Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.mft
File: PFlVXsIygmx91tmpJrU2AoN5SfY.mft (raw, json)
Hash identifier: 915s+RYB3BlaZKdvfX8M2/9s0nVlb5G3pY7tSh6No7k=
Subject key identifier: DD:E6:65:5A:31:C7:86:06:EB:A3:06:48:3D:EB:6C:96:CC:AA:31:4A
Authority key identifier: 3C:59:55:5E:C2:32:82:6C:7D:D6:D9:A9:26:B5:36:02:83:79:49:F6
Certificate issuer: /CN=3c59555ec232826c7dd6d9a926b53602837949f6
Certificate serial: 01A0CA7DBE5699C880211BBB5FAAD3B5E0A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFlVXsIygmx91tmpJrU2AoN5SfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.mft
Manifest number: 061D
Signing time: Tue 22 Sep 2026 19:00:33 +0000
Manifest this update: Tue 22 Sep 2026 19:00:33 +0000
Manifest next update: Wed 23 Sep 2026 19:00:33 +0000
Files and hashes: 1: 9rXRCwgatUO9kftONibS3RKLT7o.asa (hash: cTJSOpixcce8y4cST/YpaD7CTOPUYVw3x0RQUp7VLKA=)
2: PFlVXsIygmx91tmpJrU2AoN5SfY.crl (hash: 31neW1SHJRXqbPCLaoDPLDxaNJMEUE2HxC3syA5LJFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFlVXsIygmx91tmpJrU2AoN5SfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7d:be:56:99:c8:80:21:1b:bb:5f:aa:d3:b5:e0:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c59555ec232826c7dd6d9a926b53602837949f6
Validity
Not Before: Sep 22 19:00:33 2026 GMT
Not After : Sep 23 19:00:33 2026 GMT
Subject: CN=dde6655a31c78606eba306483deb6c96ccaa314a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ed:58:01:e1:c3:f1:c2:33:45:b8:a4:7c:55:
41:46:c9:d3:0f:bf:1b:e0:2d:f5:eb:2f:f9:fd:40:
25:21:8e:95:f9:bf:b9:42:83:0b:c4:95:19:89:8b:
59:be:7c:84:42:46:00:13:00:27:41:8a:32:60:2c:
80:ae:93:39:8c:06:58:bf:8b:74:9c:88:ca:81:01:
8a:b3:6b:bb:60:4c:fa:ec:4d:cd:d8:e9:97:e1:58:
b6:46:e3:b2:a0:92:9c:9c:f1:cc:5e:56:99:29:a6:
08:6e:9f:b5:c2:eb:1e:41:43:0b:12:e2:d1:c2:a5:
54:a5:89:0d:b1:5d:74:e5:99:ae:7a:5d:ed:90:51:
90:b6:6f:8a:db:2d:c1:b9:1a:ed:f4:4d:bb:a8:3c:
53:10:e3:a2:92:03:cd:b6:ff:cf:75:de:d7:6b:a4:
3f:7c:86:63:2b:8e:0c:70:29:cd:c0:0f:92:b9:8a:
d7:3a:cd:2b:8a:ed:03:4e:3b:71:46:b4:63:f9:c3:
0f:0b:0d:1d:9b:a9:e9:1d:47:b7:67:a1:d0:64:54:
40:bc:17:f6:1f:5f:4b:af:95:9e:a1:ec:59:e3:9e:
95:6b:9e:81:62:5e:f7:70:6e:7d:8e:92:4e:b9:49:
6f:cd:1a:df:09:21:f6:93:d2:99:b0:37:4e:2e:02:
ef:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E6:65:5A:31:C7:86:06:EB:A3:06:48:3D:EB:6C:96:CC:AA:31:4A
X509v3 Authority Key Identifier:
keyid:3C:59:55:5E:C2:32:82:6C:7D:D6:D9:A9:26:B5:36:02:83:79:49:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFlVXsIygmx91tmpJrU2AoN5SfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f4:0f:46:2a:2a:e3:07:e3:c4:e9:06:08:4a:92:8c:12:51:
21:d4:a9:b7:f7:db:9e:54:2f:b4:c4:4e:4d:7a:65:9b:d1:33:
c8:d8:27:e9:64:af:cc:71:25:46:f7:52:ad:b5:f2:ed:a5:49:
2a:aa:f3:a5:09:0e:4e:67:a2:f3:fc:ac:82:85:15:03:dc:25:
8b:95:03:6d:c6:e7:13:3e:34:ea:d6:b2:6d:81:05:7c:81:21:
70:0d:d0:f9:0b:49:4f:f8:ce:65:e5:c3:a2:92:9e:cc:b2:4e:
15:07:d9:2f:7c:1e:9d:b8:44:ed:71:f6:a3:cb:e4:7c:45:d6:
51:fd:19:6f:18:4f:9c:e4:44:c0:81:2d:5c:6e:58:76:f4:a2:
17:42:57:b9:34:40:df:dc:3f:1f:6e:d8:3b:fb:d9:f7:8c:b1:
36:c4:87:d1:8c:4b:74:5a:17:18:e8:e0:98:cb:e5:f8:ef:e6:
39:7e:1f:c5:5d:e9:1a:a3:6c:b3:de:97:f7:2a:31:1d:3f:dd:
ab:a8:29:a9:86:c4:fb:58:45:3f:b4:71:e5:88:c0:28:5f:15:
ea:e0:e2:f8:bf:f1:15:5c:0a:d0:65:cf:b2:0a:13:fe:63:86:
15:95:b5:75:53:2d:da:dc:d2:5c:4c:dc:38:05:a5:8f:68:34:
dc:fb:85:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:00:11 2026 by rpki-client