Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.mft
File: pAusZvv-zOXuLKjNiVZoRxCG7Zw.mft (raw, json)
Hash identifier: HW7EbyQOGnjxyvgvLzRwWTS5SW9C3Xz6kGFZYx5KJ3o=
Subject key identifier: 75:2B:D8:16:32:6C:77:11:DF:93:ED:56:92:53:14:40:04:07:D7:E4
Authority key identifier: A4:0B:AC:66:FB:FE:CC:E5:EE:2C:A8:CD:89:56:68:47:10:86:ED:9C
Certificate issuer: /CN=a40bac66fbfecce5ee2ca8cd895668471086ed9c
Certificate serial: 01A0F5A04DD97F63034EBA0AF6CCCF9D4549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAusZvv-zOXuLKjNiVZoRxCG7Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.mft
Manifest number: 02E1
Signing time: Thu 01 Oct 2026 04:01:58 +0000
Manifest this update: Thu 01 Oct 2026 04:01:58 +0000
Manifest next update: Fri 02 Oct 2026 04:01:58 +0000
Files and hashes: 1: WlMbZGmn7ELXlYYDe9GRZvGgMVU.roa (hash: YxkhfO0kcIItDFF9reiDtyKSrNleRYkzff6/T+LQRME=)
2: pAusZvv-zOXuLKjNiVZoRxCG7Zw.crl (hash: PI2hFlg1VPopUx8TFNJ8/vXIFWViid4Aa9wxENDxmM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAusZvv-zOXuLKjNiVZoRxCG7Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 04:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:a0:4d:d9:7f:63:03:4e:ba:0a:f6:cc:cf:9d:45:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a40bac66fbfecce5ee2ca8cd895668471086ed9c
Validity
Not Before: Oct 1 04:01:58 2026 GMT
Not After : Oct 2 04:01:58 2026 GMT
Subject: CN=752bd816326c7711df93ed56925314400407d7e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:85:52:26:aa:53:82:57:50:f5:9d:22:a3:ba:
3f:ca:e7:04:24:34:3c:02:b4:aa:3a:9f:ac:3c:d0:
9c:47:b0:9d:ee:91:23:78:44:f4:55:3c:97:05:54:
eb:2e:a5:da:37:fe:58:d6:8c:10:e5:cf:14:37:a3:
2a:4a:45:f7:d9:07:51:bd:04:70:2e:11:97:29:6d:
09:b0:36:68:c5:16:59:63:39:86:d6:d6:07:be:95:
b1:77:dd:f7:7e:67:31:1b:ea:83:df:33:c5:0b:f0:
d2:e8:f0:6b:41:52:55:68:b7:4f:50:ce:d6:92:ca:
9e:b6:d8:8f:fd:e2:5f:c4:81:9d:da:70:0c:4d:52:
9c:e9:37:9f:1f:3d:84:ab:86:51:50:a4:b9:fa:a1:
ab:45:c5:6f:73:5e:32:fa:49:b5:43:71:1d:51:3e:
57:c1:4f:1b:36:a1:3d:0c:91:05:c4:19:1a:e6:2c:
55:5a:6b:53:5d:e1:f1:bf:18:87:3f:79:c3:0c:d6:
1f:0c:b7:4f:ec:91:a7:92:2c:46:92:89:51:b3:04:
19:6c:72:30:8a:b6:b2:09:a5:35:d6:da:51:fa:15:
cc:1d:50:09:d6:f9:db:c5:e9:b8:d1:5e:fe:09:08:
b3:87:17:28:5a:52:80:3e:72:62:29:93:74:be:b1:
95:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2B:D8:16:32:6C:77:11:DF:93:ED:56:92:53:14:40:04:07:D7:E4
X509v3 Authority Key Identifier:
keyid:A4:0B:AC:66:FB:FE:CC:E5:EE:2C:A8:CD:89:56:68:47:10:86:ED:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAusZvv-zOXuLKjNiVZoRxCG7Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:cd:3c:ca:51:fb:4b:e1:e4:3d:ea:99:36:69:08:13:cd:b6:
c6:a9:42:ef:ff:bb:48:8e:79:c6:e5:23:88:b6:77:da:1f:c4:
66:37:07:56:82:1a:f9:4f:10:42:57:ff:a7:4c:7f:18:82:94:
df:86:93:c6:46:58:b2:51:18:6a:42:1b:b0:52:b7:18:9e:37:
e1:5e:b0:ac:47:3c:54:24:c8:2f:fa:ea:fc:49:63:68:22:f9:
c4:5f:49:56:03:c6:1b:2b:75:b2:b2:40:cb:c1:9e:34:04:3c:
d4:c5:9d:ab:28:fd:9a:bf:be:18:c8:3f:11:b1:82:5e:af:3a:
98:22:5a:e8:5f:1e:68:00:30:bc:4e:0d:21:c1:e7:0b:e0:ff:
49:4d:ce:d9:d7:a0:b4:22:cb:96:35:6b:ec:28:cc:2e:35:34:
6f:8d:3f:e0:ad:58:3b:c0:e8:33:1d:17:5c:1c:a9:c9:42:10:
12:80:bc:95:4d:05:98:64:c4:b2:07:01:aa:31:f7:87:f5:c4:
28:d4:a6:cb:94:60:82:92:1f:81:7e:af:48:94:0e:75:d1:c8:
b6:da:59:84:51:cf:b2:15:c7:6b:b1:e1:87:98:02:0e:23:5f:
ce:45:af:f9:b0:17:42:d2:16:99:6e:ef:38:14:ed:cf:a4:1d:
3d:4a:2c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 14:58:21 2026 by rpki-client