Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.mft
File: PFlVXsIygmx91tmpJrU2AoN5SfY.mft (raw, json)
Hash identifier: 2mT/XUG1JNTOqAdmDzpvFuHpALTqOhJLjeWBSq/XWVw=
Subject key identifier: 16:5A:7D:0F:55:23:9E:1F:00:30:54:71:A1:8C:0D:7F:AA:D2:56:CE
Authority key identifier: 3C:59:55:5E:C2:32:82:6C:7D:D6:D9:A9:26:B5:36:02:83:79:49:F6
Certificate issuer: /CN=3c59555ec232826c7dd6d9a926b53602837949f6
Certificate serial: 01A0BCF931F2EC1568F07CEEFE31033A4CC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFlVXsIygmx91tmpJrU2AoN5SfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.mft
Manifest number: 0616
Signing time: Sun 20 Sep 2026 04:00:42 +0000
Manifest this update: Sun 20 Sep 2026 04:00:42 +0000
Manifest next update: Mon 21 Sep 2026 04:00:42 +0000
Files and hashes: 1: 9rXRCwgatUO9kftONibS3RKLT7o.asa (hash: cTJSOpixcce8y4cST/YpaD7CTOPUYVw3x0RQUp7VLKA=)
2: PFlVXsIygmx91tmpJrU2AoN5SfY.crl (hash: QPwY/8HBz0TkymAxRd9ZBCANmcosMhM3umkxYvaJQyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFlVXsIygmx91tmpJrU2AoN5SfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:f9:31:f2:ec:15:68:f0:7c:ee:fe:31:03:3a:4c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c59555ec232826c7dd6d9a926b53602837949f6
Validity
Not Before: Sep 20 04:00:42 2026 GMT
Not After : Sep 21 04:00:42 2026 GMT
Subject: CN=165a7d0f55239e1f00305471a18c0d7faad256ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c5:c1:cc:3f:bf:66:1f:8d:72:64:02:87:1f:
18:20:52:b9:d2:ee:b0:0c:fb:f0:2c:52:1d:49:e6:
52:16:71:50:c2:0e:91:61:2a:5f:59:e5:83:a0:b7:
f6:db:65:98:2a:fd:b7:4e:5a:e8:b5:f5:17:d5:73:
6b:c6:f7:60:bd:07:19:fa:3e:08:99:c6:22:b4:89:
14:f1:9e:be:21:18:3e:3c:e0:dd:4c:5b:e1:ed:11:
a5:0f:29:57:20:59:4d:93:03:f4:b7:d7:14:bc:97:
1f:14:5e:24:7b:04:2d:48:6a:e7:ed:6c:62:93:e5:
8c:86:27:4b:9c:7c:e8:9b:a1:12:e9:b7:3b:d9:5e:
23:f0:e5:66:3e:fc:7c:71:e3:cf:d3:8b:eb:65:b1:
45:22:b1:7e:2a:9a:d5:2d:be:02:37:92:1d:38:8a:
12:29:1f:49:0c:56:59:16:d5:6f:48:7d:37:d0:34:
b9:82:8d:70:50:69:77:52:80:6d:91:ca:c5:22:5e:
e7:d0:29:e9:61:ee:4c:33:6a:71:5d:47:27:86:40:
dd:39:f3:54:0e:ec:e2:c1:8b:56:6b:13:15:cd:5e:
ae:15:85:ff:7e:ba:d2:a5:5c:01:47:b5:40:f9:c7:
0c:ff:24:7b:34:29:ed:cd:a4:8e:89:c3:56:47:f0:
53:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5A:7D:0F:55:23:9E:1F:00:30:54:71:A1:8C:0D:7F:AA:D2:56:CE
X509v3 Authority Key Identifier:
keyid:3C:59:55:5E:C2:32:82:6C:7D:D6:D9:A9:26:B5:36:02:83:79:49:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFlVXsIygmx91tmpJrU2AoN5SfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:82:b4:13:bc:8e:1d:3c:a9:fe:af:b5:2f:40:e9:af:de:d1:
79:cc:d7:98:dc:ef:3e:22:d5:95:b8:36:c7:1c:b8:6c:98:05:
9f:64:56:53:e9:1f:cb:1b:d0:74:a1:24:3b:74:4a:8f:fd:85:
ad:30:c0:65:c9:74:c8:03:12:5d:68:6a:c3:39:3a:81:14:98:
c2:33:13:bc:ac:7e:51:d2:34:76:db:32:40:5f:a7:24:21:9a:
e6:9d:fb:46:d8:12:89:ce:16:4e:0f:bc:6e:72:f9:6e:a9:f2:
c5:3e:30:9e:86:23:aa:ae:52:af:9c:66:60:d4:c7:b8:15:09:
ec:c3:4e:fb:bf:36:f6:ac:51:cb:0f:14:64:d2:3b:9a:b3:56:
70:32:80:23:81:f3:95:9a:cd:01:3b:75:3a:30:b2:15:53:a0:
b4:51:89:9f:ad:79:70:6b:b4:00:d5:1e:f1:e0:54:c3:c6:60:
b5:c0:47:05:08:09:88:d4:91:6f:06:83:0e:11:75:58:d6:af:
e2:93:8c:f8:ce:01:6d:a6:3c:70:15:f2:60:e6:3c:71:52:92:
2b:ed:08:06:79:eb:e0:d4:fb:ab:fb:b1:2b:c7:be:96:d2:f4:
30:a4:43:8d:45:cc:f8:41:a5:d1:56:a2:c4:ff:dc:5d:6c:1f:
4a:eb:9e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:42:39 2026 by rpki-client