Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
File: PnFWq-5roji5BzFd-cVShlrc2ug.mft (raw, json)
Hash identifier: +kjs/sU4U+Hd1vBTdFVywT5hJx9A9PDE6HtvtQ0WxqU=
Subject key identifier: E9:5F:46:FB:AA:F3:3E:46:24:DA:E7:6F:76:7A:0C:D0:0D:F8:2B:B0
Authority key identifier: 3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8
Certificate issuer: /CN=3e7156abee6ba238b907315df9c552865adcdae8
Certificate serial: 01A105EED3C2DF1C5D23F67B169EF8293D58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
Manifest number: 0CF9
Signing time: Sun 04 Oct 2026 08:01:40 +0000
Manifest this update: Sun 04 Oct 2026 08:01:40 +0000
Manifest next update: Mon 05 Oct 2026 08:01:40 +0000
Files and hashes: 1: 1_igJmtMDXKz9bhBLaRP5dFDztQ.roa (hash: JOImpk+FDhBna11hSj1TGTrJNMUKv4JDlCeaLCzdNVU=)
2: PnFWq-5roji5BzFd-cVShlrc2ug.crl (hash: skhltliu/VIcw+nAjBZqKjJQoyUl+hx/gf+1vBjNVTo=)
3: X4LcadFcj7rRiTLEgHHTLMKNzsU.roa (hash: Cf5UA76UUfIOCKC2kd8gwCuNI+KqNFW/rTGifC2FORk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:ee:d3:c2:df:1c:5d:23:f6:7b:16:9e:f8:29:3d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e7156abee6ba238b907315df9c552865adcdae8
Validity
Not Before: Oct 4 08:01:40 2026 GMT
Not After : Oct 5 08:01:40 2026 GMT
Subject: CN=e95f46fbaaf33e4624dae76f767a0cd00df82bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:55:a7:b1:19:eb:e0:3c:76:d5:c7:2e:8e:aa:
87:cf:28:95:2e:70:09:dc:56:e3:50:12:4e:1c:6d:
e6:1c:b4:40:ec:15:85:8b:61:52:a8:f5:19:16:29:
af:e2:b8:05:d6:b7:c0:0b:5c:13:8a:85:db:d6:cc:
39:c1:5d:dc:be:4c:51:67:2e:81:17:ea:af:51:3a:
0e:60:be:3d:b2:9b:2b:be:06:13:62:cd:54:32:17:
d7:f5:c4:54:4b:73:08:97:7a:2a:ed:42:9f:1b:d1:
d0:72:6d:85:fd:49:6e:46:15:0e:d2:88:81:8a:98:
8e:d2:bc:53:7d:cd:81:38:cd:f3:6e:df:12:d7:5e:
a5:3d:7c:98:61:a8:7e:f4:f4:f2:b8:c0:81:2d:5b:
66:42:ca:40:0d:51:95:48:9a:1f:34:c0:33:4e:06:
a2:df:36:fa:9c:ed:19:cc:36:8c:f7:be:83:0a:55:
bb:c4:9f:64:98:9b:f1:d0:1f:07:1c:76:ef:ab:d4:
9f:e3:8d:16:a9:9b:eb:b5:94:ee:92:c4:1a:52:36:
a1:16:2c:85:b0:43:06:12:67:44:34:db:e5:a5:bc:
94:df:ec:e3:41:1a:dd:11:a0:33:a3:d4:bb:08:b8:
b3:29:16:b0:16:56:9c:bb:17:64:63:9c:59:88:6d:
7d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:5F:46:FB:AA:F3:3E:46:24:DA:E7:6F:76:7A:0C:D0:0D:F8:2B:B0
X509v3 Authority Key Identifier:
keyid:3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:11:e3:cb:3a:64:5c:4b:a2:ab:32:71:d9:ec:da:39:19:e9:
