Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
File: PN4kcMhWOUlIej54dDxUTJnsimQ.mft (raw, json)
Hash identifier: z07TAk6S0vJ64Cqqp0i3R1I+UMk7ky5HciZM7/jmcio=
Subject key identifier: 19:DD:04:C6:07:1D:E5:EE:8A:85:B1:36:36:1F:0B:56:8B:92:B7:3E
Authority key identifier: 3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
Certificate issuer: /CN=3cde2470c8563949487a3e78743c544c99ec8a64
Certificate serial: 019CABD9F97E0ED73C91F78E50EFF216BB96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
Manifest number: 0AC9
Signing time: Mon 02 Mar 2026 00:01:54 +0000
Manifest this update: Mon 02 Mar 2026 00:01:54 +0000
Manifest next update: Tue 03 Mar 2026 00:01:54 +0000
Files and hashes: 1: 6dIzMwo0G6tAhuml4GfIJNjdjVQ.roa (hash: wpsN0tsYTVD9eZ1wIkFPmbb5yPxiazJ0MhFoB9FJQW4=)
2: DR9MoQCYtXaLoml4Dm1_5qJwPs4.roa (hash: nXlN3VKxLNyqdBBXWDPV2SzM6R5K4D1KJpMD50qdg/A=)
3: PN4kcMhWOUlIej54dDxUTJnsimQ.crl (hash: 0kAvdoXwhX+BILyOZAGWp6VPrRXYpViNdeXqoMhJmYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:f9:7e:0e:d7:3c:91:f7:8e:50:ef:f2:16:bb:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cde2470c8563949487a3e78743c544c99ec8a64
Validity
Not Before: Mar 2 00:01:54 2026 GMT
Not After : Mar 3 00:01:54 2026 GMT
Subject: CN=19dd04c6071de5ee8a85b136361f0b568b92b73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:49:6b:9f:82:36:0f:8b:2a:0a:eb:8e:6a:c3:
9d:06:ea:23:8d:c1:f1:82:84:f0:2e:87:39:39:3f:
3a:4d:e4:ce:4d:9f:0d:80:e0:50:0c:0e:c8:a4:e2:
01:77:16:5e:a4:ba:eb:6f:cb:80:22:70:36:fe:ca:
72:19:05:6b:98:d8:42:55:de:5c:f5:45:95:08:db:
3e:aa:a1:26:07:04:aa:db:b7:a1:d3:92:26:e2:f9:
f5:10:0e:9e:1e:b0:92:d9:dd:1e:5f:7a:2f:f5:8b:
56:d8:fc:28:6e:5a:94:3c:e5:d6:e9:f1:f2:c7:ec:
28:44:65:46:19:35:ea:86:f3:7a:32:fc:2d:ac:3c:
f1:e9:64:a7:53:66:df:10:5b:77:fa:74:ea:a1:a5:
22:61:fc:36:c3:73:99:92:af:61:73:85:d4:08:72:
fb:d2:20:36:86:72:71:55:80:d2:19:31:73:cc:13:
25:b8:7c:5c:3c:ad:1f:43:68:b4:95:f5:f1:68:13:
53:26:da:58:f4:e1:e5:08:c0:b1:ae:b7:0d:ca:f3:
ac:1a:7b:c0:17:c2:db:55:c7:75:1f:84:f7:02:eb:
eb:a3:70:ad:15:ff:fd:a1:42:d6:4a:d3:cf:3d:2f:
b1:5b:52:03:e4:09:b3:4b:90:a4:d8:95:c8:93:b9:
52:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DD:04:C6:07:1D:E5:EE:8A:85:B1:36:36:1F:0B:56:8B:92:B7:3E
X509v3 Authority Key Identifier:
keyid:3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ec:60:5d:00:18:c2:10:d2:78:a5:59:fd:8d:7f:11:a6:5d:
e3:47:c0:ef:eb:a3:e5:46:5c:c6:96:ad:1d:80:24:0a:31:5e:
08:01:cd:7c:e3:5d:08:a7:95:d7:1f:3e:94:96:83:87:5f:fb:
ec:b9:f4:bd:14:f2:9f:e1:71:2a:61:4a:86:d0:10:dc:29:84:
c1:68:ce:20:72:f1:2b:9b:c4:2e:74:c8:f8:8a:d0:58:9e:71:
da:ce:04:78:02:84:a3:0d:d8:14:8b:de:dc:99:f4:2d:ad:f4:
0c:d7:1d:92:a7:e2:a7:a5:27:d4:78:8d:3c:0b:4a:08:03:4b:
b9:bc:59:3f:9c:ef:f9:6d:6e:91:ef:41:c8:35:17:b4:f2:ce:
15:b4:cb:05:e5:a9:e9:4b:d5:81:c2:35:47:d7:fc:e9:87:c1:
b7:ae:6d:56:cc:4d:57:ae:52:1f:d1:ca:3a:cd:16:ff:43:71:
77:48:91:b0:0e:34:d5:db:74:74:95:e6:ac:e1:15:1b:1a:b0:
1e:08:41:40:64:31:8b:15:80:b6:72:56:e2:26:0c:13:84:23:
e7:e7:a7:25:d2:58:0f:e1:e3:fb:a5:63:84:d2:4d:18:59:6e:
30:00:5f:98:85:b1:60:9f:98:42:04:61:68:67:3c:2b:53:9c:
66:b6:b1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:35:35 2026 by rpki-client