Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft
File: pnac0wPoTc03o3XW52tgKfzDZ7Q.mft (raw, json)
Hash identifier: lWDOUvMVGzQj2nK9UJqFDQsjAL1PPQrR85FaExgfHgI=
Subject key identifier: 4A:68:47:2D:C1:34:11:5D:1A:33:73:1F:FE:75:53:C9:33:37:62:C4
Authority key identifier: A6:76:9C:D3:03:E8:4D:CD:37:A3:75:D6:E7:6B:60:29:FC:C3:67:B4
Certificate issuer: /CN=a6769cd303e84dcd37a375d6e76b6029fcc367b4
Certificate serial: 01A0D83B63F06F28514F6CE7FD1B81045EE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnac0wPoTc03o3XW52tgKfzDZ7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft
Manifest number: 03FB
Signing time: Fri 25 Sep 2026 11:02:45 +0000
Manifest this update: Fri 25 Sep 2026 11:02:45 +0000
Manifest next update: Sat 26 Sep 2026 11:02:45 +0000
Files and hashes: 1: ODmnFvkoRJ8KBXIwmG3VyMbhpMg.roa (hash: UzQ9zfqJ6GmOojpgnIMRQs0ikmH8yfkpdXYgZqB0SfM=)
2: pnac0wPoTc03o3XW52tgKfzDZ7Q.crl (hash: tT6bJSqgm5CrKY2O53YuLsLlIAcXpmVuhJps+5Q+rKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnac0wPoTc03o3XW52tgKfzDZ7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 11:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3b:63:f0:6f:28:51:4f:6c:e7:fd:1b:81:04:5e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6769cd303e84dcd37a375d6e76b6029fcc367b4
Validity
Not Before: Sep 25 11:02:45 2026 GMT
Not After : Sep 26 11:02:45 2026 GMT
Subject: CN=4a68472dc134115d1a33731ffe7553c9333762c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:a6:22:35:b5:81:60:11:a2:18:be:62:ec:de:
cd:fa:f1:dd:64:70:b6:c4:5d:2c:d3:9f:dd:ce:6e:
27:f0:03:c9:62:c4:67:ec:d8:b5:73:48:04:ac:4e:
20:f5:2d:38:f9:54:1a:ae:90:02:df:d4:8a:da:82:
76:e6:93:92:69:15:a7:27:cc:21:59:19:bc:b4:c9:
34:b1:b7:64:a1:05:4e:aa:17:ae:e7:f5:4e:94:51:
c3:f8:01:31:fc:1b:3b:4a:86:9b:b3:bb:66:e8:97:
4d:b5:85:8b:5e:05:da:94:67:46:ba:79:7b:9e:10:
41:34:43:de:59:e8:b8:d1:ba:36:f0:a1:ac:d7:28:
e8:b3:2e:36:53:88:7c:ca:a5:03:3c:59:6f:16:0e:
60:be:18:d5:2a:00:00:d6:87:69:38:2b:9d:6f:19:
73:9c:48:2b:6d:41:9f:50:46:73:fe:dc:98:40:65:
45:18:6c:2d:4a:43:ae:a7:a4:e5:a2:32:02:df:9c:
44:4b:b0:5a:c4:9f:f6:d1:21:7d:10:78:e9:21:fd:
42:ec:07:d1:e9:72:a0:07:75:73:a8:22:2b:86:35:
41:a2:e6:39:51:6a:24:0e:ea:e5:07:a1:bb:57:ca:
74:f1:59:bd:63:83:46:e0:50:40:b0:b7:c5:c6:94:
11:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:68:47:2D:C1:34:11:5D:1A:33:73:1F:FE:75:53:C9:33:37:62:C4
X509v3 Authority Key Identifier:
keyid:A6:76:9C:D3:03:E8:4D:CD:37:A3:75:D6:E7:6B:60:29:FC:C3:67:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnac0wPoTc03o3XW52tgKfzDZ7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0237bc-9d5d-4db4-af9b-97a7b9327787/1/pnac0wPoTc03o3XW52tgKfzDZ7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:3b:eb:92:76:9a:4b:60:c3:da:97:cb:e8:e8:59:2b:a2:85:
ab:c6:5f:6e:d2:65:33:54:15:5b:78:b5:db:01:f0:3b:42:0f:
9b:89:f7:68:a1:6f:d0:b1:75:3d:72:98:ab:35:d6:f6:8d:8a:
4e:03:f8:e8:51:79:6a:75:ac:f8:e6:6a:fe:44:01:e2:4e:38:
a0:e5:02:dd:2b:9b:99:97:ac:23:1b:bc:3e:da:7f:40:80:f4:
81:15:3f:06:7b:c1:7f:c9:83:42:e1:62:f6:27:d5:1e:f8:6b:
29:7b:bc:b0:8a:6f:e3:8d:58:60:e4:05:98:95:bb:17:0f:fc:
9c:c4:9d:3f:0f:e8:3e:8a:8c:d4:2d:6b:e5:68:8f:55:0b:e3:
73:d2:83:0f:00:bc:38:a2:b5:d3:15:f8:5f:66:5e:65:f1:49:
ff:fe:a9:4e:11:03:1c:96:36:10:b5:f9:07:7d:f4:96:f3:a1:
2e:15:5c:3b:66:c7:da:a6:25:2a:56:25:da:52:1e:dd:5b:96:
57:51:a0:e6:dd:de:99:ae:63:6c:50:b4:fd:e1:66:f7:d1:14:
2d:f0:1f:8d:10:2c:56:fc:67:4c:02:d4:44:29:b1:40:d5:1d:
df:be:f5:8f:cb:f7:9c:4c:ac:51:69:7c:2e:a2:cf:9e:b4:51:
0f:72:f4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:43:39 2026 by rpki-client