Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
File: PiTH7Po30khxUvubu6tQvnneJhk.mft (raw, json)
Hash identifier: UgrAe0G9r6C+XaPqLla5ADvfwNqAI7dOMwRzgDJD9qI=
Subject key identifier: AA:3E:83:49:E7:E9:52:78:59:DC:7C:50:BB:A8:7F:D4:9F:00:1B:70
Authority key identifier: 3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
Certificate issuer: /CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Certificate serial: 01A0D0B6B9BEE2F2B02B834F8C39C1866E22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
Manifest number: 1A7E
Signing time: Thu 24 Sep 2026 00:00:31 +0000
Manifest this update: Thu 24 Sep 2026 00:00:31 +0000
Manifest next update: Fri 25 Sep 2026 00:00:31 +0000
Files and hashes: 1: 5ktFpVoHtcv-4PVj4xQGVTm6rZs.roa (hash: Zqkw6KvI8acX/aUr49KfIKqTAKRlHDvQQG+hF6oNumM=)
2: L1LuXNyLmddWoquATgiWDCkvIvc.roa (hash: 4bMlcyRakC1GsgwgHN92wea/CUU4Dqc8/FL+CIWH9ng=)
3: PiTH7Po30khxUvubu6tQvnneJhk.crl (hash: DS/Q5rjnPuvOyA/S27nhnSmBpYzEb2oNvg6kXRvGBAE=)
4: o5xjwD3RHYwZb8BGUpI8BsGBfV0.roa (hash: GZFTwMUyNntUts8RndeOn9OC9VYkHxusfe9yub/gTL4=)
5: t48mXkmHCqZPmvOXE_EaAv0d4IU.roa (hash: kn+opPbME6YgDhBuXcQLf7UfJNA4/7anLklPax/nt4w=)
6: tl_q-hSPqgL5VpoDk8C2Ua5xTVc.roa (hash: P7Vo08T4BVo4faac/Yk9jWiigRql2vSCBoh+fxrW89w=)
7: xocNCIYKfAnpt4j7-4dI5cWkT8Q.roa (hash: og0HfAzHezrSbN3NhEsFptFW8eiLweJs1cF+3fN0CHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 00:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:b9:be:e2:f2:b0:2b:83:4f:8c:39:c1:86:6e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Validity
Not Before: Sep 24 00:00:31 2026 GMT
Not After : Sep 25 00:00:31 2026 GMT
Subject: CN=aa3e8349e7e9527859dc7c50bba87fd49f001b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:97:08:fe:78:58:80:d2:99:58:79:43:ba:b0:
8c:7c:c8:fc:86:ff:64:c7:91:5e:90:09:ed:e9:88:
37:a2:0f:6b:42:a3:6d:19:b5:db:8e:da:88:9a:3e:
9d:7a:23:f3:3b:c0:e3:d8:7b:e6:d4:05:f4:89:23:
e6:db:17:13:7e:e3:33:dd:c6:b5:76:df:5e:e8:60:
05:6b:f0:9e:61:25:10:53:7e:87:ba:9b:4b:af:60:
7c:ce:90:63:88:63:82:97:13:1c:fb:60:7b:3f:67:
07:41:10:93:e4:e0:94:d5:75:9b:06:06:6e:de:ba:
be:eb:f5:f5:c2:98:56:a5:e5:0e:d7:c0:3f:d4:59:
27:ee:88:4a:73:5c:9d:74:75:19:12:d3:dd:8c:3e:
5e:09:b9:22:72:43:48:54:b7:8e:50:af:02:db:55:
dc:88:ab:25:c0:e5:5c:ae:5c:20:c8:13:47:02:1d:
9d:b2:ba:c8:6b:c6:0e:bc:5e:75:19:71:d9:0b:d5:
2f:ef:67:59:2d:44:80:5f:cb:ab:67:8b:1f:e0:5d:
31:ec:7d:7d:59:e1:d2:6d:e3:a5:2c:dc:2f:75:32:
e0:a3:ce:32:7e:d0:98:c9:92:0d:fd:4a:51:3c:a2:
df:c9:77:df:a9:8b:71:87:ca:18:4a:23:63:69:a4:
22:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3E:83:49:E7:E9:52:78:59:DC:7C:50:BB:A8:7F:D4:9F:00:1B:70
X509v3 Authority Key Identifier:
keyid:3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c6:4e:10:bb:8a:75:49:f0:a2:bd:41:5c:c1:1e:9c:98:e6:
0d:06:50:a1:e2:da:5c:f2:ae:05:28:fb:27:73:b5:4b:94:4b:
a4:3e:08:42:5e:2b:b9:39:ef:1e:80:63:fe:6d:12:c4:fc:1f:
71:5f:0c:2f:0e:58:cb:7d:4b:9e:3b:29:d5:fc:3f:30:21:85:
d8:5e:f9:74:24:c5:63:00:ad:85:57:3f:3a:09:7e:1b:d7:bc:
33:ca:1c:6b:46:6c:e3:b6:ce:87:05:e9:23:94:5a:ba:2c:59:
61:01:1d:77:f2:22:bd:62:85:57:e6:58:86:ea:10:bc:b0:a0:
ff:63:fd:a4:c5:df:7c:0f:f5:70:01:d7:e6:e7:8d:16:3f:dd:
37:8e:0a:d5:05:44:bf:da:73:43:0f:37:0c:d7:d6:e6:7d:cd:
83:ef:5d:37:a0:64:d4:80:95:22:e7:75:de:86:c6:f1:3d:64:
53:e9:e4:e1:8e:d5:73:75:c3:46:3e:93:36:0d:9e:3a:27:98:
f5:a9:bd:ad:ce:eb:ad:b6:36:b2:49:bb:e2:60:0a:53:8d:ea:
40:0b:3e:1b:38:5c:9d:3a:65:18:c6:a5:c7:44:99:b7:c6:e2:
4d:8a:df:da:88:de:ef:6d:68:6f:55:e9:57:cc:f4:df:d7:fa:
9f:7b:70:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:26:31 2026 by rpki-client