Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
File: PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft (raw, json)
Hash identifier: WdiR2W64JZceoEokRKlTPti8nM4b5VdohwsvGB+/noQ=
Subject key identifier: A1:D4:35:01:0D:49:3F:E9:E2:36:5C:94:6B:45:B2:79:F9:AD:B3:E9
Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
Certificate issuer: /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Certificate serial: 01A0D983BCA2546D350B05F834F908AD6A70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
Manifest number: 14B1
Signing time: Fri 25 Sep 2026 17:01:24 +0000
Manifest this update: Fri 25 Sep 2026 17:01:24 +0000
Manifest next update: Sat 26 Sep 2026 17:01:24 +0000
Files and hashes: 1: Owu-o7JvEybmXtpQNjtKXjhH9ug.roa (hash: 89sGeUxvhpVypElkHwSDvmrZnRJHBtaKeL9yMz7nC6U=)
2: PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl (hash: pXcPcYEQbdzcTjWKDt8NhhwZYltCxPopjdi1PgxQRUw=)
3: _b_jh41DtvYlyJbVt2vmUxy_03c.roa (hash: Y4f7kKKKelGhsZykUm6x2Et6p6M+4yMQNJ8fkfC21Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:bc:a2:54:6d:35:0b:05:f8:34:f9:08:ad:6a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Validity
Not Before: Sep 25 17:01:24 2026 GMT
Not After : Sep 26 17:01:24 2026 GMT
Subject: CN=a1d435010d493fe9e2365c946b45b279f9adb3e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ba:75:1c:61:82:cc:cf:0d:d7:fb:b3:32:72:
2f:ad:ff:d8:c8:4f:1b:29:d3:fa:f6:4a:67:3e:7a:
3e:59:36:62:fa:18:98:a1:b7:b0:c5:af:04:57:d3:
a5:a8:a4:b7:1a:d3:8d:11:a2:39:a4:ad:16:61:36:
3b:a2:01:23:83:84:cf:86:88:be:2b:2d:1e:c0:eb:
9e:54:fd:7c:19:f7:75:e3:d6:d4:38:1f:58:c3:dd:
25:43:a1:0a:49:72:08:93:b0:13:ef:ad:06:1e:74:
e2:fb:d8:88:dc:20:dc:c5:b9:f8:ff:2b:4f:9d:de:
71:ab:aa:2e:5c:56:05:4b:34:19:75:4b:1f:e1:7b:
49:32:1b:0c:b4:bd:c2:5f:af:78:0a:48:4d:a5:50:
27:c9:0b:e0:7a:f0:d3:eb:1a:e7:ce:08:53:71:47:
bf:a4:cb:74:60:0d:4e:3a:16:4f:21:a2:a6:d6:70:
30:5a:23:35:2a:4c:15:e6:be:7d:d1:e0:c7:c3:a9:
b4:9c:ee:9b:27:bc:7a:99:ac:99:9d:94:c6:b6:ce:
25:73:b2:27:63:64:d7:b3:fa:ec:f9:a6:cf:f4:bd:
a9:ab:ce:7e:59:60:e8:28:22:b4:b5:ac:10:14:88:
5f:e8:9b:d7:b8:31:fd:98:23:e1:4e:e0:a2:1c:a1:
d8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D4:35:01:0D:49:3F:E9:E2:36:5C:94:6B:45:B2:79:F9:AD:B3:E9
X509v3 Authority Key Identifier:
keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:3f:5e:17:69:43:f0:15:13:0d:fd:83:f4:6a:c2:92:bb:5c:
ac:ba:8c:50:cf:a1:da:af:b0:ae:f8:e3:40:d9:45:09:c2:f7:
20:ed:00:da:e2:9f:ab:26:05:ef:0c:f9:46:5c:70:22:38:15:
d3:f7:59:3b:02:62:e6:7b:ca:18:93:00:1c:80:d5:04:76:3d:
ee:44:6a:6a:88:2f:95:17:3d:53:bc:b0:0f:cf:ba:08:78:39:
7a:35:06:b8:d7:15:74:0b:32:c8:84:c3:31:54:1d:59:d1:8a:
eb:b4:a3:15:4e:7c:99:99:8b:e6:fe:bc:2f:76:5e:38:c9:97:
b1:b1:31:b1:42:70:4c:e9:4c:78:8b:97:da:9e:c4:c9:88:d1:
c5:8d:7b:fa:0c:25:b1:05:64:a9:ba:ae:d3:04:ed:c1:78:b8:
63:c1:36:8a:f0:1b:ae:29:14:0b:87:56:10:6e:41:e4:23:e2:
47:0c:ec:36:21:4d:50:7a:d3:e7:63:50:b2:d4:c6:a2:be:f8:
96:70:c6:f3:68:69:cc:6a:de:dc:eb:3a:27:37:42:f9:28:f3:
85:ea:d5:3c:b6:50:dd:c6:bd:52:f6:09:92:e6:c2:c9:ca:09:
c7:d2:9a:d0:b5:1c:b7:4a:8a:db:54:99:89:4d:0e:16:0c:cd:
6c:f6:82:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:38:40 2026 by rpki-client