Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
File: PFaMWdeoMZnDp56g6DdblG7YhOI.mft (raw, json)
Hash identifier: 5Xb1pLH+VukBSg4aD9bdTTijxdryFmFMSijTZ+nVCCo=
Subject key identifier: 0A:60:EF:92:E1:74:50:CE:A5:06:4B:19:65:F8:5A:78:4A:0A:C7:10
Authority key identifier: 3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
Certificate issuer: /CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Certificate serial: 01A0D538F204A7F76554120AC71370C26B73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 21:01:13 +0000
Manifest this update: Thu 24 Sep 2026 21:01:13 +0000
Manifest next update: Fri 25 Sep 2026 21:01:13 +0000
Files and hashes: 1: 0ZH3kxew36RRFzQg_mo4-7q2H4U.roa (hash: k3MKGbvdmLnbLs9zehodMhvSl8HPr3KY+BJ978CUfo8=)
2: AydP7XNvWxhhDMLSuOqc0Oa5dE0.roa (hash: jUVgcjRvFoEADtpRITq72Z8KeRsnl4848PEL4Me2SIw=)
3: PFaMWdeoMZnDp56g6DdblG7YhOI.crl (hash: QFkYElDqP8xVBRQ4X9oFPcj8z4hOtfx2e8ZUfKRqhJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:38:f2:04:a7:f7:65:54:12:0a:c7:13:70:c2:6b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Validity
Not Before: Sep 24 21:01:13 2026 GMT
Not After : Sep 25 21:01:13 2026 GMT
Subject: CN=0a60ef92e17450cea5064b1965f85a784a0ac710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7c:49:91:a4:63:90:b6:b4:71:96:38:19:57:
1f:b9:24:75:56:61:68:1e:30:51:fe:0f:e5:a1:79:
d2:12:29:46:ba:e7:45:3d:d1:64:5a:04:a6:6e:93:
52:e9:27:02:96:db:7a:b3:9a:2e:fd:1f:a8:3f:60:
86:3c:e7:13:e4:0e:79:d0:b2:26:b3:45:9a:92:22:
78:fa:b9:eb:15:a6:3d:65:38:54:ef:5d:74:ab:7c:
85:5a:e3:18:4e:f4:8f:73:08:31:7a:1d:34:36:d7:
9d:3f:86:88:2e:9e:9a:fb:9e:2d:14:10:ed:4c:c5:
93:92:b7:f8:ef:ef:19:f7:a2:74:74:dc:0e:55:75:
ba:de:21:a6:a9:62:b0:f2:e0:c0:b4:df:36:0b:28:
8f:2d:39:c8:2c:48:47:64:2d:7a:b2:10:13:99:2b:
1c:1a:91:6c:33:ca:11:f3:2e:8b:37:f3:5f:2d:c4:
69:a7:46:b2:c6:2a:f4:7f:e9:dc:4f:63:e5:2a:6c:
8d:c7:fb:bc:18:b2:15:dd:c0:1c:41:40:96:1c:ac:
f6:69:e3:ae:8b:2a:62:e7:0c:73:66:dd:e3:07:fb:
f1:f4:0b:0c:ae:83:fb:90:15:8e:01:56:8a:42:46:
29:49:ae:1a:0a:4a:5b:c2:fd:c7:df:75:98:5b:05:
2c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:60:EF:92:E1:74:50:CE:A5:06:4B:19:65:F8:5A:78:4A:0A:C7:10
X509v3 Authority Key Identifier:
keyid:3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:aa:51:47:47:f1:1a:58:be:05:4e:ed:0a:0c:b0:ef:d4:1b:
d5:e8:ce:c2:db:6b:0e:ff:f2:d8:de:2c:63:b0:46:57:24:7c:
d4:71:0e:44:63:73:47:c4:99:b0:b7:42:2d:07:0e:73:c8:41:
28:c5:8c:ce:08:ad:d1:9f:f4:9b:88:7f:55:65:0a:00:02:2e:
db:11:ab:3c:c8:2b:55:bf:77:0b:46:f0:7d:ce:c6:99:f2:25:
5b:f6:15:87:d5:0f:4d:7c:c4:ea:f1:3d:4e:31:20:4d:5d:89:
35:5e:b9:b2:58:e8:8b:10:5b:66:d7:94:7b:79:59:ed:c4:fb:
0e:53:3c:86:3e:8a:e2:eb:47:48:cd:62:fa:96:28:16:33:bf:
7d:6a:11:c2:04:ce:64:fd:d7:9d:5d:87:1a:57:94:73:7c:fc:
02:f8:29:a2:c7:51:2f:ca:46:33:39:24:3b:ad:77:6b:ea:cc:
15:ea:d5:73:5e:e7:8b:e3:f6:7e:46:ed:71:40:14:0c:df:5e:
6b:46:f8:01:ec:d2:e9:90:c4:95:4b:7a:6f:3c:45:bb:0f:ac:
99:30:12:91:e4:c2:ee:2e:69:f0:01:a9:db:1e:b0:42:cf:67:
93:e0:85:95:50:f9:c9:77:36:de:a1:86:0b:ba:5c:99:e5:27:
05:ae:fe:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:47:38 2026 by rpki-client