Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft
File: PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft (raw, json)
Hash identifier: pkYTaBIyxsPldkXYbHwyTF9Z9g2bLFN7xWpg7JnIIYY=
Subject key identifier: 20:72:80:F2:46:B2:1C:42:44:E8:27:FB:C0:28:2D:1D:3F:C8:C7:E4
Authority key identifier: 3C:48:B9:2E:80:94:D7:78:02:17:E3:25:4C:59:72:0B:C2:A9:76:38
Certificate issuer: /CN=3c48b92e8094d7780217e3254c59720bc2a97638
Certificate serial: 01A04084D89D8C3DF1440FDB24CAE39DF11D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEi5LoCU13gCF-MlTFlyC8Kpdjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft
Manifest number: 033A
Signing time: Thu 27 Aug 2026 00:00:43 +0000
Manifest this update: Thu 27 Aug 2026 00:00:43 +0000
Manifest next update: Fri 28 Aug 2026 00:00:43 +0000
Files and hashes: 1: PEi5LoCU13gCF-MlTFlyC8Kpdjg.crl (hash: ISfrTjMUAbtLzRcMv+oIkQjpYf5HkTOGxRioR8iQI50=)
2: Xu6LJ5NwOjulzYk7ThddVSSoUcw.roa (hash: lwbMkRX85sGp49MdbyhTOstP4KWwGOTsiskzrGm1TQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEi5LoCU13gCF-MlTFlyC8Kpdjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:84:d8:9d:8c:3d:f1:44:0f:db:24:ca:e3:9d:f1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c48b92e8094d7780217e3254c59720bc2a97638
Validity
Not Before: Aug 27 00:00:43 2026 GMT
Not After : Aug 28 00:00:43 2026 GMT
Subject: CN=207280f246b21c4244e827fbc0282d1d3fc8c7e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:79:fe:46:a2:42:bd:67:b0:4a:ac:2e:ec:
a7:5f:ec:dc:bd:66:06:13:05:67:9d:54:25:6a:8f:
e2:04:2b:b8:0b:d2:fa:fd:d1:7f:d4:7a:0f:2a:2c:
b8:6d:16:5b:a5:88:04:91:7f:2e:fa:df:94:30:80:
c6:28:e1:79:c9:89:3a:b1:ec:94:ca:3e:97:d6:ef:
f5:08:b1:3c:85:2f:9e:6e:6f:3e:82:a3:66:42:ee:
97:f3:5e:72:5c:fe:bd:5c:19:18:2d:72:08:18:11:
55:dd:73:8d:37:1e:5b:df:dc:fe:09:25:9e:80:3b:
21:f5:c0:d3:73:d6:0d:ee:cc:e1:9f:87:f2:64:1d:
6b:bc:cd:c3:63:88:f8:19:95:5f:07:ee:55:12:3d:
58:37:dd:3e:25:57:ff:21:32:26:92:c2:f9:2a:d1:
74:b4:9c:e0:e6:6c:0c:32:61:7b:69:d5:3b:bc:64:
1e:cd:e5:10:9f:fe:9f:18:8a:7f:75:21:db:fa:0c:
b4:1f:bb:99:39:bb:43:8a:0f:d5:67:c8:27:61:25:
bd:ae:68:13:47:78:71:79:91:0e:7a:1e:e4:46:dc:
1d:d4:60:5e:eb:62:c5:91:55:d1:1a:d9:07:1c:13:
1a:93:2f:4f:e5:ee:ae:84:68:9a:01:d7:30:4e:db:
d2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:72:80:F2:46:B2:1C:42:44:E8:27:FB:C0:28:2D:1D:3F:C8:C7:E4
X509v3 Authority Key Identifier:
keyid:3C:48:B9:2E:80:94:D7:78:02:17:E3:25:4C:59:72:0B:C2:A9:76:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEi5LoCU13gCF-MlTFlyC8Kpdjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:93:27:3f:73:89:73:6d:fc:06:63:0c:04:80:5a:bd:15:9f:
98:36:45:41:3b:e9:e5:e6:28:00:6c:94:33:91:5b:9e:81:24:
c3:c8:c8:ba:0d:22:a1:57:b5:86:96:60:30:d8:ee:1f:b5:6d:
be:6e:04:3d:f9:91:8a:96:f1:a1:ee:7c:78:03:ae:00:2a:5e:
ca:53:81:d7:e4:e8:08:06:5b:0f:3b:e1:d1:7f:63:50:8c:8b:
a2:b6:84:ba:5a:bb:13:88:7e:22:b4:c3:65:2c:39:70:21:cf:
9c:62:a7:45:b9:a8:17:92:e6:d9:f3:85:4c:43:14:5d:31:cb:
c6:16:d1:ae:4a:53:7a:f9:08:73:5a:44:b7:b0:28:b9:b5:ed:
48:d5:90:4a:fd:96:b7:ab:b4:8a:bf:97:92:09:1e:01:d0:31:
6e:cf:af:10:78:1d:ca:d5:73:81:b1:4b:77:2b:fd:8f:9e:a8:
ec:35:02:83:df:4c:73:71:3b:a7:6c:ec:ac:fe:72:6d:45:cc:
83:af:82:bb:1f:4e:17:cf:d6:2b:2c:58:67:d5:28:0c:e3:bd:
00:de:dc:f4:b6:6f:64:91:8c:35:e6:c8:9d:89:b1:ba:83:db:
9a:41:a0:40:97:e8:de:15:49:21:26:52:3f:39:8b:aa:e2:25:
4d:28:e4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:53:08 2026 by rpki-client