Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
File: PN4kcMhWOUlIej54dDxUTJnsimQ.mft (raw, json)
Hash identifier: UEyQS0yo/7BtAjSJ7IrRc/vKqDfNoypkcauzy+sss1g=
Subject key identifier: B2:0B:93:0E:99:83:EB:EB:E5:C2:2E:AF:5E:C1:F7:73:AE:3C:83:7A
Authority key identifier: 3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
Certificate issuer: /CN=3cde2470c8563949487a3e78743c544c99ec8a64
Certificate serial: 01A0E1748A952F53550930C55992CC98CBFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
Manifest number: 0CF7
Signing time: Sun 27 Sep 2026 06:01:46 +0000
Manifest this update: Sun 27 Sep 2026 06:01:46 +0000
Manifest next update: Mon 28 Sep 2026 06:01:46 +0000
Files and hashes: 1: 6dIzMwo0G6tAhuml4GfIJNjdjVQ.roa (hash: wpsN0tsYTVD9eZ1wIkFPmbb5yPxiazJ0MhFoB9FJQW4=)
2: DR9MoQCYtXaLoml4Dm1_5qJwPs4.roa (hash: nXlN3VKxLNyqdBBXWDPV2SzM6R5K4D1KJpMD50qdg/A=)
3: PN4kcMhWOUlIej54dDxUTJnsimQ.crl (hash: WX9rIvb38a7Z54+ajEltxC0vmi2ZXBvxOKdSQ3yPSnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:8a:95:2f:53:55:09:30:c5:59:92:cc:98:cb:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cde2470c8563949487a3e78743c544c99ec8a64
Validity
Not Before: Sep 27 06:01:46 2026 GMT
Not After : Sep 28 06:01:46 2026 GMT
Subject: CN=b20b930e9983ebebe5c22eaf5ec1f773ae3c837a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9e:7c:1f:70:74:d2:60:b9:e1:fb:2e:8f:6c:
f1:b4:48:40:e3:b7:51:d3:49:54:07:60:d0:c4:c3:
66:db:1b:d7:c3:99:39:cc:23:db:79:6c:82:b2:65:
08:04:ca:49:e9:f1:d7:7c:c2:c2:cc:35:80:4f:58:
4a:8f:e5:6f:4b:f6:52:a9:de:a4:f3:28:80:84:7b:
67:77:03:60:d1:9c:78:cd:26:91:41:b0:b0:fe:59:
80:2a:96:be:6c:d2:bb:41:86:33:48:4f:3c:a6:61:
4f:81:bf:62:17:d6:90:89:66:ff:c4:b8:25:e6:5a:
14:f6:27:63:fc:66:9e:72:87:be:eb:71:a6:8b:a6:
59:f3:73:53:59:c3:f3:c7:16:13:95:d5:78:4a:10:
8a:4b:36:ed:19:e5:d7:36:dd:82:7e:87:be:13:f7:
83:f1:8d:33:2d:fe:0c:aa:ed:41:02:7d:dd:d4:29:
80:e7:15:ce:e7:b7:7c:7a:a7:35:ef:3c:d6:df:22:
88:71:dc:9a:45:b6:08:09:0e:41:f7:da:2a:d6:b9:
6f:e2:9c:dd:6b:dd:33:ba:71:f3:7d:a0:a1:ee:ac:
16:68:b0:e1:fe:f8:d7:9e:84:3c:63:89:d0:05:a2:
44:3c:eb:7d:f6:cb:44:c0:4c:72:0d:41:c4:64:96:
c6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0B:93:0E:99:83:EB:EB:E5:C2:2E:AF:5E:C1:F7:73:AE:3C:83:7A
X509v3 Authority Key Identifier:
keyid:3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5c:a9:da:00:3b:15:46:8e:c7:0d:11:c1:d3:d9:5e:65:94:
da:fb:95:58:53:27:87:c9:c2:84:27:cc:69:74:fd:b1:8f:ec:
83:5c:cb:69:98:7c:26:6e:95:62:87:68:c9:e7:02:7f:bb:43:
ff:f7:a2:7f:05:00:03:68:8d:1a:5a:80:2c:49:ea:e8:15:ea:
e4:4c:d2:75:2f:5f:4f:1a:bf:3e:cb:78:88:9d:72:80:b4:40:
05:47:4a:81:56:e8:0b:27:0e:3f:09:41:54:c5:0c:68:38:95:
5a:52:50:72:d4:38:b2:c0:5b:e8:4c:37:66:a9:63:01:e3:7b:
dc:7f:e5:42:60:61:6e:7a:fe:ca:25:02:c2:1b:72:b0:76:48:
fd:6e:64:6a:e9:b1:91:f6:d2:3e:bc:12:aa:52:ee:4c:10:37:
19:47:5a:00:e9:a6:05:d1:17:f5:15:1d:09:3d:75:83:4c:e4:
08:ae:33:64:ae:13:1d:83:ae:9c:17:80:de:44:21:10:96:db:
fe:d5:ff:d4:dd:8d:e5:c6:33:96:03:de:e6:7d:4a:b4:8c:66:
8d:19:d9:c5:03:62:0b:67:3a:a2:bf:21:55:bb:a7:ea:fb:a9:
96:40:9a:5e:e4:31:ca:4c:a3:ac:e6:99:6d:cf:b7:d5:65:14:
3d:94:ca:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:11:12 2026 by rpki-client