Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
File: PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft (raw, json)
Hash identifier: trN+ghGYEpGczVvKlUvmU24Vnnbfw74LqJeHIrpCuMw=
Subject key identifier: AE:4C:53:90:9D:86:C4:3A:CB:30:4A:EE:4D:BC:6A:B1:3A:B6:44:E2
Authority key identifier: 3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
Certificate issuer: /CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Certificate serial: 01A106CA776D45732DC045331B4773375F5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
Manifest number: 0C40
Signing time: Sun 04 Oct 2026 12:01:34 +0000
Manifest this update: Sun 04 Oct 2026 12:01:34 +0000
Manifest next update: Mon 05 Oct 2026 12:01:34 +0000
Files and hashes: 1: PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl (hash: v0qPJy+eS+jitK59PLNqoVE2plw/BE01JMJJI6b2E8Y=)
2: fUppB1VDu1vL2ViKYL-vIqtVeA8.roa (hash: I/nIKmlTZJsaPW6FiqmV19GI9Y+ltPvlFVp7DDT67CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:ca:77:6d:45:73:2d:c0:45:33:1b:47:73:37:5f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Validity
Not Before: Oct 4 12:01:34 2026 GMT
Not After : Oct 5 12:01:34 2026 GMT
Subject: CN=ae4c53909d86c43acb304aee4dbc6ab13ab644e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b6:33:84:52:6a:9d:68:3f:aa:00:ed:9c:2c:
63:65:22:d9:d4:60:56:dc:c2:38:a0:f7:67:29:fc:
49:c6:cf:78:4d:0d:8b:66:7d:3c:ed:3c:9a:f8:63:
da:ae:25:b6:cf:1c:a9:08:2b:55:bc:b1:fb:77:8d:
b2:ce:e8:a7:64:f0:4c:40:49:7b:0a:a2:96:a2:ee:
6e:a2:81:a0:fd:9a:6a:04:1d:2a:ab:e7:9b:e1:a6:
50:b8:d5:2d:47:30:c3:d9:ce:a6:a4:13:15:85:73:
49:7b:3a:44:77:6b:86:ec:18:17:2a:12:4a:0e:e1:
cf:4f:4f:51:e4:0f:30:07:9c:4d:89:ac:dc:d6:9e:
14:01:9d:39:d7:6f:8a:2a:27:47:33:4c:73:c0:07:
51:52:d2:01:bd:37:fa:f3:68:4c:3d:45:cc:4d:65:
aa:34:0a:ff:f3:01:cd:bf:1b:06:30:ab:95:b3:19:
c2:1b:8a:f8:2b:6b:9a:7b:11:72:f9:04:d0:48:87:
0d:41:32:1b:51:a6:70:96:13:c8:d1:17:4c:56:2e:
73:65:a3:a8:1a:5f:b3:01:c4:a4:cc:e3:c9:f0:8c:
b6:a7:c2:7a:97:3e:cd:e1:bd:8b:8b:8a:3f:de:70:
71:a6:ef:1d:07:e6:6b:c2:de:a8:f0:a6:f0:5f:1d:
6b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4C:53:90:9D:86:C4:3A:CB:30:4A:EE:4D:BC:6A:B1:3A:B6:44:E2
X509v3 Authority Key Identifier:
keyid:3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:6b:aa:f3:49:bd:ba:a7:41:21:79:8e:76:9b:cb:8b:23:bb:
7e:67:58:35:fa:f5:44:65:63:c7:84:a4:f2:0c:8c:d7:86:5c:
e3:86:bc:3b:30:32:a0:41:56:af:ea:9d:6b:dc:0f:f5:82:a5:
21:64:1d:0c:f1:48:79:f7:47:83:21:1f:5d:93:c0:97:da:64:
90:c2:ed:1e:d3:69:2c:cb:94:c6:06:89:2f:e3:c2:c6:a2:a9:
3e:ea:78:42:f6:c5:29:fb:ad:6c:ec:bf:9b:52:ad:f2:25:4a:
a1:04:3d:59:b0:52:a5:c3:9f:79:a8:bc:69:68:f5:05:cf:6d:
f1:7c:c6:ad:19:32:f9:6a:79:4d:7f:94:61:be:4d:81:2c:74:
4d:8a:84:59:0e:76:7a:79:e4:82:f4:b2:55:cc:f6:4f:6e:4d:
3b:c6:df:39:28:33:46:03:f7:28:78:b6:46:62:3b:26:91:68:
48:56:32:3f:08:8b:a3:6e:4d:8b:b4:7b:d4:32:1d:6c:c2:56:
e7:12:d2:a2:de:76:79:93:3a:b8:93:95:d4:98:05:85:91:61:
27:e7:48:9e:0b:b1:96:9e:c8:de:cc:02:59:73:0d:f7:95:05:
b2:e7:85:8f:08:93:4d:80:60:4b:4c:3e:58:27:88:fc:bd:27:
2b:e7:9c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:40:44 2026 by rpki-client