Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft
File: pnac0wPoTc03o3XW52tgKfzDZ7Q.mft (raw, json)
Hash identifier: pMGFAPeA/LWz6qrmWA12za3d8kQk+yc5j7BY9qtGVlY=
Subject key identifier: 74:DA:F6:4D:40:9C:A7:C7:1C:B5:D8:DC:6D:A8:3A:81:A3:AD:6F:75
Authority key identifier: A6:76:9C:D3:03:E8:4D:CD:37:A3:75:D6:E7:6B:60:29:FC:C3:67:B4
Certificate issuer: /CN=a6769cd303e84dcd37a375d6e76b6029fcc367b4
Certificate serial: 019D25F100AD06FFA5BFEDF9E2EEAEEC0393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnac0wPoTc03o3XW52tgKfzDZ7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft
Manifest number: 0211
Signing time: Wed 25 Mar 2026 17:00:44 +0000
Manifest this update: Wed 25 Mar 2026 17:00:44 +0000
Manifest next update: Thu 26 Mar 2026 17:00:44 +0000
Files and hashes: 1: ODmnFvkoRJ8KBXIwmG3VyMbhpMg.roa (hash: UzQ9zfqJ6GmOojpgnIMRQs0ikmH8yfkpdXYgZqB0SfM=)
2: pnac0wPoTc03o3XW52tgKfzDZ7Q.crl (hash: CnGMEjJD6KV1DIONxjMHdZm1MKseykEC+dJDDEh6FV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnac0wPoTc03o3XW52tgKfzDZ7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:00:ad:06:ff:a5:bf:ed:f9:e2:ee:ae:ec:03:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6769cd303e84dcd37a375d6e76b6029fcc367b4
Validity
Not Before: Mar 25 17:00:44 2026 GMT
Not After : Mar 26 17:00:44 2026 GMT
Subject: CN=74daf64d409ca7c71cb5d8dc6da83a81a3ad6f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:de:58:fb:58:60:85:4d:78:a4:4d:f7:e1:7e:
43:87:cd:84:51:ff:a5:59:0a:ec:a6:6d:c2:48:38:
ac:66:1c:d6:46:10:f6:95:f5:be:96:74:7a:c1:09:
5f:8a:55:19:e5:ae:40:b3:1b:7c:8e:b2:ae:11:79:
5c:65:6b:3a:30:4c:a5:40:44:10:6d:b6:9f:92:f7:
62:d5:5c:06:ac:88:b4:07:09:1a:42:ae:d2:9d:85:
fc:06:7b:f0:dc:aa:d7:ba:88:a9:08:ef:08:98:f3:
b1:7b:c6:d2:7d:08:40:aa:46:5f:84:d4:86:fb:7e:
86:43:93:a9:c5:b6:2d:76:4e:93:9e:94:8d:11:b1:
1c:65:c2:1b:4d:da:c3:45:35:f3:69:93:b8:c9:f0:
d6:63:80:db:90:97:7d:0b:fc:99:e4:cc:66:ce:5a:
a5:e2:70:b6:0f:44:00:e0:23:04:7d:cd:2a:e5:7f:
fb:88:0e:94:6a:e9:f6:48:34:4f:41:97:6d:24:70:
60:d8:96:e7:6f:55:53:6f:d3:d9:83:b0:5b:2f:46:
bf:ac:6e:88:b2:7d:7f:4d:db:75:1e:bb:31:05:68:
26:b8:9f:50:75:34:a4:f3:24:dc:89:16:83:73:db:
12:ef:7d:ae:a9:b3:b4:ec:c1:1c:d3:87:6c:af:5e:
73:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DA:F6:4D:40:9C:A7:C7:1C:B5:D8:DC:6D:A8:3A:81:A3:AD:6F:75
X509v3 Authority Key Identifier:
keyid:A6:76:9C:D3:03:E8:4D:CD:37:A3:75:D6:E7:6B:60:29:FC:C3:67:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnac0wPoTc03o3XW52tgKfzDZ7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:58:4f:70:fd:52:d8:85:21:67:d4:e0:64:37:cb:7c:d9:d1:
1a:75:16:05:1a:0a:48:de:a2:df:b4:fa:24:22:db:b3:43:6f:
82:7c:fd:de:cd:c5:31:6f:77:29:9d:ad:45:04:9c:60:7c:5e:
15:95:c8:1c:bc:84:2c:c1:e0:d2:25:1f:af:c7:74:9f:95:6c:
fc:db:26:3c:43:fe:79:14:9c:b3:71:7b:8d:d9:a6:61:45:f1:
a1:18:c9:20:bd:8d:d0:f5:6a:73:88:25:6b:51:3f:b6:34:fb:
94:42:2c:2f:ed:dc:ca:a7:c2:bb:63:22:48:f4:30:44:35:7b:
56:0d:4e:84:2c:5e:40:cb:23:2e:6e:e3:d3:cc:b7:39:58:40:
d2:52:98:c0:a6:f1:06:24:b4:13:8d:28:d6:01:62:88:90:8b:
39:7b:37:6f:54:ba:87:be:1c:18:b2:23:db:48:4a:65:39:85:
88:bb:a5:8e:a8:a2:9a:90:c8:c0:91:b7:f5:b7:e9:6f:2c:93:
81:93:d3:c1:01:b2:69:e6:a9:4b:7a:05:1f:2c:1b:4c:e6:0c:
0b:62:f3:0a:6c:11:ec:75:7b:3c:33:63:95:b7:a4:40:1a:de:
1b:e6:4b:64:08:f8:64:69:be:26:f9:b4:68:c2:54:9b:d8:7c:
5b:b5:89:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:25 2026 by rpki-client