Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft
File: Pn1HTATkiliTr3HDWnfN1oJv0zk.mft (raw, json)
Hash identifier: 5UPo5KOhbek/aa0EPaB0TioePVvN6e0w3EC/0rSnCHE=
Subject key identifier: 7A:83:80:3E:AB:C3:81:1B:1A:5E:FB:DB:4F:DE:D1:C4:43:8C:AE:79
Authority key identifier: 3E:7D:47:4C:04:E4:8A:58:93:AF:71:C3:5A:77:CD:D6:82:6F:D3:39
Certificate issuer: /CN=3e7d474c04e48a5893af71c35a77cdd6826fd339
Certificate serial: 01A0D426568ABADCDE7473CEF07AF35BC882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pn1HTATkiliTr3HDWnfN1oJv0zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft
Manifest number: 091B
Signing time: Thu 24 Sep 2026 16:01:17 +0000
Manifest this update: Thu 24 Sep 2026 16:01:17 +0000
Manifest next update: Fri 25 Sep 2026 16:01:17 +0000
Files and hashes: 1: 59MC3zCDEqoB6qxXydRSjiwklTA.asa (hash: hvU4mJ/8GiJoU66ydLaONKkQ68qHgCJGT50x/0n4g2c=)
2: Pn1HTATkiliTr3HDWnfN1oJv0zk.crl (hash: x3s8rHuzRVJma41fahi3/0Q7EhmJHWuDEvJJ0AbDA3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pn1HTATkiliTr3HDWnfN1oJv0zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:56:8a:ba:dc:de:74:73:ce:f0:7a:f3:5b:c8:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e7d474c04e48a5893af71c35a77cdd6826fd339
Validity
Not Before: Sep 24 16:01:17 2026 GMT
Not After : Sep 25 16:01:17 2026 GMT
Subject: CN=7a83803eabc3811b1a5efbdb4fded1c4438cae79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:61:da:b4:26:bf:54:ef:a6:21:d6:d7:da:79:
04:cd:3f:a5:ec:5b:71:24:51:95:14:1a:7c:ea:67:
cf:54:fc:c3:ca:42:94:86:bd:24:a3:23:75:8f:8c:
c0:43:9d:1c:d9:17:6b:d9:0f:2d:58:4d:bd:5e:90:
e9:c9:3a:04:2d:6d:2c:2b:5c:38:a0:2a:f5:38:e2:
a7:61:50:0a:1a:f5:9b:66:93:3e:37:35:c2:69:fc:
79:aa:ce:07:dd:78:a5:77:a7:0d:0d:be:eb:0a:03:
f8:75:3e:bd:f3:9b:3d:3c:2c:87:00:c6:a3:c0:6a:
c5:f6:ac:7d:29:25:1a:03:0c:17:78:c4:52:5f:2d:
53:bd:14:5e:3c:79:21:21:37:d6:f7:1b:8a:0f:40:
30:7a:76:9a:19:07:ac:e7:45:5a:5f:c9:ef:82:90:
a2:a2:f5:83:c2:7e:04:37:2b:a1:cd:48:8d:93:b2:
f3:7a:8e:a2:77:ad:06:61:e4:fa:fd:47:c7:41:6e:
44:91:dc:70:5e:b5:07:c4:f4:cd:e0:f4:2f:b5:0e:
86:76:8a:81:03:95:cb:03:7b:15:2c:3b:bf:78:86:
48:61:4b:c8:56:c8:b3:ba:02:04:84:bf:6d:b5:2a:
cc:31:22:ec:46:58:83:92:e6:c6:8f:b8:cc:21:a5:
f0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:83:80:3E:AB:C3:81:1B:1A:5E:FB:DB:4F:DE:D1:C4:43:8C:AE:79
X509v3 Authority Key Identifier:
keyid:3E:7D:47:4C:04:E4:8A:58:93:AF:71:C3:5A:77:CD:D6:82:6F:D3:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pn1HTATkiliTr3HDWnfN1oJv0zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:59:49:bb:e0:3a:b1:11:34:24:97:a8:69:94:bb:10:63:26:
