Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft
File: pnac0wPoTc03o3XW52tgKfzDZ7Q.mft (raw, json)
Hash identifier: 82+RqgOLTWY8Kft66pY7+dcbQwNh0KGcO21YdkrT2RU=
Subject key identifier: 90:C0:D8:A1:DE:57:2C:32:EE:D4:02:FD:8B:E3:56:5B:FA:30:E8:B2
Authority key identifier: A6:76:9C:D3:03:E8:4D:CD:37:A3:75:D6:E7:6B:60:29:FC:C3:67:B4
Certificate issuer: /CN=a6769cd303e84dcd37a375d6e76b6029fcc367b4
Certificate serial: 01A16AFF1B3A0C447ECA2EEF8B9519BBE88E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnac0wPoTc03o3XW52tgKfzDZ7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft
Manifest number: 0447
Signing time: Fri 23 Oct 2026 23:01:05 +0000
Manifest this update: Fri 23 Oct 2026 23:01:05 +0000
Manifest next update: Sat 24 Oct 2026 23:01:05 +0000
Files and hashes: 1: ODmnFvkoRJ8KBXIwmG3VyMbhpMg.roa (hash: UzQ9zfqJ6GmOojpgnIMRQs0ikmH8yfkpdXYgZqB0SfM=)
2: pnac0wPoTc03o3XW52tgKfzDZ7Q.crl (hash: /IsG6fAqStOik1xxELQGIrVQF+w3uo1KQtUx+D7cwdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnac0wPoTc03o3XW52tgKfzDZ7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 23:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:ff:1b:3a:0c:44:7e:ca:2e:ef:8b:95:19:bb:e8:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6769cd303e84dcd37a375d6e76b6029fcc367b4
Validity
Not Before: Oct 23 23:01:05 2026 GMT
Not After : Oct 24 23:01:05 2026 GMT
Subject: CN=90c0d8a1de572c32eed402fd8be3565bfa30e8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6e:34:e5:f6:22:4d:32:91:87:e4:8b:e4:61:
ce:9d:0f:ec:98:1b:ec:a8:a0:88:3d:57:70:67:d8:
d0:ea:81:02:a8:57:f3:f8:d8:aa:45:9c:16:65:46:
68:b1:57:ab:23:1b:f3:73:17:88:3b:d7:92:df:5c:
65:f7:c6:74:6a:95:aa:06:cc:fa:65:be:71:2a:c1:
1f:d3:0d:28:70:cb:19:d5:d2:b5:46:ba:94:8d:ce:
1d:3d:16:35:46:91:76:15:46:2b:96:c5:eb:f3:ae:
4c:ed:29:88:a0:51:b6:b6:c7:72:f6:49:f4:7a:7c:
d3:7f:5d:24:0e:41:14:89:09:a8:da:60:6a:3d:1f:
dd:c7:e6:64:f0:fe:c2:cb:a5:f4:9a:9c:08:5c:78:
6f:d0:c2:ca:f2:8f:da:d5:44:f1:7b:c2:a2:f1:33:
3f:ff:fe:07:fb:c0:17:56:6a:a8:cc:84:fe:04:e8:
f3:3f:b8:15:35:53:f4:cd:b5:89:eb:e9:31:6a:06:
5a:8c:6f:07:a0:cb:48:9f:e3:8e:6b:33:33:e6:a5:
c2:48:ff:df:1a:52:f3:61:36:d4:93:00:e1:ea:56:
74:6f:39:f7:66:43:b3:cc:9c:3f:1f:f0:97:99:07:
fe:83:79:50:26:b9:69:a5:af:cf:a4:07:c9:60:91:
bc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C0:D8:A1:DE:57:2C:32:EE:D4:02:FD:8B:E3:56:5B:FA:30:E8:B2
X509v3 Authority Key Identifier:
