Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
File: PN4kcMhWOUlIej54dDxUTJnsimQ.mft (raw, json)
Hash identifier: TB1e1rADX/pAh3frxoIb9+adlf8a66Z58VjDHTwmE8Y=
Subject key identifier: 17:F3:98:38:FB:F9:54:5B:F9:93:61:79:91:E8:2C:EC:71:35:F4:53
Authority key identifier: 3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
Certificate issuer: /CN=3cde2470c8563949487a3e78743c544c99ec8a64
Certificate serial: 01A11B63C8393AF9FA7E4E48B9682B9C8B26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
Manifest number: 0D15
Signing time: Thu 08 Oct 2026 12:01:26 +0000
Manifest this update: Thu 08 Oct 2026 12:01:26 +0000
Manifest next update: Fri 09 Oct 2026 12:01:26 +0000
Files and hashes: 1: 6dIzMwo0G6tAhuml4GfIJNjdjVQ.roa (hash: wpsN0tsYTVD9eZ1wIkFPmbb5yPxiazJ0MhFoB9FJQW4=)
2: DR9MoQCYtXaLoml4Dm1_5qJwPs4.roa (hash: nXlN3VKxLNyqdBBXWDPV2SzM6R5K4D1KJpMD50qdg/A=)
3: PN4kcMhWOUlIej54dDxUTJnsimQ.crl (hash: yze1uZXIRh/dPLXN7eVeXGJoBaJRgOahHYn93Ra7VT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:63:c8:39:3a:f9:fa:7e:4e:48:b9:68:2b:9c:8b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cde2470c8563949487a3e78743c544c99ec8a64
Validity
Not Before: Oct 8 12:01:26 2026 GMT
Not After : Oct 9 12:01:26 2026 GMT
Subject: CN=17f39838fbf9545bf993617991e82cec7135f453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:dc:47:a9:36:b2:5e:6e:3c:7d:fe:7a:bc:f3:
34:15:61:4b:dc:f3:83:02:b7:4c:fe:14:65:83:92:
28:70:3b:5e:0b:57:28:20:26:83:31:2a:43:25:d2:
bd:ba:c5:9f:ef:10:b6:29:23:b0:f8:09:b9:d9:82:
76:cb:2a:8d:15:8c:b4:54:10:10:e9:f5:9e:3f:e3:
50:a8:4f:ba:2c:1c:ac:b1:af:10:e6:83:ec:d2:7b:
bb:ed:22:23:a3:7c:d3:c2:75:d4:49:37:e8:41:4b:
67:f9:26:8f:32:36:c8:8c:6f:ec:7d:6c:86:2c:44:
5b:43:8f:a3:bf:d5:5c:e8:b3:46:be:b8:38:1b:8a:
26:6a:42:1a:d4:94:53:2e:0d:e0:34:ae:a2:d9:47:
18:a4:15:f5:9e:7b:9b:35:42:d6:9a:05:ff:53:37:
90:92:1f:14:1a:a4:6a:9e:f3:5b:c0:70:14:82:8d:
25:8b:1e:fa:5e:53:34:49:4a:db:94:09:e1:f6:23:
db:37:99:77:57:2b:01:ce:eb:37:bf:c8:4d:4f:d9:
36:e8:03:bc:a3:38:0c:f3:d9:ec:a5:21:eb:ac:93:
10:7a:43:5b:76:de:15:8c:ff:f4:da:92:bc:39:bf:
bd:3c:a8:4f:d5:1e:b4:33:47:4c:85:f3:a8:5e:7b:
12:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F3:98:38:FB:F9:54:5B:F9:93:61:79:91:E8:2C:EC:71:35:F4:53
X509v3 Authority Key Identifier:
keyid:3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:1f:eb:d7:4d:83:20:19:57:da:d0:31:3b:ed:74:25:50:95:
30:1a:e5:17:26:65:8f:16:0e:a3:e3:3f:63:ce:a9:d5:43:26:
7c:db:aa:d2:b3:e4:9b:c7:f7:ba:ce:cc:b4:81:cd:3d:85:0f:
0b:f9:04:19:8a:c6:24:73:81:85:76:48:f2:10:75:38:33:f0:
b6:1f:28:21:d5:ea:37:38:c6:d8:99:8a:cc:95:7e:1c:12:b2:
d5:26:fc:c6:ac:0d:41:20:8f:ff:36:67:6d:56:11:8a:07:48:
6a:f2:d9:e4:e9:89:47:b5:54:c4:16:51:db:ac:e6:8e:d7:0e:
db:38:14:5d:38:b9:93:35:32:ee:0d:c2:41:44:48:c9:5b:09:
7b:00:9e:58:7e:60:34:cf:88:75:b9:28:9a:26:7c:5d:20:ab:
2d:3e:64:14:55:e0:23:41:f7:62:81:fd:fc:f4:c6:61:4b:0c:
74:fd:8c:c9:26:8a:1d:ee:4c:e5:96:7c:0e:fe:09:6c:88:3a:
26:eb:53:e1:a2:87:b8:84:89:70:36:51:77:9a:b4:ff:d1:9a:
48:77:2a:f9:f7:48:6e:cf:c3:e8:59:fd:5c:58:f5:6c:d8:1a:
53:81:f9:16:d6:93:e6:4b:1e:f8:84:4f:af:d4:f8:07:1e:4b:
5e:f5:fd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:31:28 2026 by rpki-client