Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
File: PnXUne0gVmynRcKPgM_ZqS9LfUc.mft (raw, json)
Hash identifier: IPX1elwAB0MtpzXNue21R3aUVADW+8ulmhhCGGgbSA0=
Subject key identifier: 3B:81:A3:49:D1:47:E8:22:6A:68:80:4D:E8:30:18:DE:CA:0E:FC:C0
Authority key identifier: 3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
Certificate issuer: /CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Certificate serial: 019DA48A89CE0B24359F1771B1C2F5574CE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
Manifest number: 18CB
Signing time: Sun 19 Apr 2026 07:00:35 +0000
Manifest this update: Sun 19 Apr 2026 07:00:35 +0000
Manifest next update: Mon 20 Apr 2026 07:00:35 +0000
Files and hashes: 1: FOGBosGtZtXrIIBUEMbGPRMUnSM.roa (hash: 5uENltgcvqTpOLwVKmOle08cC/EenM/q/RZwRZFg1ZU=)
2: PnXUne0gVmynRcKPgM_ZqS9LfUc.crl (hash: 1EvYCQWwVoq6oPUIkA1+Cn9UnSoSneYy7Je1IZrRhy4=)
3: uYYAF2CgTPmwA1qAHQwLxmLvnnQ.roa (hash: iO1PoQ5KtnZAzQ3JC5Zi0gRiLIzhMEqyWnF2lTVAOrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:89:ce:0b:24:35:9f:17:71:b1:c2:f5:57:4c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Validity
Not Before: Apr 19 07:00:35 2026 GMT
Not After : Apr 20 07:00:35 2026 GMT
Subject: CN=3b81a349d147e8226a68804de83018deca0efcc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e7:80:60:97:e6:59:cf:26:39:7d:ae:9d:f6:
ef:ed:23:27:26:e6:f0:73:7d:1e:bd:72:64:42:b7:
1d:09:7a:fd:36:08:e1:8f:1e:ca:e0:ae:16:e9:07:
ed:6f:2b:a8:bc:19:8f:f1:65:17:69:f8:11:71:d6:
14:37:6e:b1:84:8b:8d:7b:de:ee:cd:3b:bf:7e:79:
38:ad:17:8c:fc:3d:de:ba:21:a1:f0:db:36:24:a9:
ee:f4:ad:a6:de:ec:c9:61:ef:8d:a3:2f:c6:79:9b:
c0:0e:ce:7b:fd:36:ab:9d:bd:4a:6c:cb:40:ed:9a:
6f:4a:ba:8b:c7:25:78:5b:c0:51:3d:4c:30:5d:e6:
09:c0:81:88:0d:39:18:2d:99:f6:ce:8a:3e:6f:5c:
42:d5:a5:f0:63:36:46:b1:79:96:79:34:7f:28:59:
10:22:96:67:b9:11:d2:15:2f:9f:4b:de:6d:b3:2d:
40:f7:97:f4:f1:81:9a:a0:24:b9:04:e0:77:e5:cd:
38:bf:f3:a8:93:c0:b8:7d:30:b0:93:cc:8e:71:c4:
34:13:06:c6:64:5e:a3:03:0d:65:0a:2a:bb:f2:3c:
d9:47:94:b3:c3:67:41:1f:6f:b1:2b:eb:a7:8c:41:
29:cf:53:12:ee:9a:4a:24:73:2a:01:4b:25:1c:ac:
35:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:81:A3:49:D1:47:E8:22:6A:68:80:4D:E8:30:18:DE:CA:0E:FC:C0
X509v3 Authority Key Identifier:
keyid:3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:09:87:8b:0a:a2:ac:74:29:fc:26:62:e5:8f:1f:36:14:9f:
8a:23:3d:91:7f:9d:cc:54:22:55:a1:c2:e7:ca:9a:47:7f:d7:
19:6f:2f:37:ac:d2:36:e5:4e:7e:c4:9e:f7:a4:f7:c6:e2:f1:
1a:69:28:2a:e4:ea:d4:12:39:76:19:32:3d:ac:9d:0f:fd:7f:
08:67:8d:c1:3f:3f:cc:da:f2:33:22:8a:00:a7:e6:92:52:95:
7c:83:cf:cd:9a:c3:88:2b:19:59:54:f2:8d:f0:19:c1:ec:d5:
f7:a6:1c:e5:65:bd:d7:4d:14:a9:92:39:91:7b:fc:65:60:ff:
93:18:47:fe:5f:37:59:68:71:97:f5:76:ca:e3:60:69:26:c7:
5c:1b:07:30:80:06:22:c3:e9:91:be:8d:00:27:12:d5:ef:7a:
0a:f4:6a:6a:c0:c5:a9:3f:11:7c:4a:ed:35:cc:ce:a5:d5:47:
9d:b6:f7:c2:c9:63:17:fe:40:94:17:e1:35:cb:de:4b:dc:eb:
82:00:e9:84:d8:21:aa:8c:39:f0:71:19:ec:64:63:6e:15:93:
fe:fa:4b:eb:ff:0a:22:c3:4b:9f:1a:94:b5:12:bb:ba:87:c1:
fc:33:4d:fa:6d:ed:fa:e6:d5:63:67:58:71:8f:b2:0f:06:e1:
c2:d7:84:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:18:52 2026 by rpki-client