Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
File: PFaMWdeoMZnDp56g6DdblG7YhOI.mft (raw, json)
Hash identifier: c2Hyx8zs5bUGERerQJCQKpNiGXtnAwPCw+ofnBPJx5I=
Subject key identifier: 50:93:05:16:0E:F7:E4:B5:DF:54:C4:FB:8D:DF:C3:FF:7C:25:F7:10
Authority key identifier: 3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
Certificate issuer: /CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Certificate serial: 01A1DFBA62D1C5277B3CFCEBF8C823A7F041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
Manifest number: 1AFA
Signing time: Sun 15 Nov 2026 15:01:36 +0000
Manifest this update: Sun 15 Nov 2026 15:01:36 +0000
Manifest next update: Mon 16 Nov 2026 15:01:36 +0000
Files and hashes: 1: 0ZH3kxew36RRFzQg_mo4-7q2H4U.roa (hash: k3MKGbvdmLnbLs9zehodMhvSl8HPr3KY+BJ978CUfo8=)
2: AydP7XNvWxhhDMLSuOqc0Oa5dE0.roa (hash: jUVgcjRvFoEADtpRITq72Z8KeRsnl4848PEL4Me2SIw=)
3: PFaMWdeoMZnDp56g6DdblG7YhOI.crl (hash: Ur20+QroNqM1KOhHKOVAaFhMJaQAhOTJecE9+HUd5Rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:ba:62:d1:c5:27:7b:3c:fc:eb:f8:c8:23:a7:f0:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Validity
Not Before: Nov 15 15:01:36 2026 GMT
Not After : Nov 16 15:01:36 2026 GMT
Subject: CN=509305160ef7e4b5df54c4fb8ddfc3ff7c25f710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:13:d1:53:6d:5a:1f:2a:bf:2c:07:bb:be:dd:
10:1b:00:35:00:24:d4:00:39:c2:ac:45:a4:e2:b3:
a3:58:0f:fb:95:e0:cd:01:64:a8:6d:1b:48:46:92:
8f:4e:c4:d9:1f:2c:2f:60:79:82:3b:77:c4:0d:28:
f5:20:38:1b:45:c0:1c:cd:77:a6:60:c6:66:5e:cb:
60:52:08:06:fd:3d:7a:e0:f0:4c:9f:51:43:41:5e:
66:08:8d:c0:8c:32:ab:cb:e2:b2:0d:e3:42:a0:bd:
67:d5:63:de:12:81:37:96:1e:7f:6f:13:cb:ea:12:
16:a1:8d:82:ed:1d:3c:0c:95:7c:ba:7a:de:5d:66:
71:36:fc:3b:7c:f2:03:4f:ed:cf:f7:a7:d9:cf:57:
8c:81:f6:d8:79:cb:ef:84:f6:e3:54:81:24:36:fc:
e3:01:12:08:46:2d:ae:63:af:02:4b:06:a4:21:5d:
1f:b4:b7:32:52:37:d9:05:70:94:00:ba:05:38:de:
e6:bd:4d:85:88:6b:db:11:a7:95:41:c8:8c:ae:4a:
db:e8:48:b6:04:5c:e5:10:57:c6:6e:32:54:ba:c0:
90:5d:0b:b8:df:15:86:87:ec:54:da:bd:3d:06:0c:
59:66:e1:b0:00:55:67:97:b3:07:1b:a3:f3:f9:40:
9c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:93:05:16:0E:F7:E4:B5:DF:54:C4:FB:8D:DF:C3:FF:7C:25:F7:10
X509v3 Authority Key Identifier:
keyid:3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:96:46:23:e4:ec:3d:1d:55:de:e4:3e:4d:b1:6c:77:12:64:
a8:9e:59:c3:36:be:60:f2:fb:a8:4c:2f:41:37:29:66:0a:ad:
d2:5e:b7:60:c6:0a:48:e4:ac:c1:20:a0:bf:19:55:6b:ff:cc:
fc:7d:a2:6a:2e:66:63:1b:1f:92:04:10:8f:ca:7c:6f:97:5f:
61:61:86:47:35:b6:23:a2:be:34:b7:b4:7f:fe:b0:0c:54:78:
15:69:49:18:18:9f:3c:c6:ae:84:b5:d0:e8:c6:c9:11:3a:53:
7c:f8:3e:1c:ac:bc:42:57:6e:05:08:e2:e7:47:f3:d4:2a:8e:
1b:ed:0b:4a:4d:af:c0:f6:bf:21:eb:00:15:fa:36:07:55:5d:
a9:67:ba:98:45:70:03:e7:52:c8:42:99:4b:36:65:d3:af:7e:
ac:0b:a5:41:69:2e:47:55:8b:5a:60:4a:50:22:b2:ad:76:7e:
0b:97:3d:6d:ed:e9:98:76:aa:79:65:ad:a4:09:47:11:98:a6:
dc:ac:6b:ed:68:72:fe:48:c1:5d:23:b8:58:12:fb:eb:ff:d2:
44:bf:0f:52:af:dc:17:38:19:03:78:77:1a:ae:34:e4:94:87:
ca:08:bf:c5:ec:ed:77:0e:c1:fc:51:7a:c2:c9:88:e2:79:a2:
3f:a0:f0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:58:38 2026 by rpki-client