Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
File: pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft (raw, json)
Hash identifier: OcSZ6VKX/MNk1VpvWvU84/VE3HCGCjeW3W1CmmmdQnE=
Subject key identifier: BF:23:F2:EF:35:F5:B6:50:CB:73:BC:BE:68:95:20:6F:2A:7B:D1:01
Authority key identifier: A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9
Certificate issuer: /CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9
Certificate serial: 01A0E88885AA2031F1465590AB6EEF0C7B8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
Manifest number: 1A09
Signing time: Mon 28 Sep 2026 15:00:56 +0000
Manifest this update: Mon 28 Sep 2026 15:00:56 +0000
Manifest next update: Tue 29 Sep 2026 15:00:56 +0000
Files and hashes: 1: RI1PUJj0Q_MD3P8uweukuXuYhlU.roa (hash: Udb4Yel6QV6x+EojTVD0SPU2vkANJh/DkSOzlaEFuOQ=)
2: pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl (hash: r4aqOzBJtYVCbdvLkQJUMFP8E/0wg8Ng/XWK4tZtDtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:88:85:aa:20:31:f1:46:55:90:ab:6e:ef:0c:7b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9
Validity
Not Before: Sep 28 15:00:56 2026 GMT
Not After : Sep 29 15:00:56 2026 GMT
Subject: CN=bf23f2ef35f5b650cb73bcbe6895206f2a7bd101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9c:97:b9:56:28:1a:fb:cd:9f:dc:e5:99:b0:
60:3e:05:ee:73:2b:01:a6:1c:a5:d9:03:47:94:12:
39:69:3d:ec:a8:2d:61:e9:d0:9f:b1:d5:26:82:9c:
35:50:65:45:85:25:31:19:b0:67:bb:6c:34:44:0f:
9b:71:54:c2:00:49:c1:69:74:78:53:b9:91:d5:54:
00:6e:fa:3b:3b:6e:af:3c:ac:de:03:0f:64:0a:7f:
6c:18:f9:16:50:19:bd:0d:bd:fa:bf:f2:ca:e0:cf:
d5:ae:b1:b6:16:78:a2:06:c9:e3:bc:6a:81:f4:77:
15:b1:99:7a:70:6c:af:93:64:6e:cf:34:ca:07:4a:
ad:fe:30:d3:af:81:20:53:ae:03:d8:4c:d1:7d:e4:
2b:82:6c:9f:5a:bf:e1:09:c0:ec:bd:30:df:66:64:
24:d4:90:65:47:12:39:98:9c:b2:8b:7a:4b:74:18:
a8:04:05:7e:15:eb:4e:8f:2f:34:1d:e2:90:30:d6:
fd:67:3f:24:29:bc:f9:95:4e:ea:55:8a:b2:d9:1b:
96:14:99:7a:b2:b0:38:57:41:d0:0f:1a:96:3d:08:
09:16:80:46:c0:10:ae:4f:77:00:3c:c6:da:dc:17:
80:5c:d5:75:e4:86:e1:8e:e1:fe:2c:72:11:3b:f5:
ef:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:23:F2:EF:35:F5:B6:50:CB:73:BC:BE:68:95:20:6F:2A:7B:D1:01
X509v3 Authority Key Identifier:
keyid:A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:7d:83:4e:16:3c:63:e9:88:97:ef:f9:02:c8:9a:77:1b:5c:
7a:fa:46:33:5d:a7:9f:e3:22:63:66:75:d5:5c:d8:e3:fd:9d:
