Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
File: PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft (raw, json)
Hash identifier: 9My6x4H7nF46YmP7ehWedUh+ljqfDZYFE7kJn1C0iXc=
Subject key identifier: 43:56:77:12:77:92:B0:44:FA:80:75:ED:EB:A5:8E:15:1F:7D:31:1C
Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
Certificate issuer: /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Certificate serial: 01A0D3B8BF974679ADC85CCC50ECC2EB78C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
Manifest number: 14AE
Signing time: Thu 24 Sep 2026 14:01:35 +0000
Manifest this update: Thu 24 Sep 2026 14:01:35 +0000
Manifest next update: Fri 25 Sep 2026 14:01:35 +0000
Files and hashes: 1: Owu-o7JvEybmXtpQNjtKXjhH9ug.roa (hash: 89sGeUxvhpVypElkHwSDvmrZnRJHBtaKeL9yMz7nC6U=)
2: PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl (hash: lPm7sMH05KCgenbM7bkIJVkA3Ng92dkX3qfwY9vinvs=)
3: _b_jh41DtvYlyJbVt2vmUxy_03c.roa (hash: Y4f7kKKKelGhsZykUm6x2Et6p6M+4yMQNJ8fkfC21Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:bf:97:46:79:ad:c8:5c:cc:50:ec:c2:eb:78:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Validity
Not Before: Sep 24 14:01:35 2026 GMT
Not After : Sep 25 14:01:35 2026 GMT
Subject: CN=435677127792b044fa8075edeba58e151f7d311c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8c:77:49:dc:d5:ea:88:f0:c2:04:02:14:1c:
cc:32:a5:6e:90:db:7a:1d:3f:88:31:74:57:ef:7e:
7c:a0:55:1b:26:c6:89:b5:6b:53:48:3f:11:5f:d9:
e8:68:dc:41:40:10:79:80:05:55:b3:ca:b3:10:94:
28:b2:f9:61:b9:fc:bd:55:2e:57:fd:c2:da:ef:50:
51:54:92:74:6c:ca:92:86:bd:97:42:32:f9:da:b6:
de:ad:cc:8c:40:80:26:03:51:0d:2e:ae:e4:63:14:
b2:37:c6:cd:3f:95:04:c7:63:d3:a0:3a:7a:95:00:
05:91:95:51:b3:a3:e3:1d:3a:72:14:a8:67:c1:d2:
93:0c:a8:ec:f8:cd:d8:56:b2:a9:ed:9e:4f:89:ef:
e8:42:be:03:1b:a8:5f:ba:43:d4:a6:bf:b1:62:86:
fd:81:e8:33:a6:0f:f5:bc:d5:42:be:73:ca:08:98:
62:25:da:4f:1d:41:2f:27:ff:0f:d3:19:bf:44:80:
d6:b7:98:9a:8a:4f:5e:b6:88:a5:24:88:32:1e:7e:
f4:7c:6b:ff:09:8f:9f:b5:29:89:fe:b0:05:50:ca:
12:7f:90:2c:80:6f:34:19:53:ad:e7:d1:9d:07:99:
69:8a:fd:24:ad:08:e0:43:2a:da:10:36:26:8c:ad:
b8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:56:77:12:77:92:B0:44:FA:80:75:ED:EB:A5:8E:15:1F:7D:31:1C
X509v3 Authority Key Identifier:
keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f0:a6:bc:be:bc:2d:03:19:0e:b4:1a:03:d0:5c:80:d8:d7:
42:69:e6:a4:f2:f8:3f:34:34:98:37:59:f2:60:2b:d2:3f:fe:
76:d2:0a:dd:c1:74:6a:e1:0b:8d:af:3a:50:36:aa:3e:2b:93:
0f:c2:de:bc:44:44:85:65:c3:bb:96:ed:c7:28:a7:8e:b2:3e:
87:b3:41:79:1c:87:5d:31:e6:18:ee:d7:fe:09:f5:dd:93:ee:
24:cc:34:a7:41:fb:22:e5:99:c2:07:ef:59:f8:08:0e:63:24:
a0:e2:70:d1:e3:e3:98:1c:47:5a:a2:21:7c:8b:b0:97:78:a8:
e9:6e:e3:b2:28:b2:58:95:1c:15:e7:64:3c:75:6f:df:1f:87:
37:f6:5b:82:de:f4:9b:e6:f2:fb:eb:08:d2:76:1f:0b:1f:43:
82:83:4d:0c:81:1b:6b:a1:91:c7:4f:a0:6c:18:a1:e0:52:27:
36:70:fa:4d:23:12:0d:0e:6b:06:86:37:35:c7:f5:20:ab:b2:
6b:e5:9f:a0:2c:c1:e3:17:68:60:61:79:00:98:e3:00:ca:8d:
28:d2:57:db:77:4d:b0:5c:aa:c1:f9:83:78:2d:74:83:a0:41:
1e:ec:a5:e1:41:32:ac:c1:88:1d:33:90:b6:2d:37:b5:bd:00:
f2:93:5f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:27:08 2026 by rpki-client