cb:63:03:47:cd:2d:77:9d:13:90:1b:07:af:38:2c:89:17:14:
fd:72:78:3b:46:37:39:38:b2:02:ab:81:96:cb:b7:d8:c0:58:
20:52:f8:0c:82:dc:bf:a0:80:38:65:b4:15:f4:55:b6:5e:60:
06:5f:3f:9e:3f:48:d9:6c:d6:ba:20:5a:09:77:3b:2d:08:b3:
55:92:bf:55:36:c0:de:9f:60:7a:ce:30:d5:d3:c5:93:e1:02:
1c:8a:ed:02:af:1b:45:2f:ff:32:dd:19:e5:83:01:7c:62:0a:
8f:36:6f:b1:7e:3f:de:6b:e7:6c:3b:69:4e:47:1a:4a:30:ba:
60:bc:20:c1:74:b2:76:00:94:de:bc:b7:64:ea:bd:d0:83:10:
3c:b6:d9:bf:02:db:9b:a4:1f:1f:64:68:c4:29:5c:35:7f:f6:
9d:cd:6b:3f:fa:d8:58:5f:39:38:0b:33:3f:85:90:43:58:2a:
b4:25:f3:6b:12:5b:5d:d2:a1:08:d1:b5:7d:cf:68:62:82:ee:
e5:99:d0:87:e5:90:d0:ea:21:12:6f:52:ce:e1:f1:b6:39:fa:
f2:8c:21:1f:05:c1:fe:2d:b4:f4:6d:f6:48:80:64:77:be:88:
08:c4:a0:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEF7tPC3xxdI/Z7Fp74KT1YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNzE1NmFiZWU2YmEyMzhiOTA3MzE1ZGY5YzU1Mjg2NWFk
Y2RhZTgwHhcNMjYxMDA0MDgwMTQwWhcNMjYxMDA1MDgwMTQwWjAzMTEwLwYDVQQD
EyhlOTVmNDZmYmFhZjMzZTQ2MjRkYWU3NmY3NjdhMGNkMDBkZjgyYmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lWnsRnr4Dx21ccujqqHzyiVLnAJ
3FbjUBJOHG3mHLRA7BWFi2FSqPUZFimv4rgF1rfAC1wTioXb1sw5wV3cvkxRZy6B
F+qvUToOYL49spsrvgYTYs1UMhfX9cRUS3MIl3oq7UKfG9HQcm2F/UluRhUO0oiB
ipiO0rxTfc2BOM3zbt8S116lPXyYYah+9PTyuMCBLVtmQspADVGVSJofNMAzTgai
3zb6nO0ZzDaM976DClW7xJ9kmJvx0B8HHHbvq9Sf440WqZvrtZTuksQaUjahFiyF
sEMGEmdENNvlpbyU3+zjQRrdEaAzo9S7CLizKRawFlacuxdkY5xZiG197QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlfRvuq8z5GJNrnb3Z6DNAN+CuwMB8GA1UdIwQY
MBaAFD5xVqvua6I4uQcxXfnFUoZa3NroMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG5GV3EtNXJvamk1QnpGZC1jVlNobHJjMnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9hNGEwZjctN2RiZC00YjAzLWI3Zjkt
NThmMmQ0NGZmMjgxLzEvUG5GV3EtNXJvamk1QnpGZC1jVlNobHJjMnVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9hNGEwZjctN2RiZC00YjAzLWI3ZjktNThmMmQ0NGZmMjgx
LzEvUG5GV3EtNXJvamk1QnpGZC1jVlNobHJjMnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhHjyzpk
XEuiqzJx2ezaORnpy2MDR80td50TkBsHrzgsiRcU/XJ4O0Y3OTiyAquBlsu32MBY
IFL4DILcv6CAOGW0FfRVtl5gBl8/nj9I2WzWuiBaCXc7LQizVZK/VTbA3p9ges4w
1dPFk+ECHIrtAq8bRS//Mt0Z5YMBfGIKjzZvsX4/3mvnbDtpTkcaSjC6YLwgwXSy
dgCU3ry3ZOq90IMQPLbZvwLbm6QfH2RoxClcNX/2nc1rP/rYWF85OAszP4WQQ1gq
tCXzaxJbXdKhCNG1fc9oYoLu5ZnQh+WQ0OohEm9SzuHxtjn68owhHwXB/i209G32
SIBkd76ICMSgsA==
-----END CERTIFICATE-----
Generated at Sun Oct 4 12:38:18 2026 by rpki-client