Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
File: PnXUne0gVmynRcKPgM_ZqS9LfUc.mft (raw, json)
Hash identifier: uz9dpDPHAJ8kNSBqMDi25K6wQjo0a6J9Zo+RRSbuDSc=
Subject key identifier: 5E:88:43:46:6A:BE:77:C9:04:FC:E1:FF:5B:43:88:4A:AC:42:20:B0
Authority key identifier: 3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
Certificate issuer: /CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Certificate serial: 01A1DE025BBFC2DAD993E17720901C602A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
Manifest number: 1AFB
Signing time: Sun 15 Nov 2026 07:00:58 +0000
Manifest this update: Sun 15 Nov 2026 07:00:58 +0000
Manifest next update: Mon 16 Nov 2026 07:00:58 +0000
Files and hashes: 1: FOGBosGtZtXrIIBUEMbGPRMUnSM.roa (hash: 5uENltgcvqTpOLwVKmOle08cC/EenM/q/RZwRZFg1ZU=)
2: PnXUne0gVmynRcKPgM_ZqS9LfUc.crl (hash: ViEF+vtkO9uD5dzOYSOViGJ7GG/gv8MLuQ9HSu+DDk8=)
3: uYYAF2CgTPmwA1qAHQwLxmLvnnQ.roa (hash: iO1PoQ5KtnZAzQ3JC5Zi0gRiLIzhMEqyWnF2lTVAOrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:5b:bf:c2:da:d9:93:e1:77:20:90:1c:60:2a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Validity
Not Before: Nov 15 07:00:58 2026 GMT
Not After : Nov 16 07:00:58 2026 GMT
Subject: CN=5e8843466abe77c904fce1ff5b43884aac4220b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1d:77:c2:32:6e:88:58:1c:0b:7a:90:b5:f3:
d7:93:86:5c:b1:09:1d:b5:68:08:bf:b3:88:2f:c2:
9f:64:27:a7:16:20:86:77:f8:d1:d3:c1:7e:c6:56:
e0:de:31:3f:90:6b:15:b2:30:be:bb:4d:8c:33:87:
a1:0d:f0:bf:17:c4:aa:bd:35:bb:93:14:02:fe:5f:
28:d2:99:1a:48:ac:ff:ac:0a:8b:f6:74:6c:a9:99:
c3:1e:d8:97:f1:16:67:86:b8:19:a7:63:0a:0d:d6:
f3:e9:ff:6e:6c:ea:e2:63:81:82:fa:14:d8:5b:d0:
30:bb:76:c7:87:4a:b3:33:ca:88:ce:31:70:65:cb:
9c:da:ff:c4:8f:ac:3c:1b:95:16:61:50:20:d3:75:
4c:77:6e:89:eb:08:bc:d9:27:1a:fa:5a:19:33:19:
35:f9:71:7d:32:00:23:55:34:73:33:50:56:39:ed:
70:8a:bd:a3:0f:bf:a5:46:9c:c5:a9:18:11:4f:6e:
e3:5a:ea:c7:02:b4:a2:ea:92:96:8e:82:87:11:84:
64:a1:54:9b:92:87:d9:9a:0d:52:02:f0:8d:13:86:
da:2a:b2:9a:9a:9d:19:1f:67:ed:e0:af:02:cb:fa:
77:b5:0a:d5:dc:4d:84:f6:4f:1c:03:38:79:73:c0:
c0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:88:43:46:6A:BE:77:C9:04:FC:E1:FF:5B:43:88:4A:AC:42:20:B0
X509v3 Authority Key Identifier:
keyid:3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:59:ea:ea:5b:e2:6f:c7:f4:2d:f4:70:01:f9:30:0c:00:eb:
e6:aa:2d:ab:e7:a6:59:85:ee:a5:63:9a:fb:83:66:2f:f3:7d:
dc:11:93:25:aa:8c:76:3b:b6:02:5a:6f:4a:48:c8:0c:58:f0:
f5:aa:39:0f:89:74:a7:42:ac:a1:43:69:d6:23:a8:b1:5b:c6:
f3:9a:01:c5:a9:1c:16:ae:90:8b:61:a2:ce:fd:58:29:51:a7:
f6:18:8b:16:80:fd:fd:bb:ac:6a:c3:3f:aa:c2:da:35:71:2b:
6c:0a:fd:5a:33:d4:17:51:c4:9e:27:93:45:a4:ca:b0:69:2a:
e5:c7:c4:e9:20:83:16:42:14:d1:8d:e8:04:b4:8c:b1:4a:c7:
e8:a3:e2:52:40:99:39:0d:c4:47:af:9e:ee:dd:a9:ce:cb:a0:
d5:12:8b:4b:ab:28:22:1b:64:3c:ac:10:ba:65:8c:f1:97:db:
63:40:60:3d:90:b4:92:d2:bc:9d:13:17:7a:81:93:f5:b8:15:
af:8e:bd:0d:d7:ac:d8:22:b4:42:b6:f7:fd:13:c5:88:74:59:
bf:a4:3b:a6:d1:b5:8e:6d:b4:c0:a3:03:8c:6d:6d:e4:57:c5:
15:e4:70:8e:d2:ff:df:98:bf:53:c3:af:9a:09:af:e5:9c:5f:
ed:eb:e5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:31:23 2026 by rpki-client