Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
File: PnXUne0gVmynRcKPgM_ZqS9LfUc.mft (raw, json)
Hash identifier: Mo1W6JeVI01ydYg4jIEBlLt0GfeXTJp0meA6llmWpkU=
Subject key identifier: D6:61:F5:66:60:F4:70:67:26:CF:21:D0:CB:5B:E5:FA:53:D6:AF:09
Authority key identifier: 3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
Certificate issuer: /CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Certificate serial: 019D98F46D8DA515B924551517341BF085B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 01:00:48 +0000
Manifest this update: Fri 17 Apr 2026 01:00:48 +0000
Manifest next update: Sat 18 Apr 2026 01:00:48 +0000
Files and hashes: 1: FOGBosGtZtXrIIBUEMbGPRMUnSM.roa (hash: 5uENltgcvqTpOLwVKmOle08cC/EenM/q/RZwRZFg1ZU=)
2: PnXUne0gVmynRcKPgM_ZqS9LfUc.crl (hash: MLB00mYr/Gb6IRlGGxzyK0ueqknjYnJySd4UFoJ8NQM=)
3: uYYAF2CgTPmwA1qAHQwLxmLvnnQ.roa (hash: iO1PoQ5KtnZAzQ3JC5Zi0gRiLIzhMEqyWnF2lTVAOrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:6d:8d:a5:15:b9:24:55:15:17:34:1b:f0:85:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Validity
Not Before: Apr 17 01:00:48 2026 GMT
Not After : Apr 18 01:00:48 2026 GMT
Subject: CN=d661f56660f4706726cf21d0cb5be5fa53d6af09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1a:d7:c8:4c:8d:97:cf:ab:e0:15:f7:b5:fd:
30:5d:4b:b3:2e:f8:be:72:ad:a0:db:ce:6d:ca:7d:
03:fc:b9:de:c3:f3:2e:f9:f8:af:17:12:57:72:eb:
db:b9:d2:52:ff:35:6f:59:ad:be:79:d1:58:bb:b4:
d2:26:ba:23:2c:c1:69:4e:48:c4:1f:74:4b:25:09:
94:9d:05:36:2c:7d:90:3c:1e:c2:0f:e7:f1:71:fa:
12:cc:c0:9f:29:1f:2b:ce:ec:c4:30:32:2a:39:45:
37:f2:ee:1a:3c:f0:2b:a8:1b:02:c7:e9:1f:a5:36:
6e:fb:5b:7d:3e:e9:a1:28:8e:d2:de:6b:c8:96:16:
e6:66:98:da:21:d3:b0:00:48:ed:8b:66:f9:03:35:
b3:4a:25:be:f1:7d:86:94:80:0c:b4:cf:46:18:73:
d3:ac:33:14:2d:e4:23:36:82:3c:4c:a6:cf:96:72:
46:e8:31:f9:30:1d:dc:be:d2:ed:56:51:02:8c:00:
bb:44:2b:be:1b:b2:60:c1:80:f2:5d:ff:d9:f3:ab:
57:f3:7b:df:ee:c7:81:50:b1:4d:16:b2:12:0b:30:
38:e8:8c:2f:17:9f:27:91:d2:b0:8d:b7:18:c2:11:
c7:ff:27:de:41:14:fb:00:e6:be:05:c5:c9:ad:20:
d8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:61:F5:66:60:F4:70:67:26:CF:21:D0:CB:5B:E5:FA:53:D6:AF:09
X509v3 Authority Key Identifier:
keyid:3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:8c:b0:8f:73:56:18:40:0a:1f:d2:ad:02:bd:78:c2:40:fb:
4c:26:03:45:85:7c:b9:d8:93:00:26:28:6f:3f:ac:b4:09:43:
b4:1c:7d:7f:1f:45:84:a4:65:d4:1c:a7:0a:6c:b7:25:3b:35:
b7:48:e5:f7:d7:91:93:ac:24:fd:de:aa:60:b0:49:7b:72:e5:
58:80:62:53:a6:82:1e:16:e7:15:92:57:82:db:1a:58:4e:e5:
a7:5a:e0:2d:8b:5c:30:2b:89:e3:78:c0:a5:45:46:a6:af:d3:
f3:75:49:cf:8c:78:6b:d2:cb:fd:41:f7:0e:11:20:9d:80:fb:
fc:61:49:d7:58:b2:95:bf:42:c1:71:08:12:13:7b:82:39:8c:
35:62:d0:b5:76:4d:fa:ec:1a:c1:50:9d:35:6c:46:1c:ed:8b:
34:88:08:3f:02:ff:8c:fe:e4:44:22:01:3b:db:d9:0d:a0:a8:
91:b4:27:3a:ad:42:86:c8:1a:f0:f5:45:01:03:a2:ea:8a:76:
90:11:03:e3:3b:ca:fc:a7:e4:fb:64:f7:89:21:71:f1:fe:e1:
17:ca:61:4b:3e:47:bb:0e:17:35:d0:c5:6d:e9:c1:3a:56:b5:
5b:27:c7:85:4a:1b:a9:84:cf:fc:94:24:5e:9e:3f:24:0c:b1:
24:c7:99:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:11:37 2026 by rpki-client