:10:ac:6e:83:
05:cd:2d:85:3c:ca:86:d9:85:ef:a8:c9:24:91:2e:f7:df:cd:
90:37:6a:9f:59:92:8c:a9:e2:2e:39:56:5f:a8:01:ec:21:c5:
1c:35:5e:38:41:7a:ac:00:69:94:ca:c3:d1:a0:1f:e3:ba:74:
a8:83:11:f5:c3:b7:7b:9d:95:12:62:5e:91:d9:cc:bc:d2:b2:
29:62:2d:27:a7:b7:cb:cf:f1:f9:c2:8b:ad:cd:f1:34:be:58:
37:51:fa:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:17:24 2026 by rpki-client