Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft
File: Pn1HTATkiliTr3HDWnfN1oJv0zk.mft (raw, json)
Hash identifier: We8dPHoqC8LCY39QQKr8vxfqev2QYN00w0ggtPHjmy4=
Subject key identifier: C3:95:E9:E7:90:C1:93:93:B4:BB:A7:92:B6:64:D2:DC:26:2F:19:54
Authority key identifier: 3E:7D:47:4C:04:E4:8A:58:93:AF:71:C3:5A:77:CD:D6:82:6F:D3:39
Certificate issuer: /CN=3e7d474c04e48a5893af71c35a77cdd6826fd339
Certificate serial: 019F8FB53AC02ACC79E89B49AA45937102F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pn1HTATkiliTr3HDWnfN1oJv0zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft
Manifest number: 0873
Signing time: Thu 23 Jul 2026 16:00:46 +0000
Manifest this update: Thu 23 Jul 2026 16:00:46 +0000
Manifest next update: Fri 24 Jul 2026 16:00:46 +0000
Files and hashes: 1: 59MC3zCDEqoB6qxXydRSjiwklTA.asa (hash: hvU4mJ/8GiJoU66ydLaONKkQ68qHgCJGT50x/0n4g2c=)
2: Pn1HTATkiliTr3HDWnfN1oJv0zk.crl (hash: DJvDoxKV9MM5lok3a4KfC+j17oCnKmRNbYn0kU4XKb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pn1HTATkiliTr3HDWnfN1oJv0zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:3a:c0:2a:cc:79:e8:9b:49:aa:45:93:71:02:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e7d474c04e48a5893af71c35a77cdd6826fd339
Validity
Not Before: Jul 23 16:00:46 2026 GMT
Not After : Jul 24 16:00:46 2026 GMT
Subject: CN=c395e9e790c19393b4bba792b664d2dc262f1954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:b6:e3:cb:a9:91:76:19:f0:65:a5:01:89:
f7:31:bd:6f:06:96:93:c2:9b:74:74:d3:e1:76:dc:
93:57:13:ce:aa:2c:f3:48:98:91:58:c4:8a:21:27:
7f:5e:44:d1:2a:06:eb:44:85:df:33:18:08:44:8d:
c5:40:9c:76:34:aa:98:b3:a5:66:df:d8:37:70:76:
1c:d7:72:12:c2:05:c9:92:6d:f4:a3:a2:ee:1e:c3:
f6:61:00:8a:34:cd:81:6b:7d:15:41:64:77:4f:45:
36:7d:29:cf:9b:a7:32:12:59:a6:17:da:b2:07:bf:
0e:28:19:23:58:d7:ca:b3:b9:8a:44:48:b7:30:4c:
80:f0:d5:5c:78:e2:a3:01:da:37:33:fa:45:ce:ec:
67:6a:3a:0b:32:e3:9c:bb:18:93:63:30:e2:8b:df:
72:88:5a:08:24:3a:a2:47:23:59:39:ae:d3:93:4b:
3a:3c:5a:27:92:3a:c2:b4:4a:b4:36:46:94:a4:d6:
1e:c2:f0:61:25:31:46:e5:08:6a:e7:c1:2f:1e:fe:
f4:85:a5:29:b9:3c:67:71:38:66:b7:d8:41:e6:79:
c2:70:76:02:8b:b3:6e:cf:92:08:29:ef:2a:04:ac:
87:3a:41:52:97:00:e4:dd:15:f9:f6:45:0e:26:27:
cd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:95:E9:E7:90:C1:93:93:B4:BB:A7:92:B6:64:D2:DC:26:2F:19:54
X509v3 Authority Key Identifier:
keyid:3E:7D:47:4C:04:E4:8A:58:93:AF:71:C3:5A:77:CD:D6:82:6F:D3:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pn1HTATkiliTr3HDWnfN1oJv0zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f2:58:d7:e0:b9:d7:ba:f8:52:50:06:cf:61:32:7a:b9:3a:
17:15:12:06:cd:ce:6f:67:a1:ad:bf:d6:dd:a9:32:2c:a5:10:
9a:02:73:3c:7c:74:c6:e0:73:21:ea:aa:94:82:61:27:18:ea:
3a:22:e6:09:fe:ea:c5:91:05:7a:b3:61:2d:44:5e:f4:9a:fa:
9b:eb:e2:24:e1:64:7e:8d:e0:ec:af:65:f2:f6:4a:ba:65:6e:
76:2e:ae:42:5e:ea:d0:e8:5f:4f:1f:63:87:98:0c:71:e5:dd:
57:82:63:31:ce:c0:46:59:97:60:06:c1:fd:20:77:0e:96:76:
a5:e2:46:4e:4a:fb:fb:95:38:32:d6:36:5b:5b:2d:6a:5d:ac:
a4:26:6c:40:70:cb:bc:b6:92:b9:fe:85:7a:b6:15:09:ad:eb:
74:32:94:df:e6:89:56:65:21:ab:c7:17:a1:a9:82:75:85:42:
10:1c:b9:ae:63:a1:b2:b6:37:fe:04:1a:09:d3:fd:85:13:d9:
c4:f9:3a:30:53:94:08:f3:b7:9c:09:63:76:a7:cb:69:5a:37:
4a:6d:26:36:47:ec:80:c4:52:b2:7d:a0:99:c7:e0:e9:ce:2f:
b0:0b:e8:d3:75:ac:eb:d5:e1:8b:8b:18:c8:fa:26:b9:d5:9d:
3d:1f:95:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:49 2026 by rpki-client