Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
File: PnFWq-5roji5BzFd-cVShlrc2ug.mft (raw, json)
Hash identifier: 73qhKcZ/t9YprycZPSuWz1IQIgstRUfUb46JaV2s974=
Subject key identifier: 1D:4F:54:AB:31:16:E8:68:3B:CE:D9:7E:F6:9C:87:87:74:FA:ED:C4
Authority key identifier: 3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8
Certificate issuer: /CN=3e7156abee6ba238b907315df9c552865adcdae8
Certificate serial: 019F95129115BA96FBACD318C93BDAD7B011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
Manifest number: 0C3A
Signing time: Fri 24 Jul 2026 17:00:49 +0000
Manifest this update: Fri 24 Jul 2026 17:00:49 +0000
Manifest next update: Sat 25 Jul 2026 17:00:49 +0000
Files and hashes: 1: 1_igJmtMDXKz9bhBLaRP5dFDztQ.roa (hash: JOImpk+FDhBna11hSj1TGTrJNMUKv4JDlCeaLCzdNVU=)
2: PnFWq-5roji5BzFd-cVShlrc2ug.crl (hash: OSJe8iYOJkPGn3RsQd/Mvp8OGgiM56mQXCHyeAMSyAU=)
3: X4LcadFcj7rRiTLEgHHTLMKNzsU.roa (hash: Cf5UA76UUfIOCKC2kd8gwCuNI+KqNFW/rTGifC2FORk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:91:15:ba:96:fb:ac:d3:18:c9:3b:da:d7:b0:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e7156abee6ba238b907315df9c552865adcdae8
Validity
Not Before: Jul 24 17:00:49 2026 GMT
Not After : Jul 25 17:00:49 2026 GMT
Subject: CN=1d4f54ab3116e8683bced97ef69c878774faedc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d8:9a:87:db:d7:86:95:0b:6f:fe:04:bd:4b:
52:a2:89:45:e1:39:0d:ca:0c:b1:ca:74:88:96:96:
2e:9b:07:5c:4a:b2:86:5a:a6:24:23:4c:5e:c8:45:
50:55:ae:27:d1:6b:51:fa:34:ab:c2:70:af:8d:f7:
b1:a7:2f:91:fa:84:32:7d:04:0d:55:a5:a2:8a:43:
f9:73:a5:40:f2:66:c8:cc:90:bd:c5:75:da:82:5a:
99:be:eb:cc:d2:00:8b:4d:25:64:47:8e:bc:fa:f0:
32:03:94:1d:f6:19:be:46:e2:e6:f7:39:fb:cb:84:
4a:6b:52:07:1c:d0:4e:f9:5f:e5:f6:a3:bd:08:1d:
90:9f:ad:c9:d4:ea:bf:08:59:41:99:2a:4d:33:25:
6f:61:7b:a0:a8:fa:d3:98:86:b3:5a:b4:9a:67:4a:
1b:0f:92:4a:3f:d0:48:03:c3:cf:fb:55:b8:0e:db:
d7:e7:70:7e:48:3d:55:bb:55:6c:d5:35:30:45:dd:
6a:cd:f5:a5:73:be:b6:4e:27:98:b9:87:54:17:89:
b8:8b:90:31:be:ca:9c:17:c7:02:72:71:32:c4:fe:
84:6c:a1:01:49:a1:81:61:d3:cf:cf:c2:48:37:c2:
fc:8d:6a:7f:19:d3:83:ce:83:0c:18:d0:03:d1:cc:
69:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4F:54:AB:31:16:E8:68:3B:CE:D9:7E:F6:9C:87:87:74:FA:ED:C4
X509v3 Authority Key Identifier:
keyid:3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:9b:8d:e7:a7:42:60:01:82:04:38:76:17:1c:97:18:11:16:
b1:5d:e8:b6:63:21:26:b3:9f:9a:81:db:1e:d9:8c:74:69:49:
e1:82:ca:02:50:cc:0e:91:04:3f:43:ed:b4:29:da:9c:0f:ac:
90:bd:55:93:47:f8:84:ab:a0:45:3e:f0:52:13:10:82:45:40:
d6:1f:cc:ea:47:2d:b8:b5:b7:7c:50:35:a2:4f:83:b2:8c:6e:
d1:89:1a:9d:9c:ec:54:03:45:df:11:85:cf:70:b2:53:f1:89:
f3:9c:1d:b5:42:6e:d9:38:59:c1:44:89:6d:84:37:80:4e:0f:
81:ea:c8:13:b6:1c:2d:36:d7:72:cf:e7:94:dd:4a:f4:c1:45:
5d:61:17:db:18:6d:2c:62:35:60:14:57:a8:82:b0:bb:4c:a7:
ef:f6:8c:d4:10:34:0a:08:12:7f:ba:bd:b6:c8:1a:f4:d6:07:
ba:57:f1:7c:29:b7:01:ac:ac:76:32:bb:c4:77:30:1f:04:c1:
aa:56:35:82:d6:46:bf:e4:5e:77:23:7f:8f:2b:94:9c:5d:14:
e2:94:69:76:ec:b4:42:19:fd:8e:ed:d0:c5:1a:81:02:b5:4b:
13:87:70:b0:b2:2d:c8:ca:b9:da:bf:5d:a0:b2:bf:c3:79:2a:
04:30:28:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:38:18 2026 by rpki-client