Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
File: p4kEQNrxw6w4dz6FIVES90twYjI.mft (raw, json)
Hash identifier: VmnMmOoFH/g+LwJ6lSfkf2qBVrR+JVrt4zFo0swyRnA=
Subject key identifier: E0:F8:0C:89:CE:A3:55:29:FC:46:71:59:69:AD:8F:22:55:25:FA:01
Authority key identifier: A7:89:04:40:DA:F1:C3:AC:38:77:3E:85:21:51:12:F7:4B:70:62:32
Certificate issuer: /CN=a7890440daf1c3ac38773e85215112f74b706232
Certificate serial: 01A1DCB914E4EF054F9ECB3FB23CC9F7C506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
Manifest number: 02AF
Signing time: Sun 15 Nov 2026 01:01:19 +0000
Manifest this update: Sun 15 Nov 2026 01:01:19 +0000
Manifest next update: Mon 16 Nov 2026 01:01:19 +0000
Files and hashes: 1: iX6vy1XcuPqqbDz8w-InkH2wG7I.roa (hash: GqKpcRA3VOR2P5FWA83zgHTmjRMOW1fhvmM6tUVqgDI=)
2: jcRzJUg7IUVEUlfjHqL1NEbulJY.roa (hash: 043yV8J6dMsTpPpYvQ/xWssybIOO8FTRI8kOXFFcDXA=)
3: p4kEQNrxw6w4dz6FIVES90twYjI.crl (hash: yKdmqmHCupWLCg3+H57KU24eOy9Md1l7875Hpguw7v0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b9:14:e4:ef:05:4f:9e:cb:3f:b2:3c:c9:f7:c5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7890440daf1c3ac38773e85215112f74b706232
Validity
Not Before: Nov 15 01:01:19 2026 GMT
Not After : Nov 16 01:01:19 2026 GMT
Subject: CN=e0f80c89cea35529fc46715969ad8f225525fa01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8c:52:d0:07:8e:f6:a4:f8:88:74:12:39:05:
80:3b:3e:eb:a1:9c:a3:8e:62:76:6c:72:7f:c2:5e:
21:19:6a:a6:08:f4:85:2d:2f:44:f6:aa:c2:93:27:
75:51:ba:5a:a0:83:cf:bf:99:b7:34:42:47:f2:ec:
a5:e5:98:20:88:a7:95:bb:0a:29:dc:df:34:20:33:
ea:f1:ba:c0:71:e6:44:11:1c:82:54:00:62:ab:ac:
07:80:fb:21:a4:55:9e:c1:16:b7:15:94:cf:ed:f8:
eb:9b:cd:e0:40:ab:3e:f8:60:ec:12:aa:18:a4:75:
91:86:8e:d8:fb:03:fb:3d:9d:db:16:c0:0d:06:bb:
c5:bd:90:57:ab:19:a2:55:ba:91:f2:1f:9a:98:6a:
65:b0:9e:02:e6:2e:04:17:9f:82:59:2f:c4:e9:23:
39:6b:3d:47:e5:6b:8f:f6:27:5a:35:61:c6:42:f5:
cf:42:0a:a2:0e:1c:05:0d:bf:20:fb:0b:50:32:52:
37:9a:5b:7b:b5:15:a7:c0:7a:77:e0:e1:3b:71:a6:
1c:a8:b6:5a:c6:4c:2a:48:76:b1:91:4f:f0:15:f8:
11:94:8b:51:b7:f5:a4:3e:39:0a:cd:ea:fc:95:0c:
6a:e2:a2:94:75:88:49:e2:b8:05:9a:30:2b:a1:24:
1d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F8:0C:89:CE:A3:55:29:FC:46:71:59:69:AD:8F:22:55:25:FA:01
X509v3 Authority Key Identifier:
keyid:A7:89:04:40:DA:F1:C3:AC:38:77:3E:85:21:51:12:F7:4B:70:62:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:d2:fa:b1:59:52:f1:85:a3:3a:93:bf:45:7b:f3:0d:28:a7:
63:86:4e:1d:0d:60:07:7a:2f:37:c9:90:45:2f:7e:62:8b:5c:
c8:28:6d:7d:f5:4b:0c:05:5e:e7:33:35:0c:5e:cf:14:8e:e4:
09:50:f9:56:ca:88:38:34:16:6a:eb:20:7d:c2:68:04:85:02:
6d:b0:67:12:84:45:a9:09:97:da:fb:46:32:30:66:dc:ec:f4:
41:21:0f:c4:0e:cb:ca:77:8d:83:bc:1c:d6:f3:28:7b:cd:6e:
e1:70:e0:e4:b4:9a:a7:f1:1e:8f:51:b8:e5:95:56:51:56:55:
24:29:22:17:e7:10:69:76:d2:6d:f5:7c:5e:cd:60:8a:4e:9b:
d5:eb:9f:fb:a2:29:95:22:1b:ea:da:4f:ff:36:e3:0d:d2:a9:
16:9f:d7:1e:79:1b:7a:ed:36:67:e1:94:e0:46:d9:3d:52:4a:
e2:b2:aa:95:44:b4:b7:1c:ac:7d:db:26:86:77:33:2c:63:0c:
6c:57:53:fd:2d:62:2a:2f:b0:3c:d8:01:ef:a7:e8:eb:c4:24:
cf:cf:7d:36:16:96:0d:34:7b:51:6b:69:1c:43:07:92:59:ba:
7d:77:47:0c:9d:0e:9a:30:d5:a9:4d:bf:be:08:a2:ed:98:93:
ca:c9:d5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:47:05 2026 by rpki-client