Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
File: PnXUne0gVmynRcKPgM_ZqS9LfUc.mft (raw, json)
Hash identifier: xDkPr1YMQbXwJDX51yRbvXpFHIbklkv0rLIfvsTyXzw=
Subject key identifier: 3F:09:48:A8:22:C5:F8:0F:D4:C4:7F:F7:19:FA:EE:80:41:A5:EA:F3
Authority key identifier: 3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
Certificate issuer: /CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Certificate serial: 01A0E2F4B35FAAB187403BD79B53FB8FE984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
Manifest number: 1A79
Signing time: Sun 27 Sep 2026 13:01:22 +0000
Manifest this update: Sun 27 Sep 2026 13:01:22 +0000
Manifest next update: Mon 28 Sep 2026 13:01:22 +0000
Files and hashes: 1: FOGBosGtZtXrIIBUEMbGPRMUnSM.roa (hash: 5uENltgcvqTpOLwVKmOle08cC/EenM/q/RZwRZFg1ZU=)
2: PnXUne0gVmynRcKPgM_ZqS9LfUc.crl (hash: XzhZgfPZyV/Z1kSZ6WwcDBUl4ALt1CWlazCs0JakR+8=)
3: uYYAF2CgTPmwA1qAHQwLxmLvnnQ.roa (hash: iO1PoQ5KtnZAzQ3JC5Zi0gRiLIzhMEqyWnF2lTVAOrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:f4:b3:5f:aa:b1:87:40:3b:d7:9b:53:fb:8f:e9:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Validity
Not Before: Sep 27 13:01:22 2026 GMT
Not After : Sep 28 13:01:22 2026 GMT
Subject: CN=3f0948a822c5f80fd4c47ff719faee8041a5eaf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:75:96:72:27:b4:32:3d:15:c0:a8:42:a2:4c:
fc:4d:bc:64:b4:ea:93:81:3f:5e:60:75:b5:ba:92:
b1:ec:d5:fd:8f:a7:bb:e0:49:d0:29:9a:d3:dc:a5:
e7:a7:4a:ef:e3:78:e9:4c:44:84:7a:35:b1:68:35:
8e:2c:52:64:e3:b7:21:b0:87:1f:d7:b1:a0:f9:4c:
92:90:1a:76:32:64:c8:68:65:f7:ae:15:36:7d:2a:
e2:9f:a9:ec:04:d7:08:0f:be:d4:32:9e:c9:bc:bd:
f4:28:98:86:16:8c:9b:b1:2a:6e:3d:ba:8e:97:c8:
90:83:4d:27:52:58:b6:6d:a3:fa:3b:ec:3b:46:e0:
34:2a:35:f0:73:88:e1:b2:62:c9:75:48:f9:28:f4:
bb:8e:d9:35:58:a0:0c:0f:ba:0e:f6:83:bc:e9:0f:
f2:88:ed:e8:eb:68:7a:62:17:73:a5:0a:bc:48:f6:
94:0f:34:95:2c:ef:c6:89:c2:03:dd:e4:84:6d:67:
6a:dc:e7:ba:26:f8:4c:f6:c9:ff:f1:dd:1a:22:a7:
c6:7c:95:0a:98:12:b8:de:e1:1e:15:18:81:a6:94:
c8:89:da:c0:45:cf:ee:ad:b7:5e:b3:59:9b:26:37:
1b:03:44:cf:aa:50:08:50:c5:b9:9a:9b:f1:a0:61:
f7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:09:48:A8:22:C5:F8:0F:D4:C4:7F:F7:19:FA:EE:80:41:A5:EA:F3
X509v3 Authority Key Identifier:
keyid:3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:3f:a1:20:70:66:d2:0a:a5:df:4f:67:06:c3:7d:fb:c8:c9:
4f:e5:c1:80:b7:b5:25:71:9f:7b:11:db:a2:62:bb:85:5d:f9:
d7:52:48:56:23:6b:6e:0e:24:65:ab:4f:3c:63:9c:f2:9f:05:
e5:d0:4d:7e:2e:32:a2:ed:6a:8f:e0:b4:6c:bc:58:c9:39:7e:
fe:7d:60:81:1f:bc:93:00:af:9b:cf:2e:fc:3e:fc:9c:0e:6a:
9d:ff:04:7e:86:10:07:07:30:30:28:34:bc:57:bf:00:03:ef:
24:e2:4a:16:3a:45:b1:e7:81:e6:c9:66:93:13:89:17:72:bc:
d0:cd:1b:57:c2:1e:57:0e:e2:85:5d:e3:82:a7:a7:ab:df:70:
dd:b2:f8:6a:64:eb:90:f7:56:4f:97:f3:81:83:73:e4:f8:61:
e2:95:ae:dd:b2:66:db:4f:3d:3e:9b:3f:05:ee:6b:c6:f3:50:
03:81:98:11:ab:3e:a6:2f:4d:6e:fc:9a:6d:ad:cd:6d:47:b7:
af:55:e4:e8:48:d9:88:45:a1:58:ac:64:47:f8:3e:99:cc:f5:
47:6d:67:07:45:b8:53:d6:8a:9d:db:2a:c3:14:0a:21:30:9a:
e7:82:c5:85:5d:5c:dd:d1:07:5f:73:95:48:28:a2:32:b4:a3:
c5:13:b7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 18:58:41 2026 by rpki-client