Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
File: PD9FAh1us0CkKy5d0fv3IaGmbWE.mft (raw, json)
Hash identifier: lmbAgC5LkDXdCnBxYXaOOQ+oMItu29qp3XS0PocHg6o=
Subject key identifier: A8:5B:99:22:94:AC:13:13:F0:9B:7F:52:73:A8:DD:9B:13:61:5A:B2
Authority key identifier: 3C:3F:45:02:1D:6E:B3:40:A4:2B:2E:5D:D1:FB:F7:21:A1:A6:6D:61
Certificate issuer: /CN=3c3f45021d6eb340a42b2e5dd1fbf721a1a66d61
Certificate serial: 01A1DA25FB03A1EB41C5220E43CAE44EE666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
Manifest number: 11DC
Signing time: Sat 14 Nov 2026 13:01:24 +0000
Manifest this update: Sat 14 Nov 2026 13:01:24 +0000
Manifest next update: Sun 15 Nov 2026 13:01:24 +0000
Files and hashes: 1: KuWWtknOGKLAtEUJQ2qfl_jNlmg.roa (hash: W5TqBGi3Id1AxwKzwqUslwR28wws2MIYj5VeG6wq05Q=)
2: PD9FAh1us0CkKy5d0fv3IaGmbWE.crl (hash: 8fGr+EOoudEAp+um2CLCAoqQpT6aPQuqd6JZ38/KRlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:25:fb:03:a1:eb:41:c5:22:0e:43:ca:e4:4e:e6:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c3f45021d6eb340a42b2e5dd1fbf721a1a66d61
Validity
Not Before: Nov 14 13:01:24 2026 GMT
Not After : Nov 15 13:01:24 2026 GMT
Subject: CN=a85b992294ac1313f09b7f5273a8dd9b13615ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:af:b8:0d:de:6d:35:f5:96:4c:3b:d0:1c:49:
5c:5b:00:3f:77:e5:4c:97:8e:28:d6:45:5c:9e:8f:
d4:7f:38:92:d5:fd:ad:8f:66:b8:4b:d5:27:50:34:
db:45:ea:45:a6:bd:86:b1:f3:eb:61:3f:77:ce:a3:
ad:ef:1d:ad:95:53:62:9e:1d:e1:e1:ec:d9:f8:db:
2c:b0:d8:e4:07:04:f0:19:07:3e:f0:b4:32:1c:74:
0f:4b:e5:83:45:9f:60:48:ae:f8:f9:42:91:21:c2:
ed:7c:53:de:09:c8:4b:70:2f:93:af:78:21:89:dc:
b9:0e:cf:4d:d7:8f:d5:d2:28:e6:db:32:3a:3c:1f:
9c:8f:39:db:29:f0:07:07:41:9c:f0:c1:e5:3a:ed:
ee:4d:a6:e0:b3:3f:a1:a0:8c:96:5c:bf:41:af:37:
eb:5f:6a:3b:b7:ca:8f:8c:41:a5:65:d2:09:32:6e:
48:a8:78:6e:1e:b9:a6:e5:e0:36:23:2d:23:f4:cf:
c0:bf:15:94:91:b3:fa:6c:3d:9c:2c:2d:fc:78:84:
1b:81:78:2a:8e:3e:8f:a6:27:17:a2:6f:2f:ef:b0:
f4:05:ab:73:c0:64:f2:da:9d:30:8b:8c:a8:be:5d:
b6:e3:a0:5e:ff:ce:10:9f:3b:f4:c7:d0:42:f0:4f:
ba:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5B:99:22:94:AC:13:13:F0:9B:7F:52:73:A8:DD:9B:13:61:5A:B2
X509v3 Authority Key Identifier:
keyid:3C:3F:45:02:1D:6E:B3:40:A4:2B:2E:5D:D1:FB:F7:21:A1:A6:6D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:2a:c5:f6:0f:de:65:2d:ef:0e:08:80:f7:d9:cf:de:7d:e9:
ba:9c:3c:cd:ab:6f:92:c1:7c:0f:c0:fb:ca:54:6c:ba:9a:eb:
c9:39:2a:b4:be:e0:ac:6b:18:54:48:e3:64:88:5e:64:f2:a3:
f1:32:64:99:8e:80:7a:c8:ad:8d:cb:6b:b0:c9:d2:1e:a1:7a:
15:dc:8f:f5:28:87:24:55:8a:ee:21:3d:7e:3f:86:13:d7:28:
08:8c:93:d8:c7:57:a8:36:55:18:a0:b9:36:db:8a:b1:39:10:
24:f6:63:98:3e:35:50:54:63:96:30:b1:66:e4:21:5f:49:1a:
1b:39:54:1c:2f:64:21:0f:e1:3d:4b:f2:2d:9e:20:45:bb:6e:
4c:47:c4:2b:fd:b7:5b:6f:d0:c1:62:07:bf:ad:2b:d1:71:3b:
1f:46:87:9c:88:83:7f:50:b7:4d:9b:2b:36:b6:b3:6d:f1:96:
6d:bc:0a:5d:a1:7d:50:5d:d3:ff:f7:fe:05:f6:8a:82:70:cc:
0e:37:8e:fa:67:cb:4a:c1:20:07:0f:af:12:ab:ed:d2:ab:44:
96:26:70:aa:4e:84:9d:df:6c:ff:39:cb:11:98:18:41:f7:d6:
e0:79:3a:30:71:3b:56:c7:3b:33:e0:11:94:2f:44:89:3d:aa:
04:00:08:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:52:34 2026 by rpki-client