Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
File: p0NjdfsDInVrVdr_ZOJl73LA2lI.mft (raw, json)
Hash identifier: pwhnTD7MSBXS9Iah8+bbMFbmowG0XcTx9hje8dz4Qcw=
Subject key identifier: 65:1C:F8:A9:E6:75:75:74:37:E1:7D:C0:F5:91:14:88:FE:54:FB:80
Authority key identifier: A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
Certificate issuer: /CN=a7436375fb0322756b55daff64e265ef72c0da52
Certificate serial: 01A0D0B67D462A4848CB3691A1220AC069C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
Manifest number: 1A78
Signing time: Thu 24 Sep 2026 00:00:15 +0000
Manifest this update: Thu 24 Sep 2026 00:00:15 +0000
Manifest next update: Fri 25 Sep 2026 00:00:15 +0000
Files and hashes: 1: A9RfQpBK4Lmi6Tmx0CejQJ3i_6g.roa (hash: /ml6WX65AwyNhLXMSn8MV5ORhWu+aykCZ+qTwwwxX9g=)
2: Uxztf7U023GXGEUScmTqEO_gfGo.roa (hash: gGrsr7XyuRi6jd4l0HrWabkhCAVylFI6zYe23gYxDXw=)
3: p0NjdfsDInVrVdr_ZOJl73LA2lI.crl (hash: 3D0hwHjB2ATT9FcbmrWIPTjKdCimyOOgbj3lnBcqn94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:7d:46:2a:48:48:cb:36:91:a1:22:0a:c0:69:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7436375fb0322756b55daff64e265ef72c0da52
Validity
Not Before: Sep 24 00:00:15 2026 GMT
Not After : Sep 25 00:00:15 2026 GMT
Subject: CN=651cf8a9e675757437e17dc0f5911488fe54fb80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:86:52:b2:88:1b:4f:63:db:c0:0d:48:b0:8c:
dd:ae:73:3a:01:fa:3c:3c:46:48:a6:54:67:54:bd:
44:a3:bb:19:60:0a:14:13:2b:8f:6b:f1:c8:7c:20:
77:d3:2c:41:0a:0f:60:4d:88:d7:67:74:b6:b9:8b:
0d:a6:f7:fa:ab:42:5f:81:9e:c1:c4:16:75:d1:38:
98:f9:89:01:9a:e9:01:86:80:03:61:04:ad:5c:3b:
94:99:46:75:6b:1b:0c:82:9b:26:a6:d5:ef:6c:d1:
c8:dd:8e:4f:54:68:bb:ef:45:bb:48:68:68:50:5a:
81:45:15:29:8f:d0:3c:de:9c:10:b0:33:d1:cf:44:
e0:32:3c:a3:b0:54:3d:a2:54:9b:cb:4a:02:9d:a5:
69:ef:53:53:bf:22:31:da:c0:61:b9:fc:dc:34:0f:
a5:61:6d:eb:72:9d:e8:4c:d2:f1:88:4b:89:96:58:
e2:0f:66:77:6d:d8:c4:f5:49:98:15:22:73:c6:04:
f9:97:be:c4:a1:a4:de:0c:23:a2:12:b5:54:4a:48:
74:b7:95:1f:67:42:40:04:2f:85:41:9b:b8:70:4a:
b3:58:12:b3:84:d2:bf:c2:aa:b0:25:3f:c7:a2:10:
c8:12:97:da:fe:37:ef:28:b6:73:73:cc:fe:91:16:
f2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1C:F8:A9:E6:75:75:74:37:E1:7D:C0:F5:91:14:88:FE:54:FB:80
X509v3 Authority Key Identifier:
keyid:A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:41:45:b3:c7:97:f5:41:c0:fc:dd:de:80:db:d9:f9:91:98:
53:9b:71:ca:3b:4a:56:02:f3:4b:be:1a:36:c2:f2:8e:80:0f:
cc:b8:cf:18:e8:24:28:20:fc:81:da:c3:dc:1e:71:03:c4:6a:
21:45:53:25:7d:07:c1:85:d9:2b:4b:03:e8:cc:3c:97:fd:64:
73:e0:e6:39:85:b4:ce:ab:b5:ec:31:e6:22:78:7c:d4:44:70:
96:b7:4c:92:4a:52:11:f7:03:a8:4a:5b:32:c2:b5:c3:d8:38:
7c:1d:48:78:a9:be:3b:99:c6:0b:df:f4:59:a4:5c:4f:41:8c:
27:67:3c:03:1e:0c:e0:e5:e5:ad:3d:17:fb:bb:98:26:85:a4:
dc:22:f6:19:ae:2d:dd:1f:20:4a:e3:78:97:13:74:fd:de:37:
06:fa:87:bd:7f:32:61:f4:07:f3:b1:9a:0e:0b:2f:69:c6:f6:
65:ea:e4:5f:e5:20:eb:69:73:4d:85:12:cb:ae:a6:9f:d3:42:
6d:37:c3:15:2a:fa:b8:5f:c5:f8:b0:66:c9:fc:e2:00:0b:24:
c7:9a:ef:80:43:4f:ca:95:8e:d6:f6:79:78:53:cb:e9:d2:8a:
75:25:04:f4:ee:19:8d:5d:ea:a7:95:a6:f3:0e:66:7f:ea:cb:
a9:6f:74:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:33:04 2026 by rpki-client