Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
File: PNKqcak6qcEye3NTigR45PeC9vc.mft (raw, json)
Hash identifier: PyDk3sBG42F3D3wAwmnMI+9LZ0mPlK1wWF8r5Cw41nc=
Subject key identifier: E6:1D:E4:4F:4A:77:58:AE:64:52:4A:30:B4:87:C5:2C:01:03:7A:E6
Authority key identifier: 3C:D2:AA:71:A9:3A:A9:C1:32:7B:73:53:8A:04:78:E4:F7:82:F6:F7
Certificate issuer: /CN=3cd2aa71a93aa9c1327b73538a0478e4f782f6f7
Certificate serial: 019D26CD066DBCA769C7C8D9314384344B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
Manifest number: 1000
Signing time: Wed 25 Mar 2026 21:01:03 +0000
Manifest this update: Wed 25 Mar 2026 21:01:03 +0000
Manifest next update: Thu 26 Mar 2026 21:01:03 +0000
Files and hashes: 1: PNKqcak6qcEye3NTigR45PeC9vc.crl (hash: +GusfBBX9xgI4Kk9RrYdT9zfRLvXlFC7PGYO9R46iFc=)
2: uW_Gdpnt7OwD3cAseMegdu6xN8M.roa (hash: 3VkXuruUsY9wPEkXG/tiCZgs9rIhDAAbcoWQ4X0SwBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:06:6d:bc:a7:69:c7:c8:d9:31:43:84:34:4b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd2aa71a93aa9c1327b73538a0478e4f782f6f7
Validity
Not Before: Mar 25 21:01:03 2026 GMT
Not After : Mar 26 21:01:03 2026 GMT
Subject: CN=e61de44f4a7758ae64524a30b487c52c01037ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:84:86:03:80:9f:1d:e0:4b:82:80:5b:7c:cb:
94:e0:f8:7b:e1:a9:6c:e9:ab:31:e1:85:f6:24:28:
4f:43:47:e7:0f:c8:e0:87:9c:00:60:bc:f0:8c:ea:
8b:54:a4:78:1e:6b:46:9c:5d:47:b8:38:58:d2:31:
ff:bf:91:6c:51:d1:19:15:78:72:52:b0:01:d3:45:
fb:cf:35:cf:78:ba:f7:46:28:da:7e:c8:3e:29:2a:
f2:12:95:e1:67:4f:98:3d:56:fd:ae:3f:ba:21:f5:
8f:af:7c:27:3d:ea:c6:c4:d6:70:8e:14:f9:2e:47:
6a:1f:f0:bb:74:a7:0c:66:10:8b:fd:10:e5:c5:b8:
75:8b:0a:dd:f4:30:30:99:b5:86:18:39:26:cc:cf:
9a:d8:18:96:e3:5f:5b:01:bc:7d:36:bc:f9:bc:e9:
5a:90:69:64:8a:13:2e:d5:f9:3a:07:90:f8:c3:e0:
cc:8f:dc:53:7a:2a:4a:53:39:22:d6:44:b6:4f:95:
69:dc:45:41:59:fe:c7:e4:99:78:0f:51:a3:9e:90:
2f:48:2e:85:44:ac:d1:99:fa:cd:4f:b1:ee:0d:f2:
c4:d5:9f:94:4d:97:9d:88:4a:58:89:e0:22:9d:ce:
3b:aa:28:94:ae:f2:64:71:67:7d:97:a6:12:2c:50:
ce:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:1D:E4:4F:4A:77:58:AE:64:52:4A:30:B4:87:C5:2C:01:03:7A:E6
X509v3 Authority Key Identifier:
keyid:3C:D2:AA:71:A9:3A:A9:C1:32:7B:73:53:8A:04:78:E4:F7:82:F6:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d4:49:b3:65:94:d6:83:bb:3f:99:ba:c7:f5:ee:ae:8e:3b:
05:ff:17:e0:e2:5d:e7:28:b2:84:28:ab:4d:39:73:39:32:4e:
80:4d:5f:ee:02:0f:08:79:35:a7:c3:85:dd:22:bd:e5:4d:14:
3d:2f:45:07:a9:f2:81:74:45:87:27:f4:9f:d6:b9:f0:0c:b7:
09:cf:cc:98:c2:5d:f7:09:f9:6c:d8:20:a4:df:89:1f:59:97:
5d:1e:33:33:97:74:bf:26:ed:15:69:b8:a8:c9:00:92:f3:10:
e4:21:76:4e:25:56:c8:42:e2:fa:9d:2a:68:56:d6:e3:2d:80:
6c:d9:7e:9a:21:09:70:cc:ae:0e:f2:00:e4:58:6b:36:f5:92:
02:6f:89:be:61:69:02:98:4c:2b:0c:18:cd:94:a8:f6:86:c6:
94:13:84:2c:6b:c7:e0:b0:53:da:3e:fd:67:21:0a:21:c7:39:
9f:2f:8c:6e:a2:e2:c0:b6:eb:de:38:61:f5:fc:05:26:0c:72:
f4:91:79:bf:c4:6c:bf:8f:c4:b7:f6:bb:40:47:48:c8:5a:8c:
1c:72:9b:37:0a:f5:23:e4:07:99:8e:91:a4:4d:c2:0d:2d:12:
53:b1:ee:dc:3f:fd:83:e1:79:b9:12:5f:c0:62:b5:64:fe:70:
54:ac:38:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:03 2026 by rpki-client