Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/PM6ikJsxCrIUek4InbjQLWM67aU.mft
File: PM6ikJsxCrIUek4InbjQLWM67aU.mft (raw, json)
Hash identifier: 9D5tGOjii3StBUvZx1GaO6V8EI0LaNXfJZN4irjD1BA=
Subject key identifier: CF:4D:F5:64:43:B3:F3:E5:51:47:52:C9:24:35:F6:77:C9:32:B6:F0
Authority key identifier: 3C:CE:A2:90:9B:31:0A:B2:14:7A:4E:08:9D:B8:D0:2D:63:3A:ED:A5
Certificate issuer: /CN=3ccea2909b310ab2147a4e089db8d02d633aeda5
Certificate serial: 01A1DE70E8E7C66EE52C8B7079F0F46D77B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PM6ikJsxCrIUek4InbjQLWM67aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/PM6ikJsxCrIUek4InbjQLWM67aU.mft
Manifest number: 0171
Signing time: Sun 15 Nov 2026 09:01:43 +0000
Manifest this update: Sun 15 Nov 2026 09:01:43 +0000
Manifest next update: Mon 16 Nov 2026 09:01:43 +0000
Files and hashes: 1: PM6ikJsxCrIUek4InbjQLWM67aU.crl (hash: Z49JvuM4vctNtr5VsqgDWM009L/tROO0EWWcPtb5ZrU=)
2: UOM6gziwTgthgiT-MMgDEZJHkKw.roa (hash: zJtaUU6Qy0ipND2taxR1aWCjYr5rjwd98bLyWYvXmh4=)
3: htL6EkfhzoE25fJ7cW4uqIL-_6Y.roa (hash: qbYEhkyiHcqaqoWIYEZ+ftQZbk2jPVv+9gYHwpRtHyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/PM6ikJsxCrIUek4InbjQLWM67aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/PM6ikJsxCrIUek4InbjQLWM67aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PM6ikJsxCrIUek4InbjQLWM67aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:e8:e7:c6:6e:e5:2c:8b:70:79:f0:f4:6d:77:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ccea2909b310ab2147a4e089db8d02d633aeda5
Validity
Not Before: Nov 15 09:01:43 2026 GMT
Not After : Nov 16 09:01:43 2026 GMT
Subject: CN=cf4df56443b3f3e5514752c92435f677c932b6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2a:99:c6:25:db:8a:2c:61:75:a1:96:30:f9:
3f:3f:97:c4:63:8d:e9:3e:b5:ce:60:c7:04:99:02:
29:8c:80:cd:be:69:d5:30:cd:8e:aa:97:35:9f:f5:
cb:4a:03:de:b4:99:39:1d:bd:f2:a7:df:3a:76:5c:
2e:6b:58:7a:65:61:2b:4f:2b:ec:3c:7f:8f:11:2e:
ec:40:86:ac:78:f3:fe:61:85:50:be:86:f9:f8:04:
75:24:e5:28:1b:db:b3:7a:82:4b:c4:5d:8f:a3:a3:
78:02:bc:4c:33:24:14:47:fe:ca:f4:58:59:45:33:
f5:99:2e:ab:9f:2a:b3:e6:49:08:33:de:96:9b:ab:
2d:0e:ff:cb:b0:dd:00:e4:b1:db:97:c3:a1:b3:a9:
94:73:89:3d:9c:0c:33:a3:40:8e:f8:7b:c0:48:83:
7a:52:48:6c:2c:41:f5:08:56:07:28:3f:70:94:f7:
92:22:bf:83:86:50:d6:c0:6c:29:7b:2a:53:15:dc:
74:9f:13:c6:21:96:2a:10:d6:d1:14:fa:6e:de:e2:
16:ad:1d:a0:e3:7c:49:48:59:6c:6f:70:bb:bf:c0:
a2:ab:d8:b6:65:ac:7d:89:f7:49:ad:31:19:d2:db:
02:cb:c8:ed:00:5f:a0:c4:19:6e:2f:e7:0a:bd:80:
5a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:4D:F5:64:43:B3:F3:E5:51:47:52:C9:24:35:F6:77:C9:32:B6:F0
X509v3 Authority Key Identifier:
keyid:3C:CE:A2:90:9B:31:0A:B2:14:7A:4E:08:9D:B8:D0:2D:63:3A:ED:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PM6ikJsxCrIUek4InbjQLWM67aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/PM6ikJsxCrIUek4InbjQLWM67aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/PM6ikJsxCrIUek4InbjQLWM67aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:00:c3:0a:90:39:69:f0:f1:8b:3e:da:e1:c4:71:22:9e:b5:
80:ad:4f:9b:57:4b:0b:c4:5f:71:e6:b9:ad:8c:46:95:a4:b7:
3c:c4:a4:08:25:0e:50:b9:4a:11:36:6e:7b:b3:88:82:35:45:
26:87:3a:8f:9f:44:95:da:ee:f4:aa:f4:b8:7d:cf:6d:d9:ec:
b9:ae:7e:39:2a:5d:41:97:ea:c7:30:c0:60:cb:c7:d4:fb:d7:
77:0a:7e:3d:48:cf:94:f0:d2:08:da:78:c7:2b:d3:f6:b1:2e:
c6:30:89:0b:9d:7f:99:c9:da:90:f2:de:fe:f7:49:39:8a:a3:
34:f8:f2:a4:5f:63:56:21:19:6e:95:2d:c3:5f:32:bf:eb:a6:
a7:82:b1:d8:15:69:16:9c:a4:b5:b0:c2:65:34:12:7d:fb:25:
ea:0d:7b:34:62:13:6b:e0:1e:49:33:ba:f2:9c:88:67:0f:ec:
54:98:7a:ad:a5:89:67:15:b6:aa:82:79:ea:84:d0:4c:24:d9:
25:2b:14:93:76:cf:98:fb:b1:bb:95:ed:03:20:48:32:f5:70:
bb:65:0e:88:5b:d2:30:97:64:02:6d:b6:30:08:70:cd:17:e9:
4c:3d:5d:1f:b1:46:9f:ab:13:32:b5:b0:77:7f:ee:9e:0d:e7:
75:8a:ba:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:37:56 2026 by rpki-client