Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
File: pMtQ54o6MeM3XPKquGXoRf8umcE.mft (raw, json)
Hash identifier: z+VCDP6XLPXDj6MmK9FU2Uk54uwfFj4HzVRCGhzAFEw=
Subject key identifier: 9A:6E:8B:4D:15:9D:5A:05:E7:15:D1:05:91:BC:4D:3D:37:20:52:06
Authority key identifier: A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1
Certificate issuer: /CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
Certificate serial: 01A0CFA4A4B2B4ABFB87ABB8F9D06620CB25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
Manifest number: 1A7C
Signing time: Wed 23 Sep 2026 19:01:08 +0000
Manifest this update: Wed 23 Sep 2026 19:01:08 +0000
Manifest next update: Thu 24 Sep 2026 19:01:08 +0000
Files and hashes: 1: KeBHh_EXoo6vxPcJVgCWPFy_Qck.roa (hash: Lb6JJsVM1wJrwKLdOhRrqdN+kt/BOWmpYchxNlLSv+A=)
2: RgbTxSuQRNXFVhZjHsG1yRfbDcY.roa (hash: QEQTGxs8uKOEp8JVm8z26NyHbZ3CIT8Ts2wlZUqrfqw=)
3: fc-z64p9INgXqSlpt0wgmjnDjcM.roa (hash: iAvsJsJGvYYjjk6ye/5/KN/cmvlNuk2vjqxHBnhTILY=)
4: pMtQ54o6MeM3XPKquGXoRf8umcE.crl (hash: UDigJMK0F0ZwzSN5QOGQUAlv4RdFp33u3YGZ+Wp89Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:a4:b2:b4:ab:fb:87:ab:b8:f9:d0:66:20:cb:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
Validity
Not Before: Sep 23 19:01:08 2026 GMT
Not After : Sep 24 19:01:08 2026 GMT
Subject: CN=9a6e8b4d159d5a05e715d10591bc4d3d37205206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:70:4b:b8:1f:e4:1b:f2:1e:7a:b2:80:7c:44:
ab:a3:f3:27:06:51:98:47:96:39:04:49:72:44:d0:
a5:a0:a5:aa:8d:b7:cc:c2:cd:52:55:37:18:9b:a9:
3c:11:8b:f4:f4:8a:57:ca:97:40:7c:f2:c7:7a:1b:
b7:32:68:78:4f:32:5d:b1:90:e5:03:18:a9:21:47:
db:3b:54:46:4a:0c:b5:b9:52:12:20:65:82:99:db:
9a:3e:32:0a:dc:e0:8c:d7:14:88:eb:24:d4:30:57:
18:d8:7b:16:13:fa:35:51:46:95:0c:96:73:37:27:
db:99:f5:6d:15:b3:72:cc:24:60:4d:7a:0e:c9:f3:
4b:e6:ab:27:25:fe:62:93:22:5a:fe:8c:bc:94:99:
53:ab:cb:f8:b6:d3:28:96:22:b3:a5:a7:ef:f6:49:
c1:a3:1d:86:b3:2f:3b:0f:9e:17:b8:4e:53:f5:56:
e7:13:b8:81:1e:64:a2:07:9a:d8:b6:05:0c:43:9b:
bb:ec:aa:84:b8:0c:4c:e6:9c:93:cc:6b:d9:21:f2:
0a:a8:80:7e:83:f3:b8:c1:d5:e9:6b:24:9a:01:2b:
d9:d4:db:e4:26:88:62:11:38:32:7f:96:81:8b:05:
29:30:9d:54:12:b9:9b:fd:6e:d3:b5:fb:12:72:ed:
49:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6E:8B:4D:15:9D:5A:05:E7:15:D1:05:91:BC:4D:3D:37:20:52:06
X509v3 Authority Key Identifier:
keyid:A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e5:82:ee:9f:e7:e3:0c:26:01:8b:aa:0e:d6:95:3a:58:28:
ce:9c:7e:95:a5:c6:00:c4:6b:12:a8:ec:cf:14:22:28:e7:ec:
32:dc:a0:d7:1b:90:91:d9:04:2d:3e:b7:f5:08:35:25:8e:c5:
78:99:78:88:a3:8d:b6:2e:41:2f:f9:83:91:fd:32:24:85:c9:
41:55:5d:9c:bc:f7:cb:98:d1:e4:cd:e4:da:25:17:3d:6d:e8:
06:08:81:c2:a7:1f:25:6a:d0:63:67:36:bf:55:b8:db:49:ce:
55:50:f4:ae:c5:d7:87:8a:35:82:6b:d6:60:21:4a:7b:e3:9f:
69:0c:aa:3e:a4:9b:9a:85:69:7f:34:69:de:52:ab:cf:f4:6d:
6f:23:56:84:e8:fc:5d:fe:a7:f8:24:47:ae:91:9f:97:41:7e:
58:b8:ad:d2:72:4c:e7:d9:fa:3a:e4:8e:bf:b7:a3:c8:48:73:
33:2d:2d:65:b0:4c:8a:8d:d4:27:41:f0:ee:69:2f:77:21:49:
16:97:a1:da:6e:14:0f:92:a8:93:46:dc:c3:75:c2:e6:68:e8:
6c:f6:d3:24:89:fe:fd:89:8a:24:d4:c8:2d:b1:02:5e:28:0a:
47:98:a4:8e:ef:ba:f7:e4:af:72:a0:28:da:fc:e2:62:14:a8:
36:cd:a7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:17:01 2026 by rpki-client