Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
File: PD9FAh1us0CkKy5d0fv3IaGmbWE.mft (raw, json)
Hash identifier: 3AbSRUKQglPCi2TtSGckI4dFfR4Dpzha7mT8GQZxSkU=
Subject key identifier: D9:C0:81:75:AB:B8:C5:E8:5B:EC:A0:80:88:33:6F:9B:60:4F:8E:4A
Authority key identifier: 3C:3F:45:02:1D:6E:B3:40:A4:2B:2E:5D:D1:FB:F7:21:A1:A6:6D:61
Certificate issuer: /CN=3c3f45021d6eb340a42b2e5dd1fbf721a1a66d61
Certificate serial: 019E1E3597326BFEF95C1F5F0D2E09C182E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
Manifest number: 0FED
Signing time: Tue 12 May 2026 22:01:28 +0000
Manifest this update: Tue 12 May 2026 22:01:28 +0000
Manifest next update: Wed 13 May 2026 22:01:28 +0000
Files and hashes: 1: KuWWtknOGKLAtEUJQ2qfl_jNlmg.roa (hash: W5TqBGi3Id1AxwKzwqUslwR28wws2MIYj5VeG6wq05Q=)
2: PD9FAh1us0CkKy5d0fv3IaGmbWE.crl (hash: jQKVSp8/1AcT9uFgao6eBBmZ1ESDFakAuY3ChCH0iao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:97:32:6b:fe:f9:5c:1f:5f:0d:2e:09:c1:82:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c3f45021d6eb340a42b2e5dd1fbf721a1a66d61
Validity
Not Before: May 12 22:01:28 2026 GMT
Not After : May 13 22:01:28 2026 GMT
Subject: CN=d9c08175abb8c5e85beca08088336f9b604f8e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5f:09:31:49:6c:7e:61:6f:50:8c:c5:de:03:
6e:96:97:6b:1a:9d:98:1f:7c:22:d9:e8:73:a7:fb:
30:62:ac:d0:5c:12:c1:d4:00:dd:93:25:e7:12:5d:
85:1b:30:8c:fe:5c:64:fd:46:2e:ca:e0:6f:b5:56:
bd:40:24:70:81:a5:39:5f:c5:1a:b1:69:ef:ef:8f:
f0:e5:f8:f6:56:0c:cc:7a:76:ad:b2:b4:5d:ff:e0:
a0:25:29:58:4c:8a:dc:16:a1:71:9f:10:8c:08:a9:
dc:25:ba:e1:c3:36:e7:38:7f:91:1e:8d:be:ef:4c:
c9:a7:8b:64:c1:f5:24:95:e9:43:8b:62:65:7e:55:
a5:e3:0e:fc:a1:b2:55:2e:7b:7d:d8:11:8a:70:6a:
87:b4:99:07:79:80:55:69:5e:e8:5f:82:78:e3:ab:
77:4b:2a:90:b9:93:a1:36:87:43:e0:66:c1:f8:2a:
ab:e7:91:b1:ba:ae:ba:c2:f5:48:f6:f9:58:ed:ed:
dd:6d:00:38:6d:4d:b3:75:51:21:a7:15:dd:41:dd:
ee:61:60:b8:4a:37:b0:4f:aa:4d:dc:73:32:5f:d4:
ab:db:53:0e:fb:b0:33:4b:ec:fd:1c:b4:f7:dc:e0:
01:8b:6b:7b:f5:cb:f4:5a:ef:b0:7a:0a:7f:1a:19:
9a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C0:81:75:AB:B8:C5:E8:5B:EC:A0:80:88:33:6F:9B:60:4F:8E:4A
X509v3 Authority Key Identifier:
keyid:3C:3F:45:02:1D:6E:B3:40:A4:2B:2E:5D:D1:FB:F7:21:A1:A6:6D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:b3:59:53:20:c8:95:94:58:47:34:6d:24:03:a0:3c:51:e0:
ea:63:42:c4:22:07:68:25:41:71:d1:df:ca:e6:5f:32:90:3a:
5b:ac:e4:fb:45:c8:cb:f4:1c:bd:22:5d:f6:e2:58:f5:02:84:
07:94:08:55:53:79:be:55:4a:d7:84:33:f1:17:e6:63:ff:6d:
f4:52:16:eb:16:31:e8:6a:0d:b1:64:4e:47:3c:f1:4a:83:28:
8c:b6:e5:f8:03:92:d2:39:93:63:ce:1f:66:dd:4e:d1:ae:e5:
10:8d:3c:e1:5d:73:9d:69:ee:08:25:32:37:0d:7c:55:ec:a3:
b6:4d:b1:4e:cc:da:30:ab:b7:96:35:2f:cf:8c:c2:b5:18:6d:
84:78:19:6a:70:21:fc:10:65:dd:89:28:4b:29:95:67:4f:17:
7f:15:28:b9:79:df:2d:10:67:52:ce:17:49:8c:51:01:80:aa:
4a:01:56:3e:84:a4:be:1f:a7:24:e8:49:a9:83:3c:b4:5d:94:
fa:c5:23:0a:3d:f1:95:7e:93:03:1e:c4:94:49:0a:03:a0:f7:
b5:26:4c:ab:a8:67:dd:f1:73:5c:d6:41:ad:21:d3:e2:2d:40:
19:38:af:a6:53:a7:0c:b9:56:14:1b:68:9c:0f:f5:aa:96:88:
2c:ac:6e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:36:57 2026 by rpki-client