Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
File: PnFWq-5roji5BzFd-cVShlrc2ug.mft (raw, json)
Hash identifier: UmdfKLhhqoV/Lz4Hrlb1aaj6aAT+F92AnimvKlAweVI=
Subject key identifier: 3E:46:2F:18:63:07:26:63:C6:74:97:DC:15:C8:11:70:C0:BB:0C:3F
Authority key identifier: 3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8
Certificate issuer: /CN=3e7156abee6ba238b907315df9c552865adcdae8
Certificate serial: 01A11184FE3F61CC08B6AC13BF771CCDF682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
Manifest number: 0CFF
Signing time: Tue 06 Oct 2026 14:01:30 +0000
Manifest this update: Tue 06 Oct 2026 14:01:30 +0000
Manifest next update: Wed 07 Oct 2026 14:01:30 +0000
Files and hashes: 1: 1_igJmtMDXKz9bhBLaRP5dFDztQ.roa (hash: JOImpk+FDhBna11hSj1TGTrJNMUKv4JDlCeaLCzdNVU=)
2: PnFWq-5roji5BzFd-cVShlrc2ug.crl (hash: PgnyPh4atrdZT2gvb5M1diHQ5tjX2/lZdj3v+M3GXeU=)
3: X4LcadFcj7rRiTLEgHHTLMKNzsU.roa (hash: Cf5UA76UUfIOCKC2kd8gwCuNI+KqNFW/rTGifC2FORk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:84:fe:3f:61:cc:08:b6:ac:13:bf:77:1c:cd:f6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e7156abee6ba238b907315df9c552865adcdae8
Validity
Not Before: Oct 6 14:01:30 2026 GMT
Not After : Oct 7 14:01:30 2026 GMT
Subject: CN=3e462f1863072663c67497dc15c81170c0bb0c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:04:ea:21:43:8d:ab:30:4c:0a:6a:9e:6a:7b:
8a:11:e5:ac:a1:b7:51:be:ff:01:ac:62:e8:19:d0:
1f:b5:75:af:b5:48:0c:cd:f9:0d:23:10:46:09:8e:
51:a3:6f:a2:79:b7:49:94:4f:5c:48:7d:bb:62:2c:
f8:30:0b:a8:57:9e:f8:c8:eb:d8:77:35:2c:57:cc:
30:6c:51:7a:56:84:75:84:57:94:4f:24:6b:8e:65:
e3:5f:b1:57:bd:d9:2f:36:30:6b:ee:19:83:4a:34:
81:69:5f:a8:c1:75:62:50:62:0a:b8:43:e9:d0:38:
d2:35:1e:48:ca:cb:49:f7:1d:60:ce:c2:d4:fa:66:
10:0a:72:8d:36:49:d2:07:39:5f:c5:4a:ba:0b:cd:
7a:ca:df:d5:08:fc:1f:27:c3:3b:1b:41:b1:bd:a1:
72:e0:6b:c0:c3:24:70:e9:32:a7:98:91:86:5a:9a:
12:5c:49:70:07:ee:19:23:c9:af:15:9e:c4:cc:40:
14:43:b3:0c:2e:f2:f4:14:06:94:e7:8f:ec:e7:53:
63:be:67:25:90:96:d0:ba:ff:1c:73:10:e5:47:5c:
5e:1d:00:00:93:55:a6:da:7d:03:84:13:35:76:6b:
fd:30:e8:ce:e4:d6:33:c3:78:c9:39:cf:39:47:b4:
1a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:46:2F:18:63:07:26:63:C6:74:97:DC:15:C8:11:70:C0:BB:0C:3F
X509v3 Authority Key Identifier:
keyid:3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:80:b5:38:b8:5d:96:bd:18:68:75:59:d2:7d:a3:23:25:2e:
7f:4d:37:f3:8b:34:d3:6c:43:eb:3d:5f:cc:2b:7f:aa:2c:14:
c5:8e:c7:64:e7:32:f6:52:45:01:5d:3d:73:fc:99:95:9e:43:
e5:e5:dd:58:7e:40:9f:d5:ba:42:60:91:6e:5a:18:48:71:c5:
f3:fc:f2:b6:75:3e:44:75:b2:5e:01:3e:9b:25:39:79:e3:55:
95:0c:d9:a8:9c:bc:89:38:ee:1f:d1:33:80:14:4e:67:0f:4b:
f3:78:dd:d2:f2:58:e5:08:af:58:69:9f:cc:2f:bd:0c:a1:e6:
58:23:df:8e:a2:0e:c3:46:c3:12:5f:2b:ff:f6:a9:08:18:39:
fe:52:3b:9c:d6:31:a7:d7:2b:f8:1b:10:9b:a2:d1:05:48:77:
0c:9b:79:6a:99:b7:d7:a6:89:07:e7:91:91:e1:05:6c:86:a3:
47:6c:f4:75:de:8f:e9:eb:2f:73:e8:71:0c:b2:d4:7f:87:2e:
a4:fd:47:a1:98:41:50:62:65:78:51:68:9f:4c:10:62:ff:7f:
1b:19:b1:2e:f4:8f:7c:c8:3e:eb:73:84:64:65:a4:16:65:cc:
eb:a7:e9:bd:f1:72:05:d8:d0:76:0d:af:37:a4:69:ea:ad:49:
c4:0b:8e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:51:25 2026 by rpki-client