9a:24:17:a6:f7:2d:ce:08:af:1a:b6:1d:21:66:4e:1a:78:a4:
f6:78:68:de:07:72:d7:09:75:61:53:49:7d:82:4c:43:ad:d9:
64:0b:b9:48:e8:ac:3f:d4:44:03:85:ec:c2:d4:e8:12:5b:f2:
34:63:30:82:49:54:63:51:43:fe:d2:90:52:ed:15:13:9d:50:
b0:9f:22:4d:db:ca:4d:00:cb:d2:da:09:04:a9:b8:07:f2:e2:
1b:e0:c9:84:9e:67:81:bc:06:be:7b:10:8c:eb:d0:6d:e3:fe:
db:c1:13:23:b6:3c:17:ae:0a:73:2d:5e:51:ef:ef:2b:f0:63:
60:8c:44:51:93:5d:8a:79:8f:8b:56:29:af:dc:55:c9:eb:fb:
fb:ca:a3:b8:86:41:b7:c8:79:78:96:0d:eb:a2:8b:a5:32:1d:
bd:05:69:e0:15:28:2f:bd:d6:2e:61:78:e9:05:c7:96:ab:36:
3e:8c:a2:1b:60:0f:82:1f:2b:cf:7e:f2:33:8e:21:cb:e0:75:
d8:ed:8a:bd:db:a2:b7:b4:e1:59:d2:9d:12:0c:a8:d3:5d:e5:
5a:8f:1c:f8:a4:62:45:3f:7d:7d:83:93:bd:00:40:e7:eb:71:
e6:dd:6c:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUJlaKutzedHPO8HrzW8iCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlN2Q0NzRjMDRlNDhhNTg5M2FmNzFjMzVhNzdjZGQ2ODI2
ZmQzMzkwHhcNMjYwOTI0MTYwMTE3WhcNMjYwOTI1MTYwMTE3WjAzMTEwLwYDVQQD
Eyg3YTgzODAzZWFiYzM4MTFiMWE1ZWZiZGI0ZmRlZDFjNDQzOGNhZTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGHatCa/VO+mIdbX2nkEzT+l7Ftx
JFGVFBp86mfPVPzDykKUhr0koyN1j4zAQ50c2Rdr2Q8tWE29XpDpyToELW0sK1w4
oCr1OOKnYVAKGvWbZpM+NzXCafx5qs4H3Xild6cNDb7rCgP4dT6985s9PCyHAMaj
wGrF9qx9KSUaAwwXeMRSXy1TvRRePHkhITfW9xuKD0AwenaaGQes50VaX8nvgpCi
ovWDwn4ENyuhzUiNk7Lzeo6id60GYeT6/UfHQW5EkdxwXrUHxPTN4PQvtQ6GdoqB
A5XLA3sVLDu/eIZIYUvIVsizugIEhL9ttSrMMSLsRliDkubGj7jMIaXwfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqDgD6rw4EbGl7720/e0cRDjK55MB8GA1UdIwQY
MBaAFD59R0wE5IpYk69xw1p3zdaCb9M5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG4xSFRBVGtpbGlUcjNIRFduZk4xb0p2MHprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83ZTMwZTgtYjgzNS00NGFmLWE0NGIt
OTAzZTRmNWUxMjI1LzEvUG4xSFRBVGtpbGlUcjNIRFduZk4xb0p2MHprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi83ZTMwZTgtYjgzNS00NGFmLWE0NGItOTAzZTRmNWUxMjI1
LzEvUG4xSFRBVGtpbGlUcjNIRFduZk4xb0p2MHprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi1lJu+A6
sRE0JJeoaZS7EGMmmiQXpvctzgivGrYdIWZOGnik9nho3gdy1wl1YVNJfYJMQ63Z
ZAu5SOisP9REA4XswtToElvyNGMwgklUY1FD/tKQUu0VE51QsJ8iTdvKTQDL0toJ
BKm4B/LiG+DJhJ5ngbwGvnsQjOvQbeP+28ETI7Y8F64Kcy1eUe/vK/BjYIxEUZNd
inmPi1Ypr9xVyev7+8qjuIZBt8h5eJYN66KLpTIdvQVp4BUoL73WLmF46QXHlqs2
PoyiG2APgh8rz37yM44hy+B12O2Kvduit7ThWdKdEgyo013lWo8c+KRiRT99fYOT
vQBA5+tx5t1sBw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:21:40 2026 by rpki-client