Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
File: Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft (raw, json)
Hash identifier: 8JI5JJyq+fAw4FG7BEwE4VvtaNHHxp2mnBb1kLk4big=
Subject key identifier: D2:4E:B1:AD:D9:5C:AC:75:92:59:4A:56:F3:7E:F4:7C:FA:9F:B3:DC
Authority key identifier: 3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B
Certificate issuer: /CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
Certificate serial: 01A0C746228548D566131CEC19D771256F67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
Manifest number: 1A67
Signing time: Tue 22 Sep 2026 04:00:57 +0000
Manifest this update: Tue 22 Sep 2026 04:00:57 +0000
Manifest next update: Wed 23 Sep 2026 04:00:57 +0000
Files and hashes: 1: 01b-_lSQYswp0XJqCFkWTN3FBao.roa (hash: ewH/zDZQ3rLluYv2guw0C+nvriPG/1vP0wlE4tPc+1Y=)
2: EGoSQ-IvTDuR6KeRNIfT2U3LRKg.roa (hash: L6sNJPWIZpchbyuvO0NFOoU8EkTxoHjIUljX0hT8hYU=)
3: Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl (hash: RZi8I9hc1MPtzpawDbL9wDwuJ8WYL/0+4/c44vMc4UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:22:85:48:d5:66:13:1c:ec:19:d7:71:25:6f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
Validity
Not Before: Sep 22 04:00:57 2026 GMT
Not After : Sep 23 04:00:57 2026 GMT
Subject: CN=d24eb1add95cac7592594a56f37ef47cfa9fb3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d1:e9:97:28:a5:dd:42:04:2c:69:40:dd:aa:
10:3c:d1:03:4c:53:a0:3c:1b:88:01:29:a9:b8:d8:
7d:8f:b3:f5:d9:e8:1e:2d:a5:52:75:d4:05:bc:aa:
4d:69:59:0f:40:30:04:d0:b6:fc:e1:e9:ed:3c:8b:
df:35:4b:4c:5e:43:f0:05:42:f4:a2:a7:6a:de:52:
3d:fe:42:cd:f8:59:45:b2:b7:7f:cb:2b:68:dd:71:
45:81:af:d7:eb:b3:07:34:6e:81:ee:c5:35:7a:81:
8c:04:b4:b8:c2:0d:cc:b0:c9:5c:46:1a:24:15:09:
f5:0a:96:d1:9a:bf:29:1f:2a:ed:cf:ea:30:db:e7:
ea:12:d2:5d:a1:7d:4a:6f:10:82:37:0d:6d:d3:b5:
70:64:33:fa:4e:d4:2a:ea:4a:cc:2b:78:4e:a9:ce:
7b:33:88:1d:4d:88:13:ec:76:01:34:eb:79:e1:3a:
72:65:91:30:bc:9e:64:c3:b0:20:26:d5:61:8a:5c:
ee:c5:97:83:d3:44:d1:4e:93:69:7a:57:9c:d5:e9:
b3:76:02:99:66:5b:c1:e1:15:35:f9:31:0a:14:ba:
81:fa:47:1c:e9:12:7a:60:76:03:43:46:68:52:43:
82:33:99:f0:9d:5f:2e:81:a1:bb:73:b4:ec:06:0b:
e5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4E:B1:AD:D9:5C:AC:75:92:59:4A:56:F3:7E:F4:7C:FA:9F:B3:DC
X509v3 Authority Key Identifier:
keyid:3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:3d:d3:93:a1:f6:9c:d4:c9:d9:6f:1a:9c:cc:fb:d2:fc:68:
11:e7:01:46:c1:79:98:a3:4e:b1:7c:d7:e1:36:ff:f8:ac:3d:
a5:d8:ec:ad:e6:ed:f4:ee:32:e8:40:ea:60:72:b3:26:f4:75:
38:94:dd:44:09:88:d4:c1:a6:02:6f:6a:56:41:e5:10:bf:03:
fe:31:2d:0a:4a:78:50:eb:43:a5:6d:d0:e0:88:81:5e:82:1c:
ae:fa:14:65:79:4e:ce:aa:58:1e:9d:2a:06:1c:fe:2d:43:13:
9f:b8:b7:e4:5f:d2:a4:75:65:4b:e9:a2:88:5d:78:53:a8:0d:
71:77:43:b6:b0:7c:66:49:d5:8a:6e:49:4c:b4:42:88:32:cc:
15:45:59:0a:f5:6e:42:1d:c9:fc:a5:10:97:41:db:aa:75:5a:
f4:65:b6:a9:e9:76:19:2d:0f:3a:f9:83:bb:5b:b8:78:97:25:
55:e2:79:69:13:b6:97:9a:8b:23:61:d9:dc:62:5e:8b:a1:a3:
bc:95:9b:46:5d:b1:73:90:26:52:79:1b:68:90:85:4f:d7:97:
2d:c3:50:e0:c2:7e:1a:77:11:94:44:8f:93:d1:fc:2e:9c:54:
cf:16:25:f2:eb:07:a3:89:b3:1d:87:16:76:3c:1a:9a:3f:01:
2e:99:ff:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:40:49 2026 by rpki-client