Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft
File: Pn1HTATkiliTr3HDWnfN1oJv0zk.mft (raw, json)
Hash identifier: hxoAcoMF1hFWXeA+JEYMV2UwOGYLXRLw/eMYVIeVfEg=
Subject key identifier: 61:61:6B:6E:4C:54:74:E6:A1:D9:43:87:9D:4F:D2:77:6B:EF:1E:B6
Authority key identifier: 3E:7D:47:4C:04:E4:8A:58:93:AF:71:C3:5A:77:CD:D6:82:6F:D3:39
Certificate issuer: /CN=3e7d474c04e48a5893af71c35a77cdd6826fd339
Certificate serial: 01A0C88F4D8B666FE2C55395FABA7345A764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pn1HTATkiliTr3HDWnfN1oJv0zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft
Manifest number: 0915
Signing time: Tue 22 Sep 2026 10:00:29 +0000
Manifest this update: Tue 22 Sep 2026 10:00:29 +0000
Manifest next update: Wed 23 Sep 2026 10:00:29 +0000
Files and hashes: 1: 59MC3zCDEqoB6qxXydRSjiwklTA.asa (hash: hvU4mJ/8GiJoU66ydLaONKkQ68qHgCJGT50x/0n4g2c=)
2: Pn1HTATkiliTr3HDWnfN1oJv0zk.crl (hash: hU2uGxWF/SuFcn3jRD5EX/OMd5yQm9zy51FxLU/KFJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pn1HTATkiliTr3HDWnfN1oJv0zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8f:4d:8b:66:6f:e2:c5:53:95:fa:ba:73:45:a7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e7d474c04e48a5893af71c35a77cdd6826fd339
Validity
Not Before: Sep 22 10:00:29 2026 GMT
Not After : Sep 23 10:00:29 2026 GMT
Subject: CN=61616b6e4c5474e6a1d943879d4fd2776bef1eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:7d:b2:69:f2:fc:2c:99:11:45:8b:b7:40:72:
5f:67:c8:d5:2d:11:7f:77:02:a2:9f:a7:dd:2a:80:
ed:c3:94:4b:9e:66:fb:c8:f7:7a:03:c3:0e:1d:08:
5e:4e:f4:fd:a1:60:60:9a:25:6f:43:8e:0b:28:bf:
2c:9f:72:2e:e4:46:cb:b3:a2:d9:c5:46:7f:7f:3d:
60:04:d6:8b:5a:6f:56:63:fa:56:b1:30:ed:71:fd:
0c:3c:db:3e:9c:45:ba:3d:fa:fb:86:3a:1f:45:67:
d2:b9:cf:5b:d5:eb:e2:fd:24:2e:0e:8d:b6:30:a2:
05:22:7e:39:86:26:cd:12:ad:83:ca:53:56:15:8a:
af:2b:46:fa:a2:2e:87:a2:0f:2e:f4:97:88:80:4a:
c7:b9:e7:d5:98:d9:7e:f8:8c:9e:b6:bf:da:fa:be:
42:66:c8:e0:89:4e:06:be:0e:31:c1:93:1d:1b:aa:
55:cc:b1:d1:c7:bc:f9:a3:e0:e6:5d:75:a6:c2:aa:
da:99:e3:d0:d7:76:d0:13:7e:22:21:74:d6:00:e0:
f2:47:f3:75:09:42:e4:91:cd:3f:91:e8:e1:8d:8d:
63:ee:16:62:54:b9:95:4b:c1:a6:90:a7:45:01:bf:
de:7b:62:60:57:04:59:2b:04:96:70:dc:f3:b0:b1:
41:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:61:6B:6E:4C:54:74:E6:A1:D9:43:87:9D:4F:D2:77:6B:EF:1E:B6
X509v3 Authority Key Identifier:
keyid:3E:7D:47:4C:04:E4:8A:58:93:AF:71:C3:5A:77:CD:D6:82:6F:D3:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pn1HTATkiliTr3HDWnfN1oJv0zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ed:2d:be:78:f1:6f:48:53:b9:bd:b3:89:01:1c:49:a2:1a:
68:ee:42:cb:e1:f7:6d:38:74:ab:54:60:31:91:24:17:59:0f:
c8:52:e5:b3:0b:20:91:94:f6:50:83:7a:bc:65:10:aa:c7:da:
46:3a:27:93:3d:fc:86:d1:d3:ba:c4:f3:c2:31:99:1b:d8:6d:
56:46:8b:39:94:73:22:48:a2:22:cb:07:8d:a5:07:5c:27:41:
66:35:41:cd:f9:a4:2a:0b:3b:08:a7:26:ba:2c:0d:77:ce:44:
8b:3d:af:63:bf:ce:ea:7f:01:44:25:23:4e:84:40:58:96:fa:
6d:63:9f:2b:16:72:1d:08:49:4e:44:66:c7:ab:49:77:7e:da:
a2:f4:e7:c6:ae:a6:2c:c0:ea:9c:c8:23:9d:c9:d2:ac:95:67:
9d:91:46:80:db:40:62:91:33:26:ae:2b:19:70:0b:86:40:f3:
55:d6:06:09:4e:bd:07:de:0f:8e:fd:50:36:82:6e:ab:8b:5f:
f1:68:ab:99:61:89:9a:b4:e5:76:01:b6:b0:13:aa:f7:7f:77:
cd:58:98:44:2d:3f:c7:35:da:a6:1c:9d:c0:e2:17:c8:16:bf:
fe:b4:2a:65:c5:3a:d8:b5:d4:c1:11:be:01:27:0f:d5:25:2a:
6e:fc:23:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:20:46 2026 by rpki-client