Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
File: PNKqcak6qcEye3NTigR45PeC9vc.mft (raw, json)
Hash identifier: QP1ezNRc0/lwct8W02MZiYbp/BtQTCPtG3e/tSq1LCE=
Subject key identifier: D1:1F:8C:9E:15:16:6A:0D:99:84:D0:23:64:9E:DD:54:59:2D:6C:25
Authority key identifier: 3C:D2:AA:71:A9:3A:A9:C1:32:7B:73:53:8A:04:78:E4:F7:82:F6:F7
Certificate issuer: /CN=3cd2aa71a93aa9c1327b73538a0478e4f782f6f7
Certificate serial: 019E1DFE0DD252F8DCE83F8E7A9861A94FD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
Manifest number: 1080
Signing time: Tue 12 May 2026 21:00:49 +0000
Manifest this update: Tue 12 May 2026 21:00:49 +0000
Manifest next update: Wed 13 May 2026 21:00:49 +0000
Files and hashes: 1: PNKqcak6qcEye3NTigR45PeC9vc.crl (hash: toRwj2VmYu8LznRKANlSNPDsL8DXcS9eU1jNc2POBkQ=)
2: uW_Gdpnt7OwD3cAseMegdu6xN8M.roa (hash: 3VkXuruUsY9wPEkXG/tiCZgs9rIhDAAbcoWQ4X0SwBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:0d:d2:52:f8:dc:e8:3f:8e:7a:98:61:a9:4f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd2aa71a93aa9c1327b73538a0478e4f782f6f7
Validity
Not Before: May 12 21:00:49 2026 GMT
Not After : May 13 21:00:49 2026 GMT
Subject: CN=d11f8c9e15166a0d9984d023649edd54592d6c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:db:39:ad:85:6a:b2:dc:73:5a:d7:a5:4b:71:
a1:ed:c4:c5:b8:78:be:d1:e7:e4:11:70:35:1a:1e:
e5:20:fc:b1:fc:6b:ed:5a:0b:2e:72:3e:d8:9e:f8:
13:e2:18:b5:35:af:fb:69:f5:fc:84:a5:cc:e6:7d:
42:1f:60:68:74:2e:8f:31:f5:b4:9b:7b:bf:4a:ef:
26:7f:ce:6e:ff:ee:49:04:4a:e0:87:ea:11:6e:65:
97:09:fa:40:e7:af:31:e9:41:65:fb:62:32:be:25:
1b:ac:69:b0:d4:ab:61:50:80:96:bb:a4:e9:91:9e:
3a:e0:cc:bd:62:ec:c7:a5:07:5b:eb:52:5e:95:e5:
e7:b1:5c:9e:c6:bd:ee:ce:79:ae:c8:e7:bd:f3:4d:
b4:1a:e9:6b:29:61:a3:5b:07:92:28:3c:e6:6c:d3:
2a:05:27:ec:28:ab:d6:d7:b9:ab:81:a2:eb:7d:3e:
7d:34:1e:91:05:52:e6:96:b3:73:fb:83:fd:58:2f:
e7:24:8f:eb:79:03:7e:a6:ac:2a:65:1f:7a:bd:ee:
91:d7:67:35:6c:92:a2:86:ca:64:3c:c3:c0:68:dc:
c5:d3:f4:02:86:6e:f1:c0:52:3a:49:f2:b4:45:d6:
10:3f:2f:b5:f0:8c:62:51:36:9b:dc:19:bf:cb:9d:
43:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1F:8C:9E:15:16:6A:0D:99:84:D0:23:64:9E:DD:54:59:2D:6C:25
X509v3 Authority Key Identifier:
keyid:3C:D2:AA:71:A9:3A:A9:C1:32:7B:73:53:8A:04:78:E4:F7:82:F6:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:c6:96:78:fb:14:d1:40:76:16:d5:a7:ef:b5:81:dc:31:bf:
03:83:03:ec:bc:e5:15:95:3a:b2:d1:d8:21:93:8a:2c:33:9c:
11:10:c5:0d:6b:4f:75:f4:b3:6b:a8:59:8b:dd:87:81:0a:bc:
0e:48:62:74:21:d2:12:64:5b:54:56:4e:af:14:aa:03:38:d4:
bb:a6:f7:42:2c:29:3e:fb:02:4d:ba:6f:ba:4c:67:f7:fa:ae:
6e:1a:94:00:fb:a9:7b:40:0e:59:32:24:05:10:14:1f:26:b3:
83:27:cf:21:ba:b4:81:01:71:b1:bb:a5:29:2d:be:2d:3c:a1:
93:9a:95:7d:8b:a9:77:09:9e:38:32:cc:a7:d2:b4:46:bd:c5:
17:ce:3a:2b:3a:3b:1b:00:cd:45:9f:2d:ca:7f:a4:d2:30:1e:
79:4f:7d:8e:a8:24:c2:34:c2:55:88:33:af:8a:78:5a:1c:6d:
65:55:9e:3a:11:98:64:08:aa:1b:78:b8:3e:71:b9:cd:a5:b8:
03:69:a8:d7:0a:28:f2:dc:64:49:cd:2d:8b:a9:3b:50:95:3c:
34:22:93:1c:60:cf:e0:0e:d2:d0:19:3f:cd:b8:6a:07:3d:ad:
e6:70:bc:23:63:61:9e:80:6b:ef:96:89:7e:3b:8c:da:52:d6:
e9:d2:93:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:19:49 2026 by rpki-client