Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft
File: PabmnmXdClQFmXA-0MkkdMsg6Tk.mft (raw, json)
Hash identifier: GwDRlb1zGFjiaFfdGJo3qRWS1R21B6EPPCK7fJKvzSg=
Subject key identifier: 00:F5:AF:7B:FE:C3:BE:AD:E3:8D:1D:85:5C:2B:D7:E7:D0:A8:89:AD
Authority key identifier: 3D:A6:E6:9E:65:DD:0A:54:05:99:70:3E:D0:C9:24:74:CB:20:E9:39
Certificate issuer: /CN=3da6e69e65dd0a540599703ed0c92474cb20e939
Certificate serial: 019D2704D100F45CE3097F309440E5653679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft
Manifest number: 17E6
Signing time: Wed 25 Mar 2026 22:02:00 +0000
Manifest this update: Wed 25 Mar 2026 22:02:00 +0000
Manifest next update: Thu 26 Mar 2026 22:02:00 +0000
Files and hashes: 1: 30JCy0OML-aej9HWtOYjdVh3Y58.roa (hash: hP6Mk/u93EteMPnPTXhr0EjSwhq+2k3+uAkB+TauqHk=)
2: PabmnmXdClQFmXA-0MkkdMsg6Tk.crl (hash: vhwQpkZ31mBKzU8wg0YH0HwUHtdK0WGwykGpG3ZOOGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:d1:00:f4:5c:e3:09:7f:30:94:40:e5:65:36:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3da6e69e65dd0a540599703ed0c92474cb20e939
Validity
Not Before: Mar 25 22:02:00 2026 GMT
Not After : Mar 26 22:02:00 2026 GMT
Subject: CN=00f5af7bfec3beade38d1d855c2bd7e7d0a889ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:79:22:cf:e6:85:d7:15:49:8e:ad:3a:84:0b:
4f:b3:15:64:e3:23:f5:bd:05:82:cf:89:05:d7:f4:
6c:f1:86:a9:b3:b0:f6:5e:21:65:fd:f3:a4:92:1c:
14:b1:35:85:58:d1:37:7e:27:f2:03:47:b7:8b:41:
b6:78:67:7a:11:40:26:c2:1c:92:ed:dc:0d:44:a1:
42:1d:17:71:c6:e7:8e:64:97:3f:fc:27:38:8c:b9:
de:aa:c1:45:50:20:bd:bf:40:cd:87:7b:68:e1:4b:
15:6c:26:15:f1:f6:44:71:36:66:92:81:16:cc:8b:
5d:77:55:92:5e:7f:a8:08:93:c0:5f:24:5b:14:b0:
93:ad:61:53:a9:3e:0a:9b:fe:63:98:34:d1:1a:a9:
93:96:ba:39:25:61:f9:7b:3d:db:54:1c:b4:a4:28:
d1:e4:bd:92:e8:b5:53:c1:a1:73:ac:9a:c0:47:27:
de:e6:0c:d8:f4:eb:6f:1e:15:3c:7f:b4:74:ef:29:
c6:28:33:b5:e7:88:6d:d7:02:a2:30:20:01:14:a7:
04:63:3f:3e:d5:fe:3c:18:ee:73:1c:d0:28:1a:32:
be:79:ed:0f:88:ef:57:85:37:22:fc:52:26:47:97:
fd:2e:db:30:1f:b9:11:58:53:61:36:40:2d:de:fa:
2f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F5:AF:7B:FE:C3:BE:AD:E3:8D:1D:85:5C:2B:D7:E7:D0:A8:89:AD
X509v3 Authority Key Identifier:
keyid:3D:A6:E6:9E:65:DD:0A:54:05:99:70:3E:D0:C9:24:74:CB:20:E9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:cf:72:b9:50:c4:14:78:da:52:4e:61:c1:48:07:2a:1b:85:
bf:5b:b5:80:62:4b:31:07:6a:20:f2:f0:24:7d:e0:96:13:d3:
b4:ec:47:e6:9d:20:59:c4:b3:53:32:79:77:2b:f6:07:85:4f:
42:7c:45:37:53:88:6c:2c:10:c3:11:05:1d:75:4a:d1:5d:0a:
75:43:b3:07:ef:b7:a2:24:18:73:a3:d3:77:14:97:3b:a8:42:
80:1b:87:92:19:12:96:c6:b0:bd:bd:af:a8:8d:a2:c3:91:f9:
4c:1e:a0:cb:8d:7f:98:c9:87:46:d5:04:79:d7:da:3a:c6:c9:
61:ff:2c:fb:19:9a:db:b5:cf:09:f4:b3:b0:26:25:5c:9a:b9:
e9:07:3f:2a:c4:e7:20:dd:55:4d:2e:09:c3:ec:2f:7d:09:0e:
9a:cf:ce:b7:a6:5a:6c:67:01:0a:3f:c3:76:af:c2:0a:17:9f:
6c:e6:8b:f2:b2:d5:9d:80:1e:43:96:7e:d4:e4:00:c5:e5:0d:
da:9b:04:30:0b:0e:0f:68:36:b3:6e:b5:0d:48:b1:b0:11:d2:
ab:16:53:d1:c9:0a:1b:b7:4a:8b:ba:4b:34:ca:e1:ab:1b:2d:
cd:1f:ca:2e:30:54:cd:45:fc:5d:73:f2:b2:eb:86:c7:2c:1d:
a6:5c:b1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:55:48 2026 by rpki-client