53:bd:14:8c:e8:e6:19:92:61:ea:79:13:6e:32:22:e8:8f:24:
5d:86:bc:f8:20:ce:4c:12:43:c6:35:a4:30:cb:27:bb:f6:4c:
4f:c0:95:87:8f:d3:de:d5:4e:f7:23:a8:f2:be:f0:03:f6:14:
02:78:d6:26:ed:2f:97:bc:b6:ab:a9:d9:6e:86:99:59:32:3a:
5a:aa:7b:2e:e7:58:31:25:9a:7d:ba:fe:c3:ff:3c:d4:02:fc:
06:b3:97:99:dc:e4:7a:4c:86:82:6a:b3:fa:df:de:16:67:59:
dc:e0:6c:8b:70:c6:a4:3b:81:de:f6:04:81:a3:09:80:ea:53:
94:2d:98:10:75:ab:89:37:ee:e6:a3:9a:32:e1:eb:c1:d5:bb:
a6:09:39:b8:e5:0a:2d:25:90:34:13:52:38:5a:70:60:1d:f1:
77:3b:6e:fd:b8:75:e7:a5:8b:83:d8:45:a5:9e:75:2a:21:34:
bb:d6:f1:0d:70:bd:44:36:9b:d0:bd:10:96:3c:6c:4b:e8:8a:
96:ec:29:b6:ba:98:40:0b:77:5e:83:71:83:56:0a:ff:bd:b7:
12:3e:45:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDoiIWqIDHxRlWQq27vDHuOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YWJhZjFkMzdmMGExNDFhODE0Y2EwMmZjMDFlM2Q5NjIx
YzczZDkwHhcNMjYwOTI4MTUwMDU2WhcNMjYwOTI5MTUwMDU2WjAzMTEwLwYDVQQD
EyhiZjIzZjJlZjM1ZjViNjUwY2I3M2JjYmU2ODk1MjA2ZjJhN2JkMTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5yXuVYoGvvNn9zlmbBgPgXucysB
phyl2QNHlBI5aT3sqC1h6dCfsdUmgpw1UGVFhSUxGbBnu2w0RA+bcVTCAEnBaXR4
U7mR1VQAbvo7O26vPKzeAw9kCn9sGPkWUBm9Db36v/LK4M/VrrG2FniiBsnjvGqB
9HcVsZl6cGyvk2RuzzTKB0qt/jDTr4EgU64D2EzRfeQrgmyfWr/hCcDsvTDfZmQk
1JBlRxI5mJyyi3pLdBioBAV+FetOjy80HeKQMNb9Zz8kKbz5lU7qVYqy2RuWFJl6
srA4V0HQDxqWPQgJFoBGwBCuT3cAPMba3BeAXNV15IbhjuH+LHIRO/XvMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8j8u819bZQy3O8vmiVIG8qe9EBMB8GA1UdIwQY
MBaAFKSrrx038KFBqBTKAvwB49liHHPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEt1dkhUZndvVUdvRk1vQ19BSGoyV0ljYzlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8xNTViZGMtYjU3NC00N2Y5LWIzNDgt
OTNjZjY0Zjg4OTkwLzEvcEt1dkhUZndvVUdvRk1vQ19BSGoyV0ljYzlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8xNTViZGMtYjU3NC00N2Y5LWIzNDgtOTNjZjY0Zjg4OTkw
LzEvcEt1dkhUZndvVUdvRk1vQ19BSGoyV0ljYzlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbn2DThY8
Y+mIl+/5AsiadxtcevpGM12nn+MiY2Z11VzY4/2dU70UjOjmGZJh6nkTbjIi6I8k
XYa8+CDOTBJDxjWkMMsnu/ZMT8CVh4/T3tVO9yOo8r7wA/YUAnjWJu0vl7y2q6nZ
boaZWTI6Wqp7LudYMSWafbr+w/881AL8BrOXmdzkekyGgmqz+t/eFmdZ3OBsi3DG
pDuB3vYEgaMJgOpTlC2YEHWriTfu5qOaMuHrwdW7pgk5uOUKLSWQNBNSOFpwYB3x
dztu/bh156WLg9hFpZ51KiE0u9bxDXC9RDab0L0QljxsS+iKluwptrqYQAt3XoNx
g1YK/723Ej5FAw==
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:27:58 2026 by rpki-client