Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
File: PvMl70y6pmzHH_zGiAh3524Umv0.mft (raw, json)
Hash identifier: V6bigTr7zGOYkOHJQiHg9HRNFSz8CkAbAEwKx2EEXVY=
Subject key identifier: 6F:55:96:87:C1:59:11:6F:9E:B5:9E:6C:46:73:18:4F:50:B9:1D:71
Authority key identifier: 3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
Certificate issuer: /CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Certificate serial: 01A107DCACC78266449F02261D9EC86F8CED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
Manifest number: 1A8D
Signing time: Sun 04 Oct 2026 17:01:04 +0000
Manifest this update: Sun 04 Oct 2026 17:01:04 +0000
Manifest next update: Mon 05 Oct 2026 17:01:04 +0000
Files and hashes: 1: 1iRbLYf4C0y3oJ3-4xIANjl72wA.roa (hash: UG6S1kmkOsd5y0L7phKRaWuOG6F5o7BKD1/4AyWvM5A=)
2: JjyvVDVovIRDvh2WAPN4qcYKbB8.roa (hash: YWVGU0nc40f+duH6QOCC8OFDRM3GdOHIxFuAUo2EzwY=)
3: PvMl70y6pmzHH_zGiAh3524Umv0.crl (hash: F7NDxlUZPREpA9UsT0OItc2107ApXPy0bWMGSv9XDSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 17:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:dc:ac:c7:82:66:44:9f:02:26:1d:9e:c8:6f:8c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Validity
Not Before: Oct 4 17:01:04 2026 GMT
Not After : Oct 5 17:01:04 2026 GMT
Subject: CN=6f559687c159116f9eb59e6c4673184f50b91d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fe:dc:ad:2e:12:64:92:e7:87:28:46:07:6c:
e2:e7:8e:5c:e7:48:4b:7d:f8:2b:d3:6f:35:db:a7:
8f:4e:f7:b8:c0:07:de:76:87:92:5d:33:7b:0a:82:
7e:a7:24:ad:50:df:04:6f:4a:67:0b:98:63:a0:27:
0d:de:7f:51:c0:ec:56:af:58:5a:01:5e:d6:73:fb:
fb:2c:dd:a3:ae:95:58:52:c0:19:b8:1a:a7:fd:ac:
9c:63:63:f1:ca:7d:41:05:cb:b4:e0:28:b0:ea:e1:
e7:83:7a:0a:6f:1a:09:d0:fd:fc:51:b1:79:79:03:
2b:2d:bc:2b:db:36:33:e8:dd:1a:5b:1e:04:54:22:
00:19:89:6e:6a:b0:18:39:38:eb:f3:e4:d8:36:a1:
c4:11:cf:a8:27:8a:af:8f:ae:d8:66:5e:88:54:8a:
13:4f:e3:12:e8:1a:a4:0f:07:59:bc:3d:b4:cb:55:
4f:0e:56:38:ba:fe:db:ca:87:7f:1e:06:7e:80:ed:
ab:75:2f:5a:f9:fe:d3:a1:ac:d3:59:e8:2e:44:1f:
38:48:cf:0b:c5:e5:a1:5d:ee:50:b1:2f:70:9c:d6:
2a:b8:af:9a:bf:5b:a6:a7:7f:6f:79:7d:d1:04:67:
61:11:55:67:85:30:4b:5a:d1:68:8d:3e:7f:00:6f:
ca:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:55:96:87:C1:59:11:6F:9E:B5:9E:6C:46:73:18:4F:50:B9:1D:71
X509v3 Authority Key Identifier:
keyid:3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:bb:df:4f:f6:e0:b4:14:f4:0b:81:59:11:d8:8d:c8:3d:d4:
54:bc:76:18:42:c0:49:8e:3b:55:a3:4a:d7:cc:ee:db:cd:66:
54:ef:a1:b2:aa:65:e9:a5:f5:e9:87:33:f4:ed:4d:ff:37:e2:
45:9f:ac:e2:84:89:c1:2e:b9:b9:5b:79:fd:fe:9e:0e:e4:0f:
0f:ce:ea:a5:7b:20:8f:be:34:a6:76:70:78:7a:40:3a:e5:f4:
d5:e2:a3:73:78:b5:d7:75:22:35:bf:90:5c:e9:93:29:1f:b4:
db:db:e6:92:ab:d6:dc:2d:58:f9:ca:fa:3f:c8:56:ee:9a:52:
48:30:85:ab:8c:0b:77:5d:d3:ed:a0:8a:f8:5b:77:71:96:c0:
e7:4c:8d:cc:18:eb:13:5d:ba:6d:f4:6b:31:f0:18:34:9b:25:
65:15:26:89:5b:af:77:f1:87:e2:58:bb:63:b3:4d:25:2b:fd:
62:2b:34:a4:9e:a0:15:0b:bd:b9:18:4c:89:b0:59:0f:cb:2e:
39:99:94:03:e0:16:0e:3f:09:b4:2d:3a:b9:9e:2b:be:fe:c7:
25:f0:64:df:ee:07:01:99:66:7e:d4:8b:b5:60:04:e3:41:0a:
02:3e:00:25:45:40:82:7a:dc:c1:a7:02:4f:1a:10:22:80:2b:
5c:22:a9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 08:36:47 2026 by rpki-client