Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.mft
File: PvRdcGusxYrv9q5H8jLZKzwvsBg.mft (raw, json)
Hash identifier: 5QNR6cqRlJpcCDdmQ+MAaZYigjuo3++dfzodhkRDnac=
Subject key identifier: 88:0B:DD:42:4F:75:A1:56:FA:8A:B0:47:6D:1D:47:1E:23:29:46:6E
Authority key identifier: 3E:F4:5D:70:6B:AC:C5:8A:EF:F6:AE:47:F2:32:D9:2B:3C:2F:B0:18
Certificate issuer: /CN=3ef45d706bacc58aeff6ae47f232d92b3c2fb018
Certificate serial: 01A0C28D335318520A5DE117FEF16F92ED61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvRdcGusxYrv9q5H8jLZKzwvsBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.mft
Manifest number: F7
Signing time: Mon 21 Sep 2026 06:00:28 +0000
Manifest this update: Mon 21 Sep 2026 06:00:28 +0000
Manifest next update: Tue 22 Sep 2026 06:00:28 +0000
Files and hashes: 1: NL1w9Xj9eNNvZHja4bYi8u1uP0g.roa (hash: bGa7KQ5aQ4eZWg9YSqL9Pvq1iyjpLbcYhC9x7Z0XWS8=)
2: PvRdcGusxYrv9q5H8jLZKzwvsBg.crl (hash: 3aouXL1Qap2P/+40ekHX0kmyE+ehFDKDS/pCttinlZ8=)
3: UGXYFC9jlohYNhw6f4qzRWdUTE8.asa (hash: EAHRau/OfR99p6HOKLABIO+IowH54Ml4zKfLXfBoos4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvRdcGusxYrv9q5H8jLZKzwvsBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:33:53:18:52:0a:5d:e1:17:fe:f1:6f:92:ed:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef45d706bacc58aeff6ae47f232d92b3c2fb018
Validity
Not Before: Sep 21 06:00:28 2026 GMT
Not After : Sep 22 06:00:28 2026 GMT
Subject: CN=880bdd424f75a156fa8ab0476d1d471e2329466e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:66:2a:b1:07:98:ba:57:ee:24:80:80:6a:20:
a3:87:4c:bf:7c:0f:58:a3:df:3b:e1:a3:cd:2d:6b:
33:69:44:5c:ef:7a:f8:e4:06:c6:09:b8:9e:0b:20:
40:d8:72:7a:25:91:6b:68:7d:66:4b:17:58:38:68:
91:71:bc:ea:c5:02:50:a8:50:e6:04:53:75:a4:1d:
53:f6:f3:40:61:34:3a:01:da:94:84:1f:ed:5c:09:
33:49:c2:6b:f1:61:c6:59:c3:62:ef:4d:6a:e1:f8:
78:bb:71:0a:c1:94:0f:c8:45:fd:6c:9f:b1:2e:bf:
fc:55:fe:26:55:a9:49:1e:87:46:20:d6:64:b4:fa:
9d:e6:62:c7:4f:dc:1a:54:76:2b:a3:d1:df:c5:3e:
61:53:50:90:43:31:01:77:4a:b7:35:c4:1f:0c:85:
15:8f:76:e9:17:0b:8b:3c:e0:d2:cb:be:22:44:dd:
d6:bd:55:09:f2:cf:97:ac:93:f4:80:61:72:34:20:
a0:72:a2:a5:b8:ec:1f:67:13:01:e8:65:2d:b2:8c:
64:1d:ac:4a:a1:81:9b:54:6c:f7:15:8e:b2:f1:e9:
3a:fc:2a:e2:5e:5f:bf:e2:c4:e5:e7:28:aa:ce:a2:
32:0e:cd:99:9f:d5:2b:35:b3:53:20:7a:91:f2:1b:
98:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0B:DD:42:4F:75:A1:56:FA:8A:B0:47:6D:1D:47:1E:23:29:46:6E
X509v3 Authority Key Identifier:
keyid:3E:F4:5D:70:6B:AC:C5:8A:EF:F6:AE:47:F2:32:D9:2B:3C:2F:B0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvRdcGusxYrv9q5H8jLZKzwvsBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:14:80:0f:89:e6:c1:ca:1a:9b:1f:1a:4c:9f:9f:8c:e1:b1:
58:0c:ac:f4:57:8f:eb:2f:89:ee:71:18:0f:e3:bc:2c:0e:4f:
41:9d:06:31:59:0a:e3:8c:7e:ac:9c:47:9b:67:00:cc:85:7e:
8b:35:3c:aa:fb:96:3f:8f:8f:ab:eb:c7:57:a6:6d:64:56:3a:
ba:e6:e6:5e:99:fb:67:d5:5d:23:ea:2f:fa:f8:60:27:e5:f6:
4f:35:01:f3:ad:82:af:65:9f:9d:a8:e2:2d:e1:a4:33:2d:f3:
32:68:7b:91:49:83:80:c0:d9:e1:26:f8:de:9e:28:f7:98:3d:
e9:75:6f:ea:a7:a1:c6:aa:70:8f:5e:7a:67:d4:15:12:c3:3e:
9f:e3:88:2a:78:02:4b:d8:00:3a:88:9e:5e:21:28:33:f7:e5:
49:3b:c5:3f:3b:9a:be:50:7c:0d:0a:66:32:e0:46:f2:fe:d0:
2c:d4:05:6a:b6:19:ca:dc:96:a8:d5:ba:11:46:01:6d:9c:c9:
ff:0d:98:69:0b:4e:4d:9d:26:c1:5e:ac:9b:31:bd:50:d9:7e:
68:dd:7a:78:6c:62:4c:c4:08:2b:d0:3d:48:bc:21:78:41:c2:
de:ef:18:27:3e:c7:c6:eb:ea:92:ac:05:1c:3c:89:5d:2f:49:
b6:85:ec:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:55:51 2026 by rpki-client