Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
File: PfikDGosaZPJ--gd8-p903L5bew.mft (raw, json)
Hash identifier: xmEVYlHR/AgnVpTG+Srg8b2/fR81kGG1XUwbSRcDjvU=
Subject key identifier: 71:01:32:68:BE:37:77:F4:21:0B:79:31:DB:60:8E:ED:A5:62:70:5B
Authority key identifier: 3D:F8:A4:0C:6A:2C:69:93:C9:FB:E8:1D:F3:EA:7D:D3:72:F9:6D:EC
Certificate issuer: /CN=3df8a40c6a2c6993c9fbe81df3ea7dd372f96dec
Certificate serial: 01A157AFC175AB36DDEBDB9883B409408682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
Manifest number: 0EBA
Signing time: Tue 20 Oct 2026 05:01:38 +0000
Manifest this update: Tue 20 Oct 2026 05:01:38 +0000
Manifest next update: Wed 21 Oct 2026 05:01:38 +0000
Files and hashes: 1: NiXEkFa2OyOUnxfMEcQON6yPoNg.roa (hash: dVvuF0RyYBJRRTECbqhrE8YUyCue+Lh92GIKr6FebqU=)
2: PfikDGosaZPJ--gd8-p903L5bew.crl (hash: cVXA5pkH/QAo4PdsmdCOtDe2JCI904BNtVkJaogS6Po=)
3: gQD3MU7TBpEiOjF9SqTJkR2Y3Hk.roa (hash: yBwTOvwiLlTbqshsC+5AZzg1Ya/CKAPiEghYIW9dRIk=)
4: qWvFNqskXHsPxENe_ElNOi_ZdwU.roa (hash: Lox9iJeR/nzrJwtR4kRDqG6cZUpQudB7+6Z9SNhuzk0=)
5: q_r4ijQpjXZ8n9KPTw-0C5wgwwQ.roa (hash: zq7FtPgWzADBU+GCudKPhOXhQRXlPBFiAI7EZtoOa+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:57:af:c1:75:ab:36:dd:eb:db:98:83:b4:09:40:86:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3df8a40c6a2c6993c9fbe81df3ea7dd372f96dec
Validity
Not Before: Oct 20 05:01:38 2026 GMT
Not After : Oct 21 05:01:38 2026 GMT
Subject: CN=71013268be3777f4210b7931db608eeda562705b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0d:a3:cb:de:92:3c:61:90:c9:08:50:9f:2e:
9c:ab:f0:43:18:30:cd:51:e4:a3:9c:46:c0:84:60:
fb:10:0c:6b:56:12:7e:f4:33:4d:67:9d:93:4b:c3:
3d:fe:3c:d5:0e:96:2c:6a:2d:79:5f:29:24:d6:d3:
d3:7f:60:26:4b:2a:62:37:4c:85:99:3b:5c:5a:08:
65:a7:6c:13:e9:eb:53:99:c5:72:62:a9:56:ba:a2:
09:9d:4e:60:71:97:48:b1:0c:16:e8:cd:75:da:af:
71:c8:72:bb:09:68:33:21:46:23:a9:a6:02:1e:48:
d4:76:ff:6b:c0:06:a6:a5:ef:e5:b6:ae:bb:e1:f5:
24:ba:e1:49:e7:96:8b:3f:0d:e6:ca:91:b2:4a:fe:
66:54:51:0a:c0:15:60:89:d9:c1:72:f8:5a:04:4d:
4b:c3:d3:dd:06:5a:c3:96:93:8e:21:b0:2c:85:44:
7d:73:69:f9:87:14:a6:6f:44:b7:8c:45:98:17:f1:
0f:18:50:2d:27:2d:72:f5:22:35:e8:1a:0f:59:e6:
83:60:a5:d7:75:cf:37:b4:24:2c:b7:e2:60:28:74:
c3:43:01:cd:a9:6d:ee:b7:c1:25:7a:db:49:ae:47:
a6:bc:82:a0:a7:6e:53:38:2f:b4:65:05:d2:d9:0a:
e2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:01:32:68:BE:37:77:F4:21:0B:79:31:DB:60:8E:ED:A5:62:70:5B
X509v3 Authority Key Identifier:
keyid:3D:F8:A4:0C:6A:2C:69:93:C9:FB:E8:1D:F3:EA:7D:D3:72:F9:6D:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:88:cd:dd:e6:91:c7:39:a5:6e:f7:a6:e8:51:a3:b7:36:48:
f1:7f:62:9c:77:e8:45:2e:6c:25:c3:c2:0e:38:ff:79:81:1b:
16:4a:e0:26:3f:0f:b0:36:d3:01:bb:84:cd:35:6e:3d:af:5b:
8f:80:22:d8:3a:6f:50:cf:3f:d7:a3:5d:1d:de:9a:e7:0c:d3:
78:3c:84:3e:12:76:dd:42:4e:80:6d:1f:c8:1e:aa:b4:0a:db:
25:48:3a:5a:6e:cf:41:b8:5f:52:43:bd:96:46:0a:6e:e2:c3:
7d:c8:93:f5:e3:e0:53:79:b0:53:a6:50:e4:7a:06:c0:91:b2:
d9:dd:41:33:0b:ef:2d:07:34:b4:c7:0b:34:4a:cc:2e:64:c1:
62:e2:87:19:a7:38:af:2a:34:08:8d:4f:1b:e7:f7:0f:33:95:
86:7c:22:e8:75:72:ac:9d:a8:55:35:f6:69:d5:c3:99:e8:32:
a9:eb:e1:32:21:a2:c2:44:ab:0a:12:cc:d3:5f:09:a2:20:4f:
f8:33:45:19:8a:14:e5:a3:51:24:d4:b4:ad:10:1e:33:94:f9:
ac:f1:a7:ac:b3:23:ea:6d:fd:e2:79:e7:74:ac:2c:4c:fc:63:
fd:29:3a:22:5c:ad:a3:69:90:05:04:a4:18:8e:cc:13:d9:de:
e3:9e:50:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 09:36:34 2026 by rpki-client