Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
File: PNKqcak6qcEye3NTigR45PeC9vc.mft (raw, json)
Hash identifier: NbHohJSwESifJxWaSCma0BvgGcv29J9sfJzeLT1JVWg=
Subject key identifier: D7:70:91:E2:F0:2C:EB:E1:B6:EE:CB:08:6A:9B:53:6B:81:77:93:1A
Authority key identifier: 3C:D2:AA:71:A9:3A:A9:C1:32:7B:73:53:8A:04:78:E4:F7:82:F6:F7
Certificate issuer: /CN=3cd2aa71a93aa9c1327b73538a0478e4f782f6f7
Certificate serial: 019F92B6805793A1848EA1C63DC7B3892D1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
Manifest number: 1141
Signing time: Fri 24 Jul 2026 06:01:01 +0000
Manifest this update: Fri 24 Jul 2026 06:01:01 +0000
Manifest next update: Sat 25 Jul 2026 06:01:01 +0000
Files and hashes: 1: PNKqcak6qcEye3NTigR45PeC9vc.crl (hash: 6y7+gkCT81ERdIt3z+NXt97CJLRPvs3Kgo/SoU1lP1s=)
2: uW_Gdpnt7OwD3cAseMegdu6xN8M.roa (hash: 3VkXuruUsY9wPEkXG/tiCZgs9rIhDAAbcoWQ4X0SwBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:80:57:93:a1:84:8e:a1:c6:3d:c7:b3:89:2d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd2aa71a93aa9c1327b73538a0478e4f782f6f7
Validity
Not Before: Jul 24 06:01:01 2026 GMT
Not After : Jul 25 06:01:01 2026 GMT
Subject: CN=d77091e2f02cebe1b6eecb086a9b536b8177931a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f3:49:f9:72:6f:d7:e1:2f:b5:36:33:4d:d2:
6a:ae:d0:46:3a:40:ba:b2:2a:b2:18:81:de:cd:a2:
fe:75:92:94:02:64:57:57:08:c9:c8:1d:2a:3a:9a:
31:2d:e5:1f:ef:dc:35:be:ea:97:59:a1:89:ef:ad:
33:77:a3:6c:0d:4c:5b:39:64:5d:db:d2:1e:28:6f:
b5:c0:51:0a:42:8d:4e:57:52:92:d8:ce:b8:59:19:
76:39:e6:ac:dd:4a:31:a6:08:13:1f:7f:8b:6c:e9:
17:83:09:34:8a:84:0a:e6:05:c6:f7:a2:92:d3:2c:
1d:95:8f:52:d2:5e:71:bf:35:ae:20:24:9f:10:b7:
8b:3a:d4:26:ac:dd:f7:7e:47:e7:83:0c:eb:af:b4:
8b:b0:a2:48:fa:91:73:39:c8:1b:88:4e:16:38:2c:
0a:dc:0a:e8:60:d4:a0:22:50:bf:b1:21:32:df:21:
0e:37:be:7b:2b:a9:73:19:ac:1a:64:2d:3f:0a:d7:
8c:dc:1a:58:9f:6c:17:65:85:3d:cc:ab:ae:c7:69:
16:17:da:4e:1a:93:6a:46:2d:ec:1b:89:6b:24:fd:
ef:89:3b:e2:f7:56:f0:0b:33:f5:9a:ab:7d:09:9b:
03:7f:c0:ba:7f:0d:d1:fe:a0:f3:43:13:25:6d:17:
96:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:70:91:E2:F0:2C:EB:E1:B6:EE:CB:08:6A:9B:53:6B:81:77:93:1A
X509v3 Authority Key Identifier:
keyid:3C:D2:AA:71:A9:3A:A9:C1:32:7B:73:53:8A:04:78:E4:F7:82:F6:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:00:66:9f:1d:df:f4:b1:aa:d4:6d:71:d7:8a:06:dc:ee:81:
