Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft
File: pVB1uOQuRRTvSdP-ovGHJk50-y4.mft (raw, json)
Hash identifier: 1JAXCUIDG+SrBkJM77yBV8FyJ81BOsgyL6jC3+ikJqk=
Subject key identifier: 17:13:7A:DF:C2:E7:E5:49:5F:0B:7F:BB:17:16:B7:C6:ED:A9:70:F4
Authority key identifier: A5:50:75:B8:E4:2E:45:14:EF:49:D3:FE:A2:F1:87:26:4E:74:FB:2E
Certificate issuer: /CN=a55075b8e42e4514ef49d3fea2f187264e74fb2e
Certificate serial: 01A0DFBD059BAD882DD33CC4E1824D39D2F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pVB1uOQuRRTvSdP-ovGHJk50-y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft
Manifest number: 070F
Signing time: Sat 26 Sep 2026 22:01:41 +0000
Manifest this update: Sat 26 Sep 2026 22:01:41 +0000
Manifest next update: Sun 27 Sep 2026 22:01:41 +0000
Files and hashes: 1: XQv7wEz4cC45Y-u3Csa_kFWZP8A.roa (hash: Rg6Z2DsQeZ19hmYMspcAw/07/1QRuxsRYhNWi/fAiwc=)
2: pVB1uOQuRRTvSdP-ovGHJk50-y4.crl (hash: Spbc30L/b4ec9DRnZ0H3Zc2Ez574BP06/aOnsAm8dHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pVB1uOQuRRTvSdP-ovGHJk50-y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 22:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:bd:05:9b:ad:88:2d:d3:3c:c4:e1:82:4d:39:d2:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a55075b8e42e4514ef49d3fea2f187264e74fb2e
Validity
Not Before: Sep 26 22:01:41 2026 GMT
Not After : Sep 27 22:01:41 2026 GMT
Subject: CN=17137adfc2e7e5495f0b7fbb1716b7c6eda970f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d3:00:89:62:12:61:88:ad:08:aa:85:9a:fe:
8c:18:d2:7c:16:57:39:f1:38:79:42:a7:22:af:b0:
28:55:86:99:a9:fa:f8:71:75:e5:57:fc:ce:9c:e0:
da:9b:f0:bb:be:e4:36:f9:26:f4:9a:31:01:eb:f4:
51:38:f6:10:76:53:2e:73:17:e4:2a:57:72:b5:1d:
8b:a7:b6:6a:58:15:7c:4b:e7:54:74:b5:ff:c3:fb:
eb:01:f5:8c:93:05:0e:23:63:49:70:8f:f2:9c:25:
b9:77:bc:6a:7d:01:c8:07:a3:fd:07:ec:56:9e:d5:
1b:62:bc:ea:1f:c2:79:a9:15:21:3b:40:bb:5b:79:
6e:67:4c:50:03:03:08:9a:d5:c8:45:ce:8b:79:54:
17:fd:a0:42:68:6f:f6:cc:f2:9f:ba:b5:ec:98:c0:
88:40:1d:88:b3:2f:6d:8c:c3:56:a0:68:ba:e7:36:
47:50:bf:96:db:ea:c3:01:15:ca:d5:69:1f:de:c2:
3a:1c:fc:43:9f:c9:f5:eb:33:93:9a:8b:f9:79:cd:
02:07:a3:7a:5d:3b:ba:a0:b6:7f:87:f7:82:6d:c3:
a7:8e:55:53:21:c6:8a:6c:28:97:ee:cc:2b:0b:89:
e4:86:74:e9:33:e6:83:e3:a5:b3:58:6d:9d:5b:38:
64:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:13:7A:DF:C2:E7:E5:49:5F:0B:7F:BB:17:16:B7:C6:ED:A9:70:F4
X509v3 Authority Key Identifier:
keyid:A5:50:75:B8:E4:2E:45:14:EF:49:D3:FE:A2:F1:87:26:4E:74:FB:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVB1uOQuRRTvSdP-ovGHJk50-y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:1e:40:f4:06:7d:c5:2c:d9:8a:25:7b:ef:d8:62:1a:ea:86:
65:81:0d:fd:89:f0:59:cb:5d:b9:39:95:60:2d:61:06:ac:b0:
4f:56:59:01:fb:6e:04:56:47:be:e5:d9:2a:64:b9:76:34:bb:
0c:cc:23:f7:73:c2:c5:ea:11:d1:5c:b0:f7:ea:4c:ec:2b:92:
45:c3:a6:e1:9b:01:1c:2d:e9:5e:9c:42:43:14:ef:ad:d7:92:
b4:d4:45:89:de:0e:86:1e:c6:95:a8:5b:06:ac:0e:e1:d1:98:
e0:16:6e:52:95:6b:bc:6f:e2:a3:13:51:92:c4:a0:de:5c:d2:
06:82:3d:8e:45:e4:5d:98:d6:a2:42:03:6e:cd:4c:f2:83:ea:
2d:ac:e8:41:1d:ff:0e:e8:39:4a:02:87:40:e0:99:01:59:18:
58:e4:5c:15:7f:5e:52:e7:2d:dd:ec:d0:19:c8:14:d6:34:cf:
a6:4f:97:56:62:f2:a2:8a:70:eb:80:93:76:e4:10:1b:81:dd:
56:5e:65:93:f9:de:51:1f:a5:78:fd:27:e0:83:47:27:10:5b:
d8:82:d9:b7:e2:11:6d:c4:78:64:e2:9b:1b:ec:54:e4:58:9b:
2f:48:22:e3:f4:5d:15:b9:2f:68:50:b9:c3:2d:24:69:b6:3d:
8b:58:7a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:32:38 2026 by rpki-client