Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
File: PN4kcMhWOUlIej54dDxUTJnsimQ.mft (raw, json)
Hash identifier: BQCFKdl+9qFYUykPBI0tUP665cSl9A4KN+4R1caS9K8=
Subject key identifier: 00:CC:8E:F7:CC:EC:8D:15:87:94:76:E1:BE:F2:25:E7:ED:06:85:00
Authority key identifier: 3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
Certificate issuer: /CN=3cde2470c8563949487a3e78743c544c99ec8a64
Certificate serial: 01A11975311CEAAA81B92A4AB02E83252A3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
Manifest number: 0D14
Signing time: Thu 08 Oct 2026 03:01:12 +0000
Manifest this update: Thu 08 Oct 2026 03:01:12 +0000
Manifest next update: Fri 09 Oct 2026 03:01:12 +0000
Files and hashes: 1: 6dIzMwo0G6tAhuml4GfIJNjdjVQ.roa (hash: wpsN0tsYTVD9eZ1wIkFPmbb5yPxiazJ0MhFoB9FJQW4=)
2: DR9MoQCYtXaLoml4Dm1_5qJwPs4.roa (hash: nXlN3VKxLNyqdBBXWDPV2SzM6R5K4D1KJpMD50qdg/A=)
3: PN4kcMhWOUlIej54dDxUTJnsimQ.crl (hash: Xvb3BcjgKwPAakPRC+T6wUzraIJaniVqERsOquSS/Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 03:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:75:31:1c:ea:aa:81:b9:2a:4a:b0:2e:83:25:2a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cde2470c8563949487a3e78743c544c99ec8a64
Validity
Not Before: Oct 8 03:01:12 2026 GMT
Not After : Oct 9 03:01:12 2026 GMT
Subject: CN=00cc8ef7ccec8d15879476e1bef225e7ed068500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b4:50:d6:56:17:9a:84:a7:6d:95:2a:47:3f:
c9:40:3d:c3:fc:80:eb:a1:aa:46:d8:6b:ab:2f:19:
ab:f5:e1:68:ab:c4:0b:87:29:05:4f:ee:f9:0e:5b:
60:43:b7:d0:d3:93:00:48:de:31:17:f8:b5:e0:ea:
29:14:08:6b:68:ef:77:c1:a6:45:f1:cb:77:a2:49:
be:b3:75:c7:fb:4c:fa:4b:08:0c:47:6b:5d:7a:5c:
b9:e6:29:df:58:ba:fa:c2:42:6e:0b:51:d9:4d:b2:
f3:4b:ff:25:10:f7:fe:30:62:9e:81:53:47:3d:5e:
19:e6:42:a5:7c:0c:f4:82:a3:e1:1b:16:99:85:93:
08:21:01:8c:1d:99:e8:93:db:5e:02:03:31:9f:f8:
4b:81:8e:e8:37:81:44:00:0f:9c:89:3b:11:c6:bc:
48:25:32:1f:22:28:ac:b7:cd:62:4e:9d:f0:9d:5a:
27:c5:84:e3:fc:14:8d:ca:95:f9:a1:e1:70:4a:cb:
b5:c4:df:4b:32:c1:0f:15:f7:ed:ed:fc:19:35:df:
4b:91:9f:81:9d:27:81:56:c6:10:ff:a1:d4:12:12:
f4:dc:ea:1e:30:8a:2d:7a:cd:b9:66:ac:96:59:34:
07:da:c9:a4:8d:1a:41:c7:d7:13:c2:8a:97:5c:bf:
ff:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CC:8E:F7:CC:EC:8D:15:87:94:76:E1:BE:F2:25:E7:ED:06:85:00
X509v3 Authority Key Identifier:
keyid:3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:66:d7:ac:0f:da:e0:72:48:03:1e:53:b2:9c:9d:e4:5b:22:
4b:89:d3:92:61:3a:4d:5e:c8:4a:51:dc:31:26:02:6c:4d:5e:
4b:1d:71:86:7e:42:80:fc:0f:bc:6e:13:dd:f6:e0:95:50:cc:
24:2f:69:ee:1c:ed:ee:45:19:a7:35:a7:ee:2f:87:89:3c:6a:
b2:92:8b:b5:c0:4f:67:17:38:52:06:90:c0:9f:a7:ce:14:66:
17:25:ec:02:82:f5:4c:e2:b0:5a:6d:c0:e0:35:aa:04:56:81:
1a:47:e5:3a:2c:89:80:dc:24:cd:69:8d:dc:51:43:af:e4:0e:
79:50:94:7c:15:ea:35:1b:bd:17:45:b6:51:1a:5b:36:42:c0:
e3:33:cb:82:01:e5:4e:d8:07:1f:f1:54:f3:a4:9d:5b:a5:08:
07:04:a1:30:d3:99:d1:f3:dc:25:9e:ef:25:05:a9:d3:95:a5:
46:a8:7c:4a:e7:6d:ff:68:28:ec:80:00:10:ab:2f:87:79:f0:
c0:af:4f:21:12:d1:53:81:3c:5d:aa:5a:10:5b:24:11:b8:ad:
ed:30:ea:ab:7a:dc:90:59:97:44:d7:de:18:1a:e2:dd:e9:7c:
21:4d:b5:d2:2b:1a:27:64:d7:37:f2:7f:b2:24:01:5b:7d:d7:
fe:cf:68:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 11:11:51 2026 by rpki-client