Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
File: PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft (raw, json)
Hash identifier: FawPPpc7cUccy6C/H2+2gfWyT2IkVymUjP52y7FFkbw=
Subject key identifier: 7C:42:57:AF:61:50:C4:BF:9D:85:95:6F:E6:C8:96:21:AC:D9:5B:32
Authority key identifier: 3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44
Certificate issuer: /CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44
Certificate serial: 01A0D20044374C66BBBB41DFBB1941688C43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
Manifest number: 03A9
Signing time: Thu 24 Sep 2026 06:00:27 +0000
Manifest this update: Thu 24 Sep 2026 06:00:27 +0000
Manifest next update: Fri 25 Sep 2026 06:00:27 +0000
Files and hashes: 1: 52gTPJdQN2IyRsgf9iKgbNid4cI.roa (hash: 5lE63bjKcJ3503lnep/t29RA6BQhkuc041jpBZfJLfo=)
2: PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl (hash: G4rxbrg3cGyiFBae8LEHo7WWXbYJpE31xpDh/+M1jKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:44:37:4c:66:bb:bb:41:df:bb:19:41:68:8c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44
Validity
Not Before: Sep 24 06:00:27 2026 GMT
Not After : Sep 25 06:00:27 2026 GMT
Subject: CN=7c4257af6150c4bf9d85956fe6c89621acd95b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6c:a1:6e:8a:88:24:00:14:59:c9:a2:4c:76:
63:db:24:07:16:ed:99:4a:97:6c:b7:d6:d6:a4:8c:
76:b1:55:70:48:89:4b:c6:80:c8:a9:8f:e4:58:1d:
6f:6f:30:45:ca:33:80:bc:99:fe:92:0f:03:e2:0c:
6e:2f:6a:13:ed:9d:d5:39:c0:df:b1:84:d9:d3:73:
5d:03:0b:15:00:a1:8d:82:3f:77:d5:a6:68:ac:72:
3b:1e:ee:56:09:ec:69:5d:ba:c1:a6:1a:da:95:18:
7a:64:95:5c:b6:1d:8d:f8:42:f1:d5:25:03:b9:84:
5a:32:ad:26:eb:b8:b3:dc:e5:ac:4a:73:17:fa:38:
8c:bb:7d:06:21:77:4a:f6:3a:8a:6e:a6:de:b0:56:
18:bc:2b:f2:0e:81:f7:f8:47:2a:86:a0:7f:28:17:
d9:89:dc:b6:c8:f1:5c:3d:ac:ab:d8:26:0c:af:2b:
b9:d8:36:61:99:b7:ac:86:91:e5:65:aa:14:a8:8b:
67:32:94:9d:5c:ed:66:84:1f:91:ad:d2:ae:1d:60:
cc:63:3b:46:3e:15:73:74:53:bc:0f:ad:76:f6:74:
7f:89:ee:54:63:3c:b0:7e:a3:72:58:73:46:fc:b0:
34:6c:bf:19:61:11:f9:fb:95:a4:49:b4:f6:b7:79:
1b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:42:57:AF:61:50:C4:BF:9D:85:95:6F:E6:C8:96:21:AC:D9:5B:32
X509v3 Authority Key Identifier:
keyid:3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ba:2e:77:0a:89:b9:12:5c:ad:6b:df:4a:3f:fa:d4:23:64:
89:24:b5:e2:1c:f7:41:65:05:67:c2:cc:d1:ba:92:2e:cb:7d:
ff:65:cb:32:fe:05:a2:06:13:b9:ff:b6:c3:5d:3b:52:1d:43:
9e:8d:01:82:04:90:cc:c8:4c:45:b9:40:2b:a2:b9:b9:7a:ce:
f0:21:de:1f:e4:7a:e5:15:6c:5c:03:8f:54:3c:44:6c:0c:cc:
57:f9:68:dd:9a:78:11:05:43:25:3d:cf:d4:bb:76:47:90:93:
c8:18:51:3c:9d:5c:31:50:92:41:f8:97:dc:10:69:53:dc:2d:
4e:81:68:48:91:5d:26:3b:b8:15:c6:6d:0f:42:ff:d6:b8:c2:
13:6a:5b:f3:91:b3:5a:d0:f5:bb:98:86:8f:48:19:6a:6e:37:
d4:df:17:3a:72:8d:06:a5:39:b2:ff:96:bb:ae:49:ca:9a:4c:
93:18:9a:21:af:fa:fe:a9:7d:bc:2f:f5:8e:4e:a7:36:a8:80:
14:9d:44:49:f1:4d:d0:3d:81:fb:dd:98:39:c3:64:fb:36:ec:
8c:b9:0a:30:30:2f:ca:84:28:8c:4b:01:1f:6d:c2:b3:c3:93:
e6:f4:c1:47:a5:1e:5a:9a:68:62:83:88:8d:7f:c6:e7:95:85:
44:7a:7a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:06:26 2026 by rpki-client