Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/PM6ikJsxCrIUek4InbjQLWM67aU.mft
File: PM6ikJsxCrIUek4InbjQLWM67aU.mft (raw, json)
Hash identifier: 6RVL/m4JFpO+CP3lbeXXMC8sXh9a84/xX6uA8ZGZpv4=
Subject key identifier: 0A:5D:5E:32:58:69:FD:76:C7:6A:70:97:C4:38:F0:99:BA:5E:DD:C9
Authority key identifier: 3C:CE:A2:90:9B:31:0A:B2:14:7A:4E:08:9D:B8:D0:2D:63:3A:ED:A5
Certificate issuer: /CN=3ccea2909b310ab2147a4e089db8d02d633aeda5
Certificate serial: 01A0CC35329703BFD3BA73197FF515193BBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PM6ikJsxCrIUek4InbjQLWM67aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/PM6ikJsxCrIUek4InbjQLWM67aU.mft
Manifest number: E3
Signing time: Wed 23 Sep 2026 03:00:33 +0000
Manifest this update: Wed 23 Sep 2026 03:00:33 +0000
Manifest next update: Thu 24 Sep 2026 03:00:33 +0000
Files and hashes: 1: PM6ikJsxCrIUek4InbjQLWM67aU.crl (hash: eepTSxuESB+xFtMMyf9l73kuAJX438aurlR541VgW7g=)
2: UOM6gziwTgthgiT-MMgDEZJHkKw.roa (hash: zJtaUU6Qy0ipND2taxR1aWCjYr5rjwd98bLyWYvXmh4=)
3: htL6EkfhzoE25fJ7cW4uqIL-_6Y.roa (hash: qbYEhkyiHcqaqoWIYEZ+ftQZbk2jPVv+9gYHwpRtHyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/PM6ikJsxCrIUek4InbjQLWM67aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/PM6ikJsxCrIUek4InbjQLWM67aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PM6ikJsxCrIUek4InbjQLWM67aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:35:32:97:03:bf:d3:ba:73:19:7f:f5:15:19:3b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ccea2909b310ab2147a4e089db8d02d633aeda5
Validity
Not Before: Sep 23 03:00:33 2026 GMT
Not After : Sep 24 03:00:33 2026 GMT
Subject: CN=0a5d5e325869fd76c76a7097c438f099ba5eddc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c3:f2:c1:ca:d7:e8:7f:9e:f8:08:6a:e9:6b:
6e:75:c0:98:8d:66:f9:a8:65:d9:aa:a2:82:ee:d5:
c5:4a:bc:c2:3b:88:b6:53:ee:61:11:88:8a:00:ad:
ee:33:a9:39:2b:6c:e7:f0:2c:5d:6f:7f:1c:75:72:
71:85:6a:f5:76:af:e0:8f:d5:0e:0e:e8:89:f1:5e:
b4:7b:62:f3:2a:9c:0d:d6:a6:07:a7:48:d7:52:58:
a1:e9:3a:1e:43:3d:27:13:08:b8:d0:c9:e4:67:22:
b4:b9:8e:2c:8c:81:ef:f5:3d:45:27:cb:aa:e2:b4:
0d:31:77:8c:79:3c:4e:b7:45:b3:d7:88:d1:a7:3f:
50:f1:a4:ec:73:d5:77:de:62:99:1f:6e:19:06:30:
56:d0:d0:df:c4:2c:24:11:86:8e:45:20:40:95:f8:
ba:1f:7d:15:c1:13:82:7e:c1:ec:46:60:d9:aa:62:
38:12:da:c5:6d:26:b6:00:ae:b4:9e:c9:80:2c:91:
a9:96:4c:dd:82:16:b2:6b:87:49:3b:96:9f:54:94:
05:a3:f0:ac:80:86:db:f1:d5:89:cb:52:25:9e:11:
ef:e4:87:0d:a6:36:62:af:72:f4:e0:35:84:12:bc:
f3:6f:23:10:c6:e7:ab:4a:5b:eb:5d:90:5a:73:8b:
43:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5D:5E:32:58:69:FD:76:C7:6A:70:97:C4:38:F0:99:BA:5E:DD:C9
X509v3 Authority Key Identifier:
keyid:3C:CE:A2:90:9B:31:0A:B2:14:7A:4E:08:9D:B8:D0:2D:63:3A:ED:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PM6ikJsxCrIUek4InbjQLWM67aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/PM6ikJsxCrIUek4InbjQLWM67aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/PM6ikJsxCrIUek4InbjQLWM67aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b2:91:9c:31:a3:6c:a4:dc:83:28:a9:78:1c:c4:9d:54:f8:
af:85:61:8f:ef:f1:7e:65:5a:4f:00:e8:ed:54:c0:5e:4f:e1:
46:2c:aa:5e:00:ab:82:d7:9b:8e:33:a0:12:26:8d:b9:98:6b:
6b:e5:0b:5a:92:22:67:92:fe:2f:3d:d4:c0:c8:f0:85:c7:4c:
da:32:96:b5:43:20:d9:ec:a4:bb:d5:a5:d7:61:6a:8c:ea:5f:
0f:f5:29:bc:a3:cd:2b:9f:cd:2f:04:24:22:b7:a8:57:3c:fa:
2c:3a:b1:fa:ee:5f:52:a0:4e:4c:7f:79:cf:e3:da:d8:86:6a:
ae:52:5d:47:de:e8:98:c2:8d:35:fb:2c:af:28:f4:ba:c5:e0:
3d:1e:0d:51:91:3b:04:31:a9:59:f8:c7:a5:c7:76:a4:a5:94:
33:c5:6a:ed:6a:76:45:44:4a:63:c9:3d:ad:bb:42:1d:7f:cc:
07:b3:ad:88:0c:db:18:d0:62:81:0e:95:81:ad:28:7d:9e:0b:
62:d0:3c:2b:f1:54:d9:4a:80:3e:3a:0e:35:bd:e4:04:96:26:
16:42:9d:a0:c9:12:de:dc:b2:35:25:b5:7b:d4:65:40:bf:e9:
95:86:ff:aa:a6:ad:d4:31:99:52:3c:b0:72:c9:a8:89:7a:75:
b7:01:7d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:05:35 2026 by rpki-client