Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft
File: pnac0wPoTc03o3XW52tgKfzDZ7Q.mft (raw, json)
Hash identifier: fkQm/enybuipWYtKtLezdraLWLgbx9/5Zom43W+sNhs=
Subject key identifier: FA:FC:C7:40:C5:9A:0E:1C:D2:B9:8D:91:FC:AF:04:B8:10:A1:4A:B5
Authority key identifier: A6:76:9C:D3:03:E8:4D:CD:37:A3:75:D6:E7:6B:60:29:FC:C3:67:B4
Certificate issuer: /CN=a6769cd303e84dcd37a375d6e76b6029fcc367b4
Certificate serial: 019D39408BC832DD84CEFB28E06537122E5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnac0wPoTc03o3XW52tgKfzDZ7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft
Manifest number: 021B
Signing time: Sun 29 Mar 2026 11:00:24 +0000
Manifest this update: Sun 29 Mar 2026 11:00:24 +0000
Manifest next update: Mon 30 Mar 2026 11:00:24 +0000
Files and hashes: 1: ODmnFvkoRJ8KBXIwmG3VyMbhpMg.roa (hash: UzQ9zfqJ6GmOojpgnIMRQs0ikmH8yfkpdXYgZqB0SfM=)
2: pnac0wPoTc03o3XW52tgKfzDZ7Q.crl (hash: Qg1fm87BnjCsxm6unHGrxJuFjLA751JK6WsQNrDvR+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnac0wPoTc03o3XW52tgKfzDZ7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:8b:c8:32:dd:84:ce:fb:28:e0:65:37:12:2e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6769cd303e84dcd37a375d6e76b6029fcc367b4
Validity
Not Before: Mar 29 11:00:24 2026 GMT
Not After : Mar 30 11:00:24 2026 GMT
Subject: CN=fafcc740c59a0e1cd2b98d91fcaf04b810a14ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d1:f1:74:7b:68:71:89:a4:ce:2f:cf:1f:03:
33:5c:67:20:5c:bf:86:4a:c4:d0:01:08:a0:d6:95:
d2:44:d8:fe:49:f8:76:82:15:26:42:b0:1d:68:44:
3c:f4:ab:a2:5a:34:ea:b7:af:03:0e:6e:3e:fc:5f:
21:4e:5c:e6:a7:40:80:fd:81:ea:07:b2:6e:52:ee:
f2:72:fb:02:37:52:8d:0d:fc:98:d0:6c:63:d6:5b:
db:d9:75:6c:89:dd:55:27:54:46:f8:15:cd:46:5a:
70:c0:6c:29:e9:31:b9:9f:5a:ca:d3:6f:fe:06:fd:
9e:55:45:b5:94:0f:d9:c2:b9:d6:3a:3d:f1:6d:31:
30:ca:f8:e2:c5:c6:13:b1:ad:7d:8b:35:fa:40:47:
b7:55:ba:7b:c3:8a:ad:22:6e:5d:49:e6:83:bf:95:
59:c2:4b:47:f7:63:2b:4c:da:23:c1:fc:fa:be:86:
c7:e1:55:b6:00:ca:e8:05:40:3f:36:95:0a:af:8d:
36:1c:78:37:f0:ac:c4:5b:23:ff:ed:44:55:33:d8:
32:a8:78:94:9f:5e:91:09:78:20:ac:df:46:c4:d2:
2d:d7:35:9b:5e:77:50:5f:1d:8c:62:2a:9e:ba:77:
5a:6b:b8:eb:b3:fe:ec:bb:59:6e:9e:88:4f:80:99:
6b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FC:C7:40:C5:9A:0E:1C:D2:B9:8D:91:FC:AF:04:B8:10:A1:4A:B5
X509v3 Authority Key Identifier:
keyid:A6:76:9C:D3:03:E8:4D:CD:37:A3:75:D6:E7:6B:60:29:FC:C3:67:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnac0wPoTc03o3XW52tgKfzDZ7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ee:80:93:8f:d0:4a:55:80:e8:2a:32:c3:b3:af:c8:24:00:
61:2c:aa:9a:90:96:41:24:9c:0d:23:1a:8d:d1:42:2b:86:db:
6d:4e:16:85:02:29:43:7c:a1:d8:6b:3a:e3:eb:08:fe:25:24:
62:88:c0:50:4e:d7:37:57:f3:2a:47:c6:4c:74:5a:86:38:55:
2a:85:11:cf:fa:a3:1e:8e:77:0e:86:83:59:7e:af:40:e3:b6:
62:77:49:9c:f7:45:fd:a8:5e:c2:56:3a:28:b6:7d:a6:16:58:
64:e7:7d:71:b8:a0:97:ea:75:12:d9:93:13:7c:b5:09:c5:1a:
3c:32:e3:9e:22:5d:ab:32:75:6d:ac:83:b3:d0:8e:c8:07:2b:
fd:54:26:e0:24:23:09:ec:7a:43:56:75:44:25:8a:05:43:28:
01:31:b0:c3:f5:f6:7a:62:a8:80:c1:f4:76:e3:03:05:ca:ea:
7a:20:43:b7:59:e4:d3:76:fe:0d:d1:78:d0:a0:ad:f3:3a:6a:
88:93:50:b5:9b:ea:8d:71:c4:71:a9:90:9d:46:27:6b:c6:58:
13:d8:78:58:8d:04:29:1b:ce:75:72:9b:c4:79:66:85:89:4a:
72:14:53:40:f4:37:49:40:3f:14:8f:e3:b8:69:e0:f7:01:2c:
35:49:e8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:59 2026 by rpki-client