Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft
File: pnac0wPoTc03o3XW52tgKfzDZ7Q.mft (raw, json)
Hash identifier: HCvnug0sdo/+/pQIkp2s6Qg39SA652QiXXr+WSZly4A=
Subject key identifier: 05:A3:26:3A:E5:BD:D5:61:A0:61:7D:A4:3E:58:E5:D9:40:13:9E:8F
Authority key identifier: A6:76:9C:D3:03:E8:4D:CD:37:A3:75:D6:E7:6B:60:29:FC:C3:67:B4
Certificate issuer: /CN=a6769cd303e84dcd37a375d6e76b6029fcc367b4
Certificate serial: 019F91DA930D360CEE9024128667B5595ABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnac0wPoTc03o3XW52tgKfzDZ7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft
Manifest number: 0352
Signing time: Fri 24 Jul 2026 02:00:48 +0000
Manifest this update: Fri 24 Jul 2026 02:00:48 +0000
Manifest next update: Sat 25 Jul 2026 02:00:48 +0000
Files and hashes: 1: ODmnFvkoRJ8KBXIwmG3VyMbhpMg.roa (hash: UzQ9zfqJ6GmOojpgnIMRQs0ikmH8yfkpdXYgZqB0SfM=)
2: pnac0wPoTc03o3XW52tgKfzDZ7Q.crl (hash: cA6l0oPmUnKUBw8G/K3SyX8+hfpbLJ4S4nM8i+uk2T8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnac0wPoTc03o3XW52tgKfzDZ7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:93:0d:36:0c:ee:90:24:12:86:67:b5:59:5a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6769cd303e84dcd37a375d6e76b6029fcc367b4
Validity
Not Before: Jul 24 02:00:48 2026 GMT
Not After : Jul 25 02:00:48 2026 GMT
Subject: CN=05a3263ae5bdd561a0617da43e58e5d940139e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f1:cd:2d:8f:40:e8:3c:58:85:58:4f:58:c8:
2c:1a:8c:d7:5b:0a:0c:dd:97:6c:4c:f3:ed:00:5f:
ab:2d:8d:93:1e:aa:9d:57:51:2a:14:67:86:05:ff:
7e:9e:bf:6e:e8:fd:a0:56:ca:b9:e5:f2:07:ab:18:
bb:ef:6e:86:ff:d8:72:e8:5f:b7:80:24:43:20:06:
a5:b6:a6:23:82:d8:99:03:4c:5e:57:49:62:15:40:
25:ea:eb:87:95:2e:aa:4d:6c:55:a7:62:28:6e:21:
fe:13:ed:11:c5:63:fd:aa:df:b2:a8:c4:68:d8:2c:
cd:98:40:ed:72:15:78:d7:07:97:21:8b:c5:8e:c4:
05:ce:16:4a:50:7a:4a:a8:24:3d:31:85:11:14:62:
44:9f:9a:b0:8a:b6:81:6b:15:23:37:7b:91:2e:5f:
e2:2d:cf:14:82:94:58:6b:52:fc:7d:56:52:a7:8f:
e4:38:32:4e:5c:dc:4c:28:be:39:3f:f3:55:ef:81:
63:d8:43:7d:ab:de:65:36:9d:1f:1f:6c:68:e7:a3:
93:f1:4a:e2:9b:15:3e:1f:b9:aa:c7:f4:cf:41:b5:
63:c7:e3:70:5c:c1:a9:9c:08:92:6e:0a:cd:ab:db:
ab:ef:43:f9:ca:08:89:b1:a6:5c:00:d4:0e:28:e5:
1e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A3:26:3A:E5:BD:D5:61:A0:61:7D:A4:3E:58:E5:D9:40:13:9E:8F
X509v3 Authority Key Identifier:
keyid:A6:76:9C:D3:03:E8:4D:CD:37:A3:75:D6:E7:6B:60:29:FC:C3:67:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnac0wPoTc03o3XW52tgKfzDZ7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:c4:36:32:43:b8:79:3c:c5:f2:11:10:df:e0:4a:d2:e4:23:
91:3f:46:f5:33:73:c6:4d:d1:ee:2e:a2:56:c8:b9:1d:2c:80:
82:d0:a4:6e:7d:a8:a2:9b:57:19:52:ac:df:e2:3c:de:8a:96:
74:67:24:41:a6:82:e0:80:2d:24:71:7a:2d:f9:e9:41:48:7e:
7e:a0:2a:bd:dd:26:74:6f:04:30:a6:d3:d3:8c:aa:e6:db:16:
b1:29:1a:fb:22:8d:2f:d0:b6:2b:57:09:25:bc:00:d0:8f:14:
07:b9:48:66:12:63:68:2a:81:3b:3d:08:6a:59:ca:50:e7:ef:
24:9f:37:d9:ac:b4:7e:04:07:f9:ed:92:4e:45:1e:e2:8c:75:
ea:04:ab:b9:77:3b:2b:61:9a:8b:49:a1:13:9c:fe:dc:5c:0d:
63:b6:84:42:22:e0:2c:9b:4f:60:bf:bc:f8:1e:b0:42:ef:62:
82:0b:58:c1:f8:bb:9c:8d:44:b3:90:f8:ca:40:cb:d2:b8:4f:
80:5a:13:c2:18:f3:4e:0a:47:e0:bd:4d:56:d6:e9:f9:95:4e:
52:7a:f1:d1:01:08:4f:ea:a8:86:65:f5:3e:49:12:01:33:45:
52:7b:ba:aa:57:ec:65:52:2e:d9:1b:76:de:14:96:37:3d:e4:
43:91:70:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:15:19 2026 by rpki-client