Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
File: pNAp8sMhrbWeyl_KV6Hrm99THWo.mft (raw, json)
Hash identifier: 9dW4Upi99jx8rUj3QKIHjCqWTGpdrkRN4j2AW90YNvg=
Subject key identifier: EB:16:73:53:C1:82:35:D3:28:46:7A:EE:18:42:AC:01:FD:AF:75:DE
Authority key identifier: A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
Certificate issuer: /CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Certificate serial: 01A12053105CD0610288192B1AD03E50349F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
Manifest number: 1A98
Signing time: Fri 09 Oct 2026 11:01:16 +0000
Manifest this update: Fri 09 Oct 2026 11:01:16 +0000
Manifest next update: Sat 10 Oct 2026 11:01:16 +0000
Files and hashes: 1: WCuXL5bdayCD-yg2u5cxoFH2Qss.roa (hash: fzizFDGzIYB7cPC/5AvExyYCWu5OSdpEHrHOTtkH4kY=)
2: odGmnWHV8DvWoy1JIU0WX6KSpRQ.roa (hash: KVh++uKmrCKdQJxhd1HSXSf6Faxjd8tG0oNOioQCVgk=)
3: pNAp8sMhrbWeyl_KV6Hrm99THWo.crl (hash: Lasu8fQ9hmkb3iELCdHPwLbcIpoTu97YC1tvPgrCmNM=)
4: rHP4WUAqcSQvgCZtg8_htfcNuko.roa (hash: Mb29TkYRCVH9g/5FuCaCpqq3Nrrav/iSJCN1hGSFHTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:53:10:5c:d0:61:02:88:19:2b:1a:d0:3e:50:34:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Validity
Not Before: Oct 9 11:01:16 2026 GMT
Not After : Oct 10 11:01:16 2026 GMT
Subject: CN=eb167353c18235d328467aee1842ac01fdaf75de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5c:83:a2:d1:30:9d:c2:23:03:c5:ed:4e:ee:
24:d3:a4:fc:4a:32:c9:36:d6:2f:66:8a:9e:4e:5a:
41:4b:58:19:63:fe:62:40:74:87:12:77:97:fc:59:
a3:ed:f6:0b:53:f7:ac:13:23:c8:e3:bd:12:c9:b3:
31:8d:83:1a:66:0e:ed:ec:46:9a:7f:ef:de:07:f7:
0a:b5:7f:97:c9:3c:91:e0:48:33:55:da:fe:9a:52:
8a:03:fd:e0:ef:62:69:10:65:d5:3a:9e:51:2d:06:
7c:d6:36:d7:4a:09:93:9e:74:69:b8:ad:87:9b:79:
45:0c:63:f7:e5:6f:1f:9a:1b:7e:e6:ce:22:b7:93:
72:c4:63:5e:4a:ff:87:1e:92:d9:ab:0d:06:cd:7c:
6a:44:cb:9b:eb:34:53:76:5d:44:5c:0c:88:d5:32:
2d:d3:9d:b5:a0:0f:e9:86:8e:76:be:87:90:96:86:
0a:2a:d6:f3:d9:ef:e8:63:24:95:25:85:8a:61:2e:
9c:81:10:33:dd:3c:10:32:7c:1d:49:19:59:50:68:
b2:97:6c:fa:5b:50:e5:81:9a:8c:91:87:0d:a9:9d:
9d:48:d5:e1:aa:af:c9:79:2e:10:b6:a5:e2:2e:71:
25:30:f3:a6:70:1b:c0:d4:e7:b2:28:4a:ed:0c:e1:
52:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:16:73:53:C1:82:35:D3:28:46:7A:EE:18:42:AC:01:FD:AF:75:DE
X509v3 Authority Key Identifier:
keyid:A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:92:cc:82:76:b4:8d:95:08:b9:19:2a:9c:e9:cb:38:2b:ef:
40:d2:ff:f9:8a:3a:17:7d:ee:46:5a:a0:de:4d:18:4c:e8:be:
b0:57:09:a4:8f:89:bd:8c:92:0e:a3:08:2a:b7:37:3a:94:47:
af:28:03:e8:7a:3b:6d:83:dd:61:ab:71:88:b8:21:46:82:40:
f5:19:b4:89:8a:4f:0a:de:ca:5d:11:df:39:17:39:5c:1a:fc:
5d:eb:43:fd:c8:ae:67:63:2e:cc:d3:74:30:38:c0:71:8b:da:
ab:9a:68:2d:ca:d4:8e:50:9b:78:7b:39:72:ff:1c:a8:fa:f6:
b7:28:f9:99:5f:95:73:25:6a:fa:27:c3:50:00:ab:90:d5:97:
1e:b9:20:36:c0:58:34:bf:f0:ad:0f:74:18:b8:cb:71:3f:b6:
8e:f6:03:ab:b1:1d:51:9a:f9:05:22:73:c6:b0:65:b9:28:31:
fd:4b:47:35:49:1d:f9:f0:a4:ca:17:8d:30:58:2d:df:c6:b3:
fc:3b:8b:ee:11:49:0e:00:50:50:2f:6a:a5:fb:3f:15:35:45:
16:7e:d8:a3:a8:a7:0a:dc:18:61:68:35:4f:f6:d4:6f:75:d6:
bc:73:47:a2:78:6e:94:b1:47:bc:86:37:fb:26:39:0e:91:6c:
f9:fb:fb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 16:56:03 2026 by rpki-client