Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
File: PNKqcak6qcEye3NTigR45PeC9vc.mft (raw, json)
Hash identifier: 0G+zAicu5xEk/BMSWl29LQdIE/qsQOm1QcFOpAPZaWA=
Subject key identifier: E5:1A:3C:7A:1B:F8:F4:7F:6F:C2:57:51:E7:08:8F:37:21:7C:9B:76
Authority key identifier: 3C:D2:AA:71:A9:3A:A9:C1:32:7B:73:53:8A:04:78:E4:F7:82:F6:F7
Certificate issuer: /CN=3cd2aa71a93aa9c1327b73538a0478e4f782f6f7
Certificate serial: 01A0D15B8FF09C83D66F8F54F236F447F48B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
Manifest number: 11E6
Signing time: Thu 24 Sep 2026 03:00:33 +0000
Manifest this update: Thu 24 Sep 2026 03:00:33 +0000
Manifest next update: Fri 25 Sep 2026 03:00:33 +0000
Files and hashes: 1: PNKqcak6qcEye3NTigR45PeC9vc.crl (hash: I+wVjl43p5jrYrvO/LQiZDH3cjUe+yZLWwIlKkecepU=)
2: uW_Gdpnt7OwD3cAseMegdu6xN8M.roa (hash: 3VkXuruUsY9wPEkXG/tiCZgs9rIhDAAbcoWQ4X0SwBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:8f:f0:9c:83:d6:6f:8f:54:f2:36:f4:47:f4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd2aa71a93aa9c1327b73538a0478e4f782f6f7
Validity
Not Before: Sep 24 03:00:33 2026 GMT
Not After : Sep 25 03:00:33 2026 GMT
Subject: CN=e51a3c7a1bf8f47f6fc25751e7088f37217c9b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a0:61:e8:bc:ac:15:9a:d8:ef:a3:b9:fe:28:
69:03:97:85:d1:dc:9b:4a:d5:0b:b4:f2:6d:21:18:
97:81:d7:6e:a2:db:ec:ec:8a:be:10:f9:53:b5:cc:
47:27:b8:01:ae:c9:ae:c6:9e:e6:9b:3b:0e:c1:19:
63:f4:0e:1c:4a:84:c9:1c:9f:e6:bc:a3:61:d5:97:
b1:5e:83:75:ac:4e:eb:38:11:c6:47:2d:d2:24:dd:
7a:56:92:d4:f4:95:b4:c1:58:0f:f5:5c:5d:fe:fe:
b1:41:31:4e:26:76:82:1a:48:06:bf:62:7f:cc:39:
8b:8e:34:9e:26:91:8c:a0:78:b3:04:04:4c:74:02:
1c:20:4d:8f:b6:39:ce:9f:60:c4:86:df:45:c6:3a:
46:4a:f7:0e:b3:01:0e:81:f7:f1:4d:0a:e2:82:3a:
08:33:32:65:8b:00:62:d3:f8:c6:be:71:6b:bf:1b:
1a:3f:41:af:94:c9:e4:6b:62:b6:ea:d2:ed:4b:3c:
4f:97:0e:61:03:80:61:b3:5b:d6:29:32:1b:95:ea:
f3:1a:65:c9:b3:09:c4:ed:ca:25:da:62:c8:ee:a8:
6f:78:f7:80:ec:32:ce:86:36:ef:2b:eb:6c:92:d2:
ee:dc:6f:67:ae:1a:ce:e6:74:37:75:a3:f6:2f:90:
0e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:1A:3C:7A:1B:F8:F4:7F:6F:C2:57:51:E7:08:8F:37:21:7C:9B:76
X509v3 Authority Key Identifier:
keyid:3C:D2:AA:71:A9:3A:A9:C1:32:7B:73:53:8A:04:78:E4:F7:82:F6:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c2:45:52:8f:a8:50:13:1d:2a:07:06:85:43:90:d9:7d:67:
eb:76:54:77:5c:53:e8:e0:69:f7:73:49:55:2c:b7:74:d4:35:
a4:f9:72:38:24:83:ce:26:2c:de:b2:c8:ef:59:07:60:1b:f3:
1f:48:a0:2c:9a:ae:0a:3b:6e:7e:8b:3b:b5:74:6d:dc:97:3c:
cc:03:25:5d:07:c5:31:91:37:9a:12:63:57:f7:ed:06:26:96:
b1:b8:19:56:48:05:ac:c5:9d:f0:a9:d4:d0:f7:8d:04:ee:c4:
31:70:61:c5:b3:18:e5:82:db:9d:bb:42:6a:1c:f1:7b:24:46:
96:49:b0:50:52:bf:11:0d:9b:78:7e:02:93:72:e8:8c:d9:2f:
00:59:4f:2c:8a:d0:88:03:8e:be:b9:f4:d6:ee:c7:8c:51:57:
76:93:0c:41:e3:2b:67:cb:bb:7e:63:7a:10:d6:0d:a9:64:ab:
5c:b5:eb:c6:6d:1e:91:01:05:e0:64:64:e5:68:d2:5b:12:27:
17:cb:76:a0:e2:db:40:73:76:5a:a1:35:ed:9e:01:49:90:eb:
57:48:18:ae:2a:bd:b1:b0:c2:87:74:8f:5a:5f:47:72:7e:ac:
c5:13:ac:c1:cd:e1:a5:65:68:9d:c1:75:ad:37:5f:05:dc:d3:
b1:dc:c9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:16:36 2026 by rpki-client