bb:f8:8b:2a:e1:6f:5d:cc:65:40:e9:2d:e7:29:10:0b:b5:00:
09:36:d0:67:75:d7:3e:73:b9:b6:f3:b5:0c:87:13:dd:a2:7a:
80:54:7d:09:cd:68:9d:3b:70:5e:23:9b:7e:d4:cf:6c:97:e1:
d0:a7:da:6d:6e:b9:ba:0f:ec:f0:0e:6d:1f:21:97:b1:41:02:
d2:71:b4:45:a8:f5:16:6e:0b:2a:4a:db:8f:41:f5:d1:e9:93:
a1:52:ba:38:71:2a:4c:88:68:76:3b:4b:38:c7:19:80:94:e3:
8a:b3:4b:56:f4:52:48:83:26:b8:8a:08:09:99:2b:7c:d6:17:
e0:ed:fc:a2:ff:d0:e8:a3:0f:fd:10:b0:43:bd:5b:9f:d2:8d:
63:55:e6:72:c8:17:4a:76:95:6d:56:d2:e8:f8:68:6f:7a:cf:
cd:34:9f:cd:38:cf:2a:69:5d:8a:b1:89:48:4f:a4:57:4b:a8:
2c:c3:e7:2d:2d:98:b3:f9:47:d3:8e:84:1e:fc:61:83:f7:ad:
1c:6e:4b:ce:04:bf:18:b3:ed:1d:25:a0:c1:15:d7:2f:61:ef:
d1:d4:1a:27:c3:c4:ce:1b:3d:7c:04:14:a7:55:04:34:82:45:
c3:1e:6e:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+StoBXk6GEjqHGPceziS0bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZDJhYTcxYTkzYWE5YzEzMjdiNzM1MzhhMDQ3OGU0Zjc4
MmY2ZjcwHhcNMjYwNzI0MDYwMTAxWhcNMjYwNzI1MDYwMTAxWjAzMTEwLwYDVQQD
EyhkNzcwOTFlMmYwMmNlYmUxYjZlZWNiMDg2YTliNTM2YjgxNzc5MzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/NJ+XJv1+EvtTYzTdJqrtBGOkC6
siqyGIHezaL+dZKUAmRXVwjJyB0qOpoxLeUf79w1vuqXWaGJ760zd6NsDUxbOWRd
29IeKG+1wFEKQo1OV1KS2M64WRl2Oeas3UoxpggTH3+LbOkXgwk0ioQK5gXG96KS
0ywdlY9S0l5xvzWuICSfELeLOtQmrN33fkfngwzrr7SLsKJI+pFzOcgbiE4WOCwK
3AroYNSgIlC/sSEy3yEON757K6lzGawaZC0/CteM3BpYn2wXZYU9zKuux2kWF9pO
GpNqRi3sG4lrJP3viTvi91bwCzP1mqt9CZsDf8C6fw3R/qDzQxMlbReWQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdwkeLwLOvhtu7LCGqbU2uBd5MaMB8GA1UdIwQY
MBaAFDzSqnGpOqnBMntzU4oEeOT3gvb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE5LcWNhazZxY0V5ZTNOVGlnUjQ1UGVDOXZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83NTdmMmItNGYwMS00ZTcwLWIzZDUt
NGZkYmE4NjdlNDdhLzEvUE5LcWNhazZxY0V5ZTNOVGlnUjQ1UGVDOXZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83NTdmMmItNGYwMS00ZTcwLWIzZDUtNGZkYmE4NjdlNDdh
LzEvUE5LcWNhazZxY0V5ZTNOVGlnUjQ1UGVDOXZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAewBmnx3f
9LGq1G1x14oG3O6Bu/iLKuFvXcxlQOkt5ykQC7UACTbQZ3XXPnO5tvO1DIcT3aJ6
gFR9Cc1onTtwXiObftTPbJfh0KfabW65ug/s8A5tHyGXsUEC0nG0Raj1Fm4LKkrb
j0H10emToVK6OHEqTIhodjtLOMcZgJTjirNLVvRSSIMmuIoICZkrfNYX4O38ov/Q
6KMP/RCwQ71bn9KNY1XmcsgXSnaVbVbS6Phob3rPzTSfzTjPKmldirGJSE+kV0uo
LMPnLS2Ys/lH046EHvxhg/etHG5LzgS/GLPtHSWgwRXXL2Hv0dQaJ8PEzhs9fAQU
p1UENIJFwx5uoA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:39:37 2026 by rpki-client