keyid:A6:76:9C:D3:03:E8:4D:CD:37:A3:75:D6:E7:6B:60:29:FC:C3:67:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnac0wPoTc03o3XW52tgKfzDZ7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:7c:fa:ec:16:dc:35:2b:4e:d6:a4:15:54:5d:ed:51:b2:50:
66:86:a9:a6:ad:2c:5b:11:74:b3:a7:5c:70:4c:46:31:ed:af:
81:95:37:64:01:fc:c5:a2:78:1e:a3:98:47:3b:cd:bd:8c:eb:
c4:d9:5f:d1:40:a8:a2:34:21:21:c8:ff:0b:f2:0d:e0:66:61:
33:6c:b0:2d:a3:22:57:24:fc:ea:59:85:50:ac:eb:ba:e0:f2:
aa:b8:79:16:88:c7:75:03:2a:bd:dd:24:9b:94:e6:f0:20:00:
91:7c:b1:48:92:59:a8:8b:72:16:f1:54:f1:77:ec:38:27:24:
f3:07:3c:b7:b9:78:d3:50:cf:54:92:29:61:79:f4:06:ef:15:
52:64:5a:d3:91:66:01:9f:6b:01:0d:d5:78:80:ae:00:35:32:
e1:bc:fe:0a:cb:fa:05:b7:ac:8d:d0:6e:56:34:3f:f0:10:18:
29:9e:e0:0a:4b:af:ea:b7:c9:ce:e6:09:0c:e4:7e:1e:6e:8f:
52:12:30:d2:dd:fe:6c:13:36:65:1f:dc:eb:1c:0f:01:07:5b:
02:04:cf:cd:5d:8e:15:a5:ca:23:33:65:2e:9b:c5:9a:03:79:
52:de:c7:d8:c6:3c:6a:c8:8f:9e:c2:0b:c1:6e:35:ea:e8:54:
1e:67:f5:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFq/xs6DER+yi7vi5UZu+iOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NzY5Y2QzMDNlODRkY2QzN2EzNzVkNmU3NmI2MDI5ZmNj
MzY3YjQwHhcNMjYxMDIzMjMwMTA1WhcNMjYxMDI0MjMwMTA1WjAzMTEwLwYDVQQD
Eyg5MGMwZDhhMWRlNTcyYzMyZWVkNDAyZmQ4YmUzNTY1YmZhMzBlOGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8G405fYiTTKRh+SL5GHOnQ/smBvs
qKCIPVdwZ9jQ6oECqFfz+NiqRZwWZUZosVerIxvzcxeIO9eS31xl98Z0apWqBsz6
Zb5xKsEf0w0ocMsZ1dK1RrqUjc4dPRY1RpF2FUYrlsXr865M7SmIoFG2tsdy9kn0
enzTf10kDkEUiQmo2mBqPR/dx+Zk8P7Cy6X0mpwIXHhv0MLK8o/a1UTxe8Ki8TM/
//4H+8AXVmqozIT+BOjzP7gVNVP0zbWJ6+kxagZajG8HoMtIn+OOazMz5qXCSP/f
GlLzYTbUkwDh6lZ0bzn3ZkOzzJw/H/CXmQf+g3lQJrlppa/PpAfJYJG8zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDA2KHeVywy7tQC/YvjVlv6MOiyMB8GA1UdIwQY
MBaAFKZ2nNMD6E3NN6N11udrYCn8w2e0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG5hYzB3UG9UYzAzbzNYVzUydGdLZnpEWjdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wMjM3YmMtOWQ1ZC00ZGI0LWFmOWIt
OTdhN2I5MzI3Nzg3LzEvcG5hYzB3UG9UYzAzbzNYVzUydGdLZnpEWjdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8wMjM3YmMtOWQ1ZC00ZGI0LWFmOWItOTdhN2I5MzI3Nzg3
LzEvcG5hYzB3UG9UYzAzbzNYVzUydGdLZnpEWjdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAenz67Bbc
NStO1qQVVF3tUbJQZoappq0sWxF0s6dccExGMe2vgZU3ZAH8xaJ4HqOYRzvNvYzr
xNlf0UCoojQhIcj/C/IN4GZhM2ywLaMiVyT86lmFUKzruuDyqrh5FojHdQMqvd0k
m5Tm8CAAkXyxSJJZqItyFvFU8XfsOCck8wc8t7l401DPVJIpYXn0Bu8VUmRa05Fm
AZ9rAQ3VeICuADUy4bz+Csv6BbesjdBuVjQ/8BAYKZ7gCkuv6rfJzuYJDOR+Hm6P
UhIw0t3+bBM2ZR/c6xwPAQdbAgTPzV2OFaXKIzNlLpvFmgN5Ut7H2MY8asiPnsIL
wW416uhUHmf1fw==
-----END CERTIFICATE-----
Generated at Sat Oct 24 10:17:13 2026 by rpki-client