Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
File: Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft (raw, json)
Hash identifier: Jf+ZSwFNBSx30uhV4xEJt1cAefg4eINjXzodeK6qDUE=
Subject key identifier: D4:50:97:8F:F6:D0:70:DC:4D:12:1D:FA:80:89:2B:33:72:09:1B:5B
Authority key identifier: 3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B
Certificate issuer: /CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
Certificate serial: 01A0F3B123EFA10FAE0C608C72A6B9227C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
Manifest number: 1A7E
Signing time: Wed 30 Sep 2026 19:01:07 +0000
Manifest this update: Wed 30 Sep 2026 19:01:07 +0000
Manifest next update: Thu 01 Oct 2026 19:01:07 +0000
Files and hashes: 1: 01b-_lSQYswp0XJqCFkWTN3FBao.roa (hash: ewH/zDZQ3rLluYv2guw0C+nvriPG/1vP0wlE4tPc+1Y=)
2: EGoSQ-IvTDuR6KeRNIfT2U3LRKg.roa (hash: L6sNJPWIZpchbyuvO0NFOoU8EkTxoHjIUljX0hT8hYU=)
3: Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl (hash: 3TIqy+cfQ507JN4ujcpLnAO0Iru2mUl8L9ueP6NBZsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:b1:23:ef:a1:0f:ae:0c:60:8c:72:a6:b9:22:7c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
Validity
Not Before: Sep 30 19:01:07 2026 GMT
Not After : Oct 1 19:01:07 2026 GMT
Subject: CN=d450978ff6d070dc4d121dfa80892b3372091b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:68:33:67:ff:b1:f1:8f:f4:33:e2:b2:ee:65:
c7:45:90:83:cb:4a:63:43:2e:9f:cf:5b:6a:8e:00:
e7:f4:d1:2c:1a:0b:fc:d5:f1:84:39:19:7e:bc:ba:
c1:1c:61:8d:66:3e:46:38:48:31:18:e5:a7:00:4f:
09:db:61:10:c8:66:3b:43:96:3d:27:c6:e7:68:a7:
55:32:97:2e:08:e1:97:49:18:95:f3:00:6c:68:36:
7e:37:bf:d2:b8:17:3b:4e:d4:9b:79:3e:d4:80:f5:
95:3e:95:96:25:e9:38:69:f3:3f:b7:61:56:78:19:
cd:bc:c9:b5:36:b3:01:01:f2:09:ac:b1:8f:48:46:
c1:c3:29:11:64:8f:3c:d4:f8:8b:05:d2:14:66:9b:
5e:dd:60:cd:6a:d3:22:31:31:77:d0:8a:07:dd:15:
49:9f:6a:66:6d:55:df:3e:75:55:e7:8c:40:41:f4:
fc:4e:af:87:83:1b:0e:fd:4e:82:53:74:08:19:c7:
16:fb:1e:bc:ae:3e:6a:ea:bf:57:8a:ed:ce:17:c8:
b1:04:b6:1f:ca:d9:aa:2c:87:4f:39:ee:88:9d:f9:
9c:e3:01:5c:69:64:2c:f7:93:1c:23:63:99:a6:02:
0e:4a:11:b7:13:b4:24:c4:70:a9:67:e2:36:3d:48:
a1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:50:97:8F:F6:D0:70:DC:4D:12:1D:FA:80:89:2B:33:72:09:1B:5B
X509v3 Authority Key Identifier:
keyid:3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:3c:ce:b1:33:de:ee:07:c8:42:e0:9a:7c:8e:85:19:9a:b6:
6c:22:67:49:ed:5d:7e:6a:d8:79:2f:fa:45:f5:c2:73:5b:97:
bb:2f:36:2e:2f:0e:cd:47:7d:d6:f0:fe:4d:68:5b:17:d2:ea:
90:32:20:ad:94:89:29:94:62:49:ed:d1:c8:b2:0c:e4:1e:6e:
0e:a6:49:af:44:aa:a3:40:02:fb:0f:02:8b:23:1e:af:56:f2:
84:40:67:0e:20:ec:b4:03:c9:5b:10:67:41:e0:73:12:10:ed:
b6:3c:71:11:6d:c2:24:7b:1d:b7:b4:9a:cf:84:62:0e:06:ac:
33:5c:45:b0:63:93:f6:6a:9a:1f:a7:74:e0:90:2c:65:21:46:
0d:67:d2:ee:5f:0d:ce:25:c9:fe:18:b5:9c:bc:63:f2:7a:dc:
ba:8e:86:9e:10:0a:e7:64:f1:b0:b9:9d:87:d1:85:66:52:51:
e2:72:ec:9a:9c:ee:10:36:c3:46:ec:0e:75:71:08:e8:6a:35:
d6:16:ac:0e:4f:5e:5c:98:ec:ab:22:c2:db:ec:3d:ec:4d:23:
08:e2:00:ed:cf:fb:08:98:c5:70:cd:16:53:d9:0b:a6:9f:2f:
a2:cb:e7:4e:8b:45:f2:9b:df:22:36:86:19:0d:31:e7:78:c6:
55:86:fc:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 09:10:03 2026 by rpki-client