Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
File: PiTH7Po30khxUvubu6tQvnneJhk.mft (raw, json)
Hash identifier: pJPQ8wOcvXmteJsGAnhnCqmYVbBH8JyUJYoImiCpoj8=
Subject key identifier: C4:C3:87:0B:FE:5B:FC:69:A8:C9:9A:DA:39:E4:D4:80:CB:85:99:6B
Authority key identifier: 3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
Certificate issuer: /CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Certificate serial: 01A1DD26CF9D61068436891D3CC6F5035724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
Manifest number: 1B09
Signing time: Sun 15 Nov 2026 03:01:10 +0000
Manifest this update: Sun 15 Nov 2026 03:01:10 +0000
Manifest next update: Mon 16 Nov 2026 03:01:10 +0000
Files and hashes: 1: 5ktFpVoHtcv-4PVj4xQGVTm6rZs.roa (hash: Zqkw6KvI8acX/aUr49KfIKqTAKRlHDvQQG+hF6oNumM=)
2: L1LuXNyLmddWoquATgiWDCkvIvc.roa (hash: 4bMlcyRakC1GsgwgHN92wea/CUU4Dqc8/FL+CIWH9ng=)
3: PiTH7Po30khxUvubu6tQvnneJhk.crl (hash: d5wl08Iv5JY31UMNwx13a09qPAWUMbNW8DQOnj3oEuc=)
4: o5xjwD3RHYwZb8BGUpI8BsGBfV0.roa (hash: GZFTwMUyNntUts8RndeOn9OC9VYkHxusfe9yub/gTL4=)
5: t48mXkmHCqZPmvOXE_EaAv0d4IU.roa (hash: kn+opPbME6YgDhBuXcQLf7UfJNA4/7anLklPax/nt4w=)
6: tl_q-hSPqgL5VpoDk8C2Ua5xTVc.roa (hash: P7Vo08T4BVo4faac/Yk9jWiigRql2vSCBoh+fxrW89w=)
7: xocNCIYKfAnpt4j7-4dI5cWkT8Q.roa (hash: og0HfAzHezrSbN3NhEsFptFW8eiLweJs1cF+3fN0CHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:26:cf:9d:61:06:84:36:89:1d:3c:c6:f5:03:57:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Validity
Not Before: Nov 15 03:01:10 2026 GMT
Not After : Nov 16 03:01:10 2026 GMT
Subject: CN=c4c3870bfe5bfc69a8c99ada39e4d480cb85996b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c9:f1:28:8a:e8:d0:11:e0:8e:3d:ff:d2:d8:
49:06:ce:d9:f1:56:41:5d:e2:20:96:43:80:51:f2:
02:7d:dc:c8:cc:9b:19:94:79:cf:72:99:e4:c7:79:
73:83:e1:07:72:31:cf:66:7a:ba:14:d0:94:cb:43:
e7:1d:94:3e:46:1d:0f:e5:95:6b:1a:28:66:a6:e8:
ce:b3:e3:7b:de:a9:5d:97:77:d4:d9:86:46:25:51:
ef:86:00:f8:b3:cb:08:17:6c:b3:6a:1b:49:91:89:
06:59:a2:d0:f2:9d:09:6f:0c:bf:50:e4:1f:96:6f:
f1:34:bc:cd:f7:33:3f:25:e8:c0:84:fe:c9:22:30:
79:23:e6:70:24:ab:2e:96:87:bc:aa:b7:f4:1b:de:
d5:1b:14:4c:df:76:c3:3a:c7:bb:61:bb:c5:eb:66:
74:20:6b:9d:ac:f3:2e:22:9b:20:1a:b5:22:e9:e2:
72:94:ae:46:32:f7:87:c3:8e:52:d2:07:90:d7:8f:
89:bb:3c:ea:d2:38:a6:00:43:8c:18:04:45:26:f2:
be:0e:88:df:b1:97:6c:00:8a:9f:a2:08:3f:2a:10:
f2:ba:e1:0c:2c:a5:af:00:77:36:83:15:a6:0e:9d:
ec:a8:07:11:8d:4c:ae:75:e8:b2:45:fa:f8:7b:c0:
d0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C3:87:0B:FE:5B:FC:69:A8:C9:9A:DA:39:E4:D4:80:CB:85:99:6B
X509v3 Authority Key Identifier:
keyid:3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:87:f4:32:c2:26:83:59:9e:c9:0e:cf:7a:d5:3d:e3:d7:05:
b2:54:7b:89:90:51:d4:de:1f:94:3b:e7:6d:2c:48:e2:b0:93:
c0:48:cb:19:c0:93:50:6d:32:c6:07:ec:ff:14:cf:d2:49:64:
be:83:b3:82:65:46:8c:c0:09:19:8b:10:9a:9d:33:b4:54:6f:
94:0a:b1:7d:9f:04:97:1f:6e:b9:50:d0:87:91:4e:25:c7:37:
02:b5:13:ec:c0:f7:00:c1:f6:5d:b9:1d:58:84:07:fd:92:93:
53:38:68:51:1f:9a:cd:3b:43:8d:33:c5:7c:b9:ee:83:07:b1:
95:8d:f3:e0:d6:a8:53:22:6b:3f:71:24:92:4f:d1:ef:b1:5b:
83:ab:45:cd:41:66:f6:a8:70:ae:3b:cc:5d:37:6e:a6:f0:61:
53:2c:4d:81:ea:15:63:80:f3:b8:a1:03:68:b8:fb:b6:68:cd:
2c:62:c9:da:70:04:4f:61:28:fd:b7:ee:9a:12:a0:8b:cc:6b:
c3:15:59:f2:3b:43:26:71:47:46:cd:23:d0:01:63:66:73:82:
ab:82:0b:6c:b5:28:a6:b6:77:9c:68:16:52:38:80:c2:f7:06:
48:d5:8e:39:35:54:eb:2e:84:2d:49:94:16:23:5b:0a:7d:e9:
89:f9:66:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:32:09 2026 by rpki-client