Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
File: PNVhnbjXcXN5lW1Op1t22ybRwck.mft (raw, json)
Hash identifier: zzHkXH1Q1ISOuNyEMHDs5Sak3GdjBDQb9svwppBEtlE=
Subject key identifier: F1:3A:74:05:05:76:5C:71:B9:5B:35:F2:33:76:FD:7F:0E:73:BE:3E
Authority key identifier: 3C:D5:61:9D:B8:D7:71:73:79:95:6D:4E:A7:5B:76:DB:26:D1:C1:C9
Certificate issuer: /CN=3cd5619db8d7717379956d4ea75b76db26d1c1c9
Certificate serial: 019D32630DFA49B2F122576A019FA22C1310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
Manifest number: 188C
Signing time: Sat 28 Mar 2026 03:00:45 +0000
Manifest this update: Sat 28 Mar 2026 03:00:45 +0000
Manifest next update: Sun 29 Mar 2026 03:00:45 +0000
Files and hashes: 1: PNVhnbjXcXN5lW1Op1t22ybRwck.crl (hash: 3Y6geKYYYb0S/AtUz/EDovUSA41SX1VWFJS/ypEd/iQ=)
2: W2_YVtahS9AF_suIxs_GQQbdje4.roa (hash: tnC0EkMLLcLXQXoDsLNC9jDbiWksa5OYi1IQus+om1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:0d:fa:49:b2:f1:22:57:6a:01:9f:a2:2c:13:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd5619db8d7717379956d4ea75b76db26d1c1c9
Validity
Not Before: Mar 28 03:00:45 2026 GMT
Not After : Mar 29 03:00:45 2026 GMT
Subject: CN=f13a740505765c71b95b35f23376fd7f0e73be3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f2:0b:ee:2a:50:2e:de:77:c0:ee:14:c5:6e:
f0:b0:aa:db:71:8d:94:0b:f4:1f:04:c0:40:5e:5d:
43:d3:18:fd:73:49:c2:57:85:22:1f:c9:b2:b0:a4:
bf:58:01:0c:35:20:2f:8e:c5:34:29:93:7c:eb:74:
2b:14:ae:4d:dd:39:30:aa:03:17:c9:37:e6:09:c1:
60:f8:a2:42:db:9f:63:23:4a:65:83:58:01:9b:75:
34:f6:e8:8b:e4:20:47:45:98:ea:8d:ca:f9:8b:5a:
69:d8:e4:17:b1:1c:7a:b1:aa:82:69:f6:c3:c3:ca:
24:a3:77:8c:d3:ca:b9:dc:39:73:3f:69:8b:d1:4a:
ef:7e:55:40:a0:af:aa:bb:1d:ce:ab:7d:7b:0a:61:
59:64:3f:c8:ee:6f:2a:c7:ca:17:4c:74:10:ab:3d:
ab:3b:81:aa:c1:0a:06:ad:ef:da:66:00:19:ac:b5:
be:15:3d:64:9c:6e:7b:c4:7e:2e:8b:4f:65:be:e3:
24:00:fa:5b:f0:d3:02:33:ef:9d:da:5e:79:b5:b3:
8a:b6:ad:43:6b:34:9e:c1:f5:c1:16:6d:25:fd:0c:
23:ba:4a:99:9d:75:b7:69:e2:13:d2:d6:0b:4e:02:
97:5c:eb:ce:2b:1a:7c:34:ef:97:62:db:8b:dd:9e:
60:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3A:74:05:05:76:5C:71:B9:5B:35:F2:33:76:FD:7F:0E:73:BE:3E
X509v3 Authority Key Identifier:
keyid:3C:D5:61:9D:B8:D7:71:73:79:95:6D:4E:A7:5B:76:DB:26:D1:C1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:2e:1d:83:b6:01:74:ba:8d:9b:ae:9d:44:10:e6:e0:63:0b:
25:34:5c:c0:56:60:ca:c1:eb:5d:14:ff:75:b5:14:86:5e:4e:
8d:8e:72:3e:8f:86:cb:20:5c:a9:10:78:4a:04:d5:60:37:06:
17:1d:87:c5:a3:33:c8:f3:05:57:f1:0c:04:d8:f3:ea:b5:29:
d5:62:62:90:6b:08:6a:08:6f:99:21:99:8f:40:d2:e6:1e:cd:
32:29:3b:1d:84:05:ee:af:7d:83:f9:96:56:46:a9:82:2b:95:
07:e5:16:f9:5c:1a:b9:f4:5b:65:34:19:7d:20:9c:6b:93:a7:
a7:60:be:0b:38:ba:e7:53:1a:3d:40:38:81:cc:22:57:8f:bd:
96:bd:cb:c0:25:eb:24:fe:da:cd:09:e0:c3:11:d5:fd:60:78:
71:f6:38:1c:96:53:58:3f:92:68:d0:5a:ad:7a:16:28:b1:6b:
e6:c6:fc:19:f4:ad:13:57:1d:22:91:be:ca:6b:f4:ba:bd:fc:
6f:69:c1:2b:ba:47:55:b9:7a:28:96:b9:63:e8:33:52:f4:4b:
09:59:d8:72:cb:bd:5a:65:1b:cc:1b:15:e7:0c:d6:b0:28:3d:
49:18:d1:24:58:8e:97:f4:14:54:c7:36:8f:f4:fe:c9:3e:df:
1a:6a:7b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:47:41 2026 by rpki-client