Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/PFEOIbocnWAFiRMCVaNpKPHI8js.mft
File: PFEOIbocnWAFiRMCVaNpKPHI8js.mft (raw, json)
Hash identifier: eGQYHGEk+CySIcvnhBfP0sygoIo8yfStiAXlMUMvDEQ=
Subject key identifier: 65:29:41:FE:41:1D:81:9C:59:C3:05:A7:C3:D5:8F:99:A1:D0:9B:FD
Authority key identifier: 3C:51:0E:21:BA:1C:9D:60:05:89:13:02:55:A3:69:28:F1:C8:F2:3B
Certificate issuer: /CN=3c510e21ba1c9d600589130255a36928f1c8f23b
Certificate serial: 01A0E92ED62EE5B6D42D6026FEF04FC21D77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFEOIbocnWAFiRMCVaNpKPHI8js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/PFEOIbocnWAFiRMCVaNpKPHI8js.mft
Manifest number: F2
Signing time: Mon 28 Sep 2026 18:02:35 +0000
Manifest this update: Mon 28 Sep 2026 18:02:35 +0000
Manifest next update: Tue 29 Sep 2026 18:02:35 +0000
Files and hashes: 1: 0vMwcO-prVCBiJ1HH4N8JQBbTFg.roa (hash: DDQIEVV7Bq568hIRJt4vCWeNTR0mribCMhLMaet0/Xs=)
2: FX65EUsBfwC3KYo7_xOGFuEzOJk.roa (hash: KHm9K/+5wb0bpzl81mZXqyHKMzk0Qwhwf/+PXfXSvuY=)
3: J_NAqgVioUH73xW524wNxtH7C6E.roa (hash: tIH8jdWye/GvM9gQvJIJ7V27p73rrL92FZ33H+k5YoQ=)
4: OHMkQc20XLUuhWG9TR6YUIfUeNQ.roa (hash: Q/okgqIrrRu57dOM1pUZVReELn18xaaSWaDkfsqY+zY=)
5: PFEOIbocnWAFiRMCVaNpKPHI8js.crl (hash: EmbACh7D2czqkJYw8C3eVaPY64/c8Xpe6umTKTjQXEk=)
6: b4ljpqvJJ99yhvWp5OXK-V_rwA4.roa (hash: uWVsOUuJFYO4g8DznA/hJUwAXuQNluCi4DapHS7DI2c=)
7: u17kqdLSyyJq5U0Zxqr0EXjDmmI.roa (hash: MsgYyS7H7F1Fay5YAf1h7SpoZxvLFnXiACTNhjQnhyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/PFEOIbocnWAFiRMCVaNpKPHI8js.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/PFEOIbocnWAFiRMCVaNpKPHI8js.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFEOIbocnWAFiRMCVaNpKPHI8js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2e:d6:2e:e5:b6:d4:2d:60:26:fe:f0:4f:c2:1d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c510e21ba1c9d600589130255a36928f1c8f23b
Validity
Not Before: Sep 28 18:02:35 2026 GMT
Not After : Sep 29 18:02:35 2026 GMT
Subject: CN=652941fe411d819c59c305a7c3d58f99a1d09bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:62:48:ba:47:3a:3f:6a:5f:dd:39:5c:d6:66:
0c:85:c3:ac:1a:48:98:59:e5:8d:23:96:48:bc:e4:
76:d8:3a:a5:aa:db:e1:6a:84:de:a5:1b:58:1c:1b:
8f:27:c2:e8:a3:72:73:6b:83:92:f6:da:39:47:a3:
d3:89:45:9f:18:03:3f:44:1e:60:1c:7c:4e:c5:bb:
4f:c8:07:68:c1:19:42:33:77:b2:12:71:d1:ce:01:
c7:f0:a6:23:c6:87:cc:be:bb:08:eb:14:e8:28:c8:
12:a9:5a:07:b5:d4:3f:e9:56:6a:52:66:6d:a5:9c:
ec:df:22:d7:46:6c:44:c1:54:fd:68:6d:fa:30:9d:
2e:f3:8d:00:f0:b0:ff:37:90:e2:9a:7c:30:d1:6b:
f2:2e:c5:9c:47:20:b0:d0:90:60:39:d0:3d:dd:6e:
78:ea:98:53:9a:02:a7:0a:e8:e4:99:ea:d6:60:5e:
d1:8a:b7:ae:d5:43:04:bf:88:55:a5:fc:07:f7:89:
8b:4e:b2:6f:26:3e:7f:44:41:d7:25:d3:93:94:d7:
b1:ce:b9:9e:07:b6:2c:09:44:a1:03:ed:51:64:fb:
1b:f3:b7:cf:a2:5e:bd:7d:11:4d:e2:15:a5:43:31:
73:7f:f5:e7:c4:31:6b:d0:38:15:a5:3d:a0:f5:47:
36:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:29:41:FE:41:1D:81:9C:59:C3:05:A7:C3:D5:8F:99:A1:D0:9B:FD
X509v3 Authority Key Identifier:
keyid:3C:51:0E:21:BA:1C:9D:60:05:89:13:02:55:A3:69:28:F1:C8:F2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFEOIbocnWAFiRMCVaNpKPHI8js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/PFEOIbocnWAFiRMCVaNpKPHI8js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/PFEOIbocnWAFiRMCVaNpKPHI8js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:62:cf:ae:26:71:5f:3f:ba:5d:cb:df:bb:b0:f7:07:60:ac:
97:c7:03:60:96:71:05:4d:7e:eb:f5:c2:f5:92:86:d6:67:c5:
fd:e2:cc:ff:83:35:bb:2a:3b:32:0f:53:c0:9c:92:7e:1b:7e:
31:26:80:62:1b:45:3f:fe:e1:18:61:75:53:52:41:70:97:a6:
cc:7e:cc:6c:8f:6f:2d:f2:f4:8a:94:e1:01:ae:01:f6:5b:8a:
0e:79:2f:3c:47:d0:e3:ed:f1:be:84:a8:ed:ee:69:07:cd:a3:
a1:f5:7d:04:85:44:84:09:0d:04:f7:94:73:10:ee:ff:b9:d9:
1a:ae:a3:03:39:40:f5:34:52:90:8a:82:f6:25:b8:d2:85:ea:
bb:64:95:d1:16:ba:f9:04:8c:eb:70:61:04:f5:c6:53:31:f7:
1c:71:b7:1c:d2:98:00:10:c1:fe:bf:e4:ef:c2:a3:3a:cb:fc:
fc:e2:df:ef:d0:6b:d0:99:98:e7:6d:a4:ea:c9:35:f9:e7:4b:
49:81:a2:c9:a9:43:a8:38:0b:34:0d:4c:9c:44:59:a3:aa:bd:
c0:07:37:ae:f7:41:1c:d2:dc:d4:c0:fe:3a:a9:3a:4b:fe:ec:
df:a4:18:c3:db:b9:bc:1c:57:6f:be:b7:f3:42:c0:c7:18:f3:
55:b5:78:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:47:31 2026 by rpki-client