Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
File: pAoIH7qPsz77RiWe-T9oeNcBUOs.mft (raw, json)
Hash identifier: dY3FxuaCyZcroMR0mkR3ShseUo08xo+IQMQrQjemsZ4=
Subject key identifier: 5E:FC:73:48:E1:DE:FD:CF:C7:3B:9E:AD:F5:DD:AE:51:C0:BA:3A:50
Authority key identifier: A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
Certificate issuer: /CN=a40a081fba8fb33efb46259ef93f6878d70150eb
Certificate serial: 01A0E66359415D48E1EBD8912AC103385AF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
Manifest number: 0FD6
Signing time: Mon 28 Sep 2026 05:01:05 +0000
Manifest this update: Mon 28 Sep 2026 05:01:05 +0000
Manifest next update: Tue 29 Sep 2026 05:01:05 +0000
Files and hashes: 1: VBRvFj1EOS8ywtDDLAz1AuJ-F3M.roa (hash: ZcSJ73xAFGVAh8eRMHYLBDppD5u63RXHyLpMLnO53qI=)
2: mnODa5wDvkGX4Jfpz4BI1Vtzz80.roa (hash: jyMMr46dns8Qs3JvGsMvWCbFmVoKBoUCnfmLlBoBHdM=)
3: pAoIH7qPsz77RiWe-T9oeNcBUOs.crl (hash: xtQqPRE7BNS8qe7UwJvQ9tpOmoz4CsH/ce0iu9kXauU=)
4: vmahc-gH9xY8uloECYneObmRUwo.roa (hash: 6npTr2kUzSthDDmcUqv6TyudZTdNiJRtH1eH8fs3DyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:63:59:41:5d:48:e1:eb:d8:91:2a:c1:03:38:5a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a40a081fba8fb33efb46259ef93f6878d70150eb
Validity
Not Before: Sep 28 05:01:05 2026 GMT
Not After : Sep 29 05:01:05 2026 GMT
Subject: CN=5efc7348e1defdcfc73b9eadf5ddae51c0ba3a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d1:30:d4:98:5c:30:d3:8d:8c:ea:a0:3a:05:
9b:11:f1:2e:e8:26:19:1d:a0:be:b2:98:69:f2:f9:
ac:1e:16:71:7c:11:ea:79:cb:b6:eb:53:5f:5d:f2:
95:1f:fc:c7:b9:41:74:35:b1:9a:35:61:f1:22:50:
32:42:3c:ae:90:90:2c:80:79:bf:f3:ad:cc:28:b5:
65:69:b7:8a:68:a9:0b:c1:03:fd:f1:01:43:e5:a6:
cd:6b:c3:0b:56:7c:2d:99:b3:0f:37:0d:d2:33:8d:
5c:09:29:77:27:96:0e:58:78:eb:10:c6:a5:c8:f6:
e4:9d:8f:3a:0d:3d:7f:c0:b1:d0:27:95:2a:d7:74:
1e:5f:16:2f:91:a5:8b:b1:90:28:47:1e:10:16:72:
d1:57:9d:b3:b4:f1:56:31:89:61:a3:6f:63:cd:65:
99:7e:06:ac:ca:c4:e7:2c:cd:a1:d4:bd:49:87:1b:
ff:75:a1:9d:c6:dc:13:b6:cc:c0:a2:36:2a:13:54:
4d:ff:73:72:29:3e:b4:ab:8f:70:36:6c:26:ce:e4:
d6:1e:43:24:1d:a8:f5:54:b2:47:fe:8b:d8:79:c4:
70:ed:94:a7:53:56:d0:46:20:c9:8b:d3:b8:85:64:
67:87:a6:5a:00:3c:a0:96:7a:7c:12:b6:85:22:da:
e5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FC:73:48:E1:DE:FD:CF:C7:3B:9E:AD:F5:DD:AE:51:C0:BA:3A:50
X509v3 Authority Key Identifier:
keyid:A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:29:33:44:85:3c:f0:f1:71:cc:1c:7d:1d:1b:50:f5:1a:ca:
72:46:74:04:34:93:62:a0:cd:a6:b8:07:ec:63:69:e9:e6:4b:
de:01:6c:ce:4e:ee:08:3a:74:5c:1f:91:b5:f6:e7:d1:11:79:
ef:33:b0:cb:60:33:8d:51:5a:4b:67:1b:30:53:bd:c3:c2:42:
fd:0d:2f:8f:24:37:93:86:62:f5:0f:2d:a3:c1:9c:b3:80:27:
a0:f3:2a:ca:53:79:73:56:0b:0f:39:cb:33:db:44:8a:40:d6:
e9:50:ea:b7:3a:e5:96:56:e5:39:d2:35:5d:ad:32:1e:2e:4a:
56:3c:bf:63:00:83:36:90:bc:2d:4f:78:05:9a:e5:10:e6:55:
75:e1:4f:43:91:b6:aa:da:b6:74:dd:0d:d9:78:93:90:3d:a8:
bf:20:3c:2b:c8:9c:6d:8d:ae:51:de:00:65:3f:da:52:b3:00:
92:32:e8:b8:88:09:4f:76:53:c9:50:df:68:52:0b:e8:67:c8:
39:42:dc:9d:9c:d4:26:cc:aa:97:8d:9e:28:15:b0:14:77:f9:
b9:3e:0a:2f:f2:b4:9d:36:d9:c1:7f:76:78:ee:70:10:2b:d5:
c3:ae:ef:d4:01:6c:02:f6:e9:84:27:6d:53:d7:25:d0:88:72:
34:b7:29:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 11:20:36 2026 by rpki-client