Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
File: PNJOCMV2B8rrzBnIVS6uLpNeguU.mft (raw, json)
Hash identifier: xUDfJSRGALpP/GO15noVEfEtUPXROuKwf7CsPxxKau0=
Subject key identifier: 77:09:A0:7B:DB:FF:45:19:5A:4C:1E:63:DE:23:6F:5D:2A:7F:DF:78
Authority key identifier: 3C:D2:4E:08:C5:76:07:CA:EB:CC:19:C8:55:2E:AE:2E:93:5E:82:E5
Certificate issuer: /CN=3cd24e08c57607caebcc19c8552eae2e935e82e5
Certificate serial: 019FAC76313DB1F4E0A6D93CD8DE77E93FDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
Manifest number: 04F5
Signing time: Wed 29 Jul 2026 06:00:54 +0000
Manifest this update: Wed 29 Jul 2026 06:00:54 +0000
Manifest next update: Thu 30 Jul 2026 06:00:54 +0000
Files and hashes: 1: PNJOCMV2B8rrzBnIVS6uLpNeguU.crl (hash: +3fnZ3N+oRdoNX95TRgV8mC5CBDYrp+D8eY1DbPkJCM=)
2: b06IK2jnqaGT2Aa6wapV_ItJbLk.roa (hash: evhqnMI6fxBMtq2kvZ+VYu5aDa3S4q8vrEyodEWm170=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:31:3d:b1:f4:e0:a6:d9:3c:d8:de:77:e9:3f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd24e08c57607caebcc19c8552eae2e935e82e5
Validity
Not Before: Jul 29 06:00:54 2026 GMT
Not After : Jul 30 06:00:54 2026 GMT
Subject: CN=7709a07bdbff45195a4c1e63de236f5d2a7fdf78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3d:97:ad:4c:d8:33:29:5c:af:74:52:9a:b5:
bd:82:bd:6f:ac:62:2e:b9:29:aa:a4:01:53:e6:5e:
ff:92:1d:05:dc:6a:20:07:58:13:27:09:d9:38:96:
59:d1:d6:0c:21:d7:e3:ec:95:b5:bd:0c:bf:e4:d5:
6b:30:09:66:d3:84:e0:80:6c:23:1a:de:54:04:45:
d0:80:28:73:a2:e4:47:64:1c:f5:71:5f:b3:d9:ba:
a3:63:cc:bf:af:69:d5:3e:30:72:4e:ff:85:39:7e:
a2:b0:f6:73:e2:5d:d1:2b:52:27:cd:ea:13:ec:bc:
37:2d:12:7b:d4:83:c8:05:d3:94:f5:62:1d:14:27:
19:45:37:eb:1c:56:4b:99:26:cf:38:3a:c8:19:d9:
85:ff:95:22:98:63:76:1c:79:5d:33:42:46:75:92:
c4:6b:1a:94:7b:d5:08:20:23:dc:5d:46:ee:fa:50:
88:5c:6d:de:71:bc:a8:e6:d1:2d:e5:b4:08:55:ec:
79:17:76:26:05:c7:d8:87:08:11:0b:a1:56:5e:77:
a8:1e:31:2e:f6:d7:96:fd:14:33:13:44:33:39:10:
39:76:b2:2c:91:9f:b3:7b:e4:fe:c6:e9:fa:04:6b:
3b:ae:d3:96:73:65:56:38:89:77:9d:ce:e3:7c:80:
df:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:09:A0:7B:DB:FF:45:19:5A:4C:1E:63:DE:23:6F:5D:2A:7F:DF:78
X509v3 Authority Key Identifier:
keyid:3C:D2:4E:08:C5:76:07:CA:EB:CC:19:C8:55:2E:AE:2E:93:5E:82:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNJOCMV2B8rrzBnIVS6uLpNeguU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/084f75-d00e-43c5-bca8-36fd723a380a/1/PNJOCMV2B8rrzBnIVS6uLpNeguU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a9:b8:ff:ef:8f:0d:66:8f:f0:4a:60:14:e4:41:74:e7:a0:
f9:3a:4c:9e:77:76:1b:61:39:f9:da:83:0e:b5:30:bd:52:7e:
da:e4:03:62:79:3b:8b:1c:35:37:ed:bd:c9:29:92:ca:a5:b5:
7e:41:52:bb:de:4f:a1:9b:d2:8c:62:d6:bf:16:68:dc:2c:7d:
24:05:f1:cc:1c:94:de:e4:80:80:89:fa:3f:56:24:7d:9b:a5:
e6:0a:72:db:10:14:a7:81:c3:c4:38:f4:86:14:e4:22:c3:76:
30:00:ae:cc:78:44:2f:d1:e2:ba:c3:0b:ab:db:76:a1:78:95:
95:f0:47:e7:74:3d:d5:d2:40:a6:6a:16:f0:6e:ae:15:41:2a:
f8:40:3c:b7:bc:88:0d:de:3b:44:d1:60:f4:2d:e9:3f:32:73:
21:74:93:80:ba:31:96:ba:12:50:95:4c:8f:cd:2f:12:65:14:
71:70:35:37:fc:67:5b:5c:c9:1a:a2:57:24:86:3f:81:64:11:
80:86:1f:36:da:10:85:fd:7f:66:b9:c9:96:fa:0c:11:23:63:
d6:a6:aa:60:cd:06:2d:93:40:f1:85:63:64:a7:55:35:98:00:
6e:c3:18:09:5d:5a:05:33:8f:f8:e6:a8:d3:af:8e:a6:ef:76:
cf:90:f1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:51:32 2026 by rpki-client