Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft
File: Pn1HTATkiliTr3HDWnfN1oJv0zk.mft (raw, json)
Hash identifier: v4xXi1w4Zt12KLZQimgp2YJ645o+Q1HzGhtvvYdDjYU=
Subject key identifier: 92:0B:48:7B:16:F6:C5:79:5D:4F:4E:27:84:46:41:CD:EA:44:74:2B
Authority key identifier: 3E:7D:47:4C:04:E4:8A:58:93:AF:71:C3:5A:77:CD:D6:82:6F:D3:39
Certificate issuer: /CN=3e7d474c04e48a5893af71c35a77cdd6826fd339
Certificate serial: 019EC300242D47A136AA3418E5657FD1A9CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pn1HTATkiliTr3HDWnfN1oJv0zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft
Manifest number: 0809
Signing time: Sat 13 Jun 2026 22:00:26 +0000
Manifest this update: Sat 13 Jun 2026 22:00:26 +0000
Manifest next update: Sun 14 Jun 2026 22:00:26 +0000
Files and hashes: 1: 59MC3zCDEqoB6qxXydRSjiwklTA.asa (hash: hvU4mJ/8GiJoU66ydLaONKkQ68qHgCJGT50x/0n4g2c=)
2: Pn1HTATkiliTr3HDWnfN1oJv0zk.crl (hash: CzpmKlRsxh+YlnV2tKJH0DV5869UDzvDY1N+zU6dFis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pn1HTATkiliTr3HDWnfN1oJv0zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:24:2d:47:a1:36:aa:34:18:e5:65:7f:d1:a9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e7d474c04e48a5893af71c35a77cdd6826fd339
Validity
Not Before: Jun 13 22:00:26 2026 GMT
Not After : Jun 14 22:00:26 2026 GMT
Subject: CN=920b487b16f6c5795d4f4e27844641cdea44742b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a8:c7:6e:07:c8:de:31:75:4b:66:d6:dd:85:
ef:3a:69:5b:58:09:ff:7c:30:50:ad:30:37:8e:84:
66:ae:5a:b4:2d:cb:73:9c:2f:8e:82:b9:01:4d:dd:
2f:ee:76:6d:6f:6b:27:5b:68:b1:05:ae:bb:56:0f:
78:2f:75:88:02:a4:2e:54:72:47:5d:3f:b9:69:84:
12:3d:1b:51:be:cf:aa:64:95:a6:e2:b6:e7:ed:88:
c6:cb:8f:1f:68:80:15:4d:42:46:21:ad:c4:0d:d5:
72:f5:d4:bb:64:ce:aa:aa:2f:72:8c:19:5b:f6:f3:
bd:fe:a5:2b:0e:5a:36:36:d9:ff:dd:46:c4:cd:13:
2d:b2:1a:62:07:34:0c:9b:d7:4f:ca:f1:d9:9a:f8:
86:61:61:5b:f7:f2:b2:68:32:8f:37:1e:21:d8:b4:
63:7d:1b:0a:64:58:63:78:c6:3e:16:71:31:77:8a:
a6:f8:e0:47:ad:c3:b3:04:cb:98:a7:5a:3c:b2:ed:
80:bd:50:3c:ac:c8:76:21:77:14:a4:c7:4c:32:1b:
97:bb:12:6c:7b:75:29:9b:6a:f9:e0:ac:02:c0:3c:
74:1a:bb:1a:95:fd:c4:be:84:58:1e:c6:e5:3b:62:
10:1c:81:e0:34:e9:85:73:c6:54:59:9b:31:4d:66:
6e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0B:48:7B:16:F6:C5:79:5D:4F:4E:27:84:46:41:CD:EA:44:74:2B
X509v3 Authority Key Identifier:
keyid:3E:7D:47:4C:04:E4:8A:58:93:AF:71:C3:5A:77:CD:D6:82:6F:D3:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pn1HTATkiliTr3HDWnfN1oJv0zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:bc:7d:ff:78:82:96:c3:c8:58:9a:a4:93:b1:2e:e2:38:36:
ef:fd:7a:9c:ca:c8:3d:8a:7b:aa:e8:c9:37:58:31:a6:13:d6:
69:a6:7f:1b:73:bd:bc:b4:41:ad:c6:a3:cd:06:43:e3:c2:65:
ca:4b:f6:61:1c:4b:fe:d6:de:4b:82:9a:24:db:79:b9:63:bf:
10:aa:2c:15:ed:6d:40:3d:28:9d:37:2f:5e:48:30:11:a9:fd:
0b:3a:71:7f:22:ad:07:79:0f:6f:c5:76:c9:53:ed:5d:57:85:
27:0b:56:2e:02:29:ea:04:bd:50:f3:56:bb:19:70:c4:5a:e4:
74:57:7a:05:9c:86:9c:b8:18:b8:8a:b6:90:b7:e5:a3:65:ae:
c3:42:f8:3e:3d:9f:42:f4:26:d9:1a:e7:9f:be:a3:5a:e0:7c:
cb:b8:12:1f:2a:5e:22:71:46:e5:71:73:d9:e1:7c:69:56:73:
16:b4:61:d1:a3:b9:ec:18:c2:69:c0:56:f0:a9:a3:11:e6:72:
92:f8:74:23:ef:02:81:95:7b:f9:e0:58:15:3d:0e:25:18:e1:
bb:c5:d5:56:f4:f0:18:5b:96:51:9c:d8:60:eb:13:41:71:2a:
be:45:a8:9e:9a:d7:09:2e:30:54:9e:5a:90:99:cb:a7:38:ec:
02:84:f2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:48:37 2026 by rpki-client