Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.mft
File: pNFmKbDakg__Ob-1rSmmjYR4BcY.mft (raw, json)
Hash identifier: XFY7aGNrz2eK/1ACkEJIn7eEka2Nv30EqwCUxxoOaZ8=
Subject key identifier: AA:0A:EC:7C:13:9A:C0:6F:38:D7:0B:8A:EE:22:00:E1:FE:18:08:F1
Authority key identifier: A4:D1:66:29:B0:DA:92:0F:FF:39:BF:B5:AD:29:A6:8D:84:78:05:C6
Certificate issuer: /CN=a4d16629b0da920fff39bfb5ad29a68d847805c6
Certificate serial: 01A0E7E3C8D570CFBA6F11EB7E06C4DBE419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNFmKbDakg__Ob-1rSmmjYR4BcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.mft
Manifest number: F2
Signing time: Mon 28 Sep 2026 12:00:59 +0000
Manifest this update: Mon 28 Sep 2026 12:00:59 +0000
Manifest next update: Tue 29 Sep 2026 12:00:59 +0000
Files and hashes: 1: ZbVknpayZkYaSssOD6rrhRn8Uew.asa (hash: uH8YNsT4olZ4QCB+2CENMu1+IA4IAyWwSnwOCS0RVB8=)
2: pNFmKbDakg__Ob-1rSmmjYR4BcY.crl (hash: xSkIqlGfaD3Z6SxLkrY4JTBiRS2Sp1vaVgTWwpC3Zdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNFmKbDakg__Ob-1rSmmjYR4BcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 08:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:e3:c8:d5:70:cf:ba:6f:11:eb:7e:06:c4:db:e4:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d16629b0da920fff39bfb5ad29a68d847805c6
Validity
Not Before: Sep 28 12:00:59 2026 GMT
Not After : Sep 29 12:00:59 2026 GMT
Subject: CN=aa0aec7c139ac06f38d70b8aee2200e1fe1808f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:15:c0:96:08:eb:bd:df:d6:f9:55:dd:d6:42:
ac:cd:48:73:ce:82:c6:68:b5:ac:60:ca:38:1c:24:
92:0e:dc:b8:68:30:7c:67:7c:0b:21:00:91:ef:93:
51:90:97:a0:fb:26:b8:6b:f7:ea:ae:71:4c:f1:2b:
a2:66:1e:da:44:19:8b:e6:43:2a:53:ad:a5:77:00:
5b:b4:c2:b6:05:39:c7:34:6a:e2:5c:12:1c:b0:56:
8d:4f:09:c9:ba:c2:bd:c5:ed:a3:d4:af:82:13:94:
b4:a1:66:f2:e3:ce:8d:19:62:72:31:79:25:84:db:
f3:23:4e:a0:3f:dc:fa:67:c8:46:ea:7b:01:c9:e3:
48:70:6d:92:49:03:46:92:2c:16:16:6b:65:3e:4a:
61:64:87:3b:49:70:b9:36:66:67:1c:c7:3f:b2:fe:
f0:64:a5:e0:d2:da:18:f4:17:96:c9:0c:00:fb:31:
91:6a:37:d4:b3:48:b6:38:72:0f:c7:7d:cc:de:5b:
90:18:2d:f4:81:cf:32:a9:38:ad:2a:1f:a7:e3:8d:
85:5c:57:43:1a:2a:bd:18:2e:88:53:51:99:81:d1:
9c:73:ae:da:8f:57:e0:88:50:f7:ba:f0:01:81:b4:
98:bb:5f:63:0f:98:b6:1a:13:8c:39:86:57:77:3f:
2f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0A:EC:7C:13:9A:C0:6F:38:D7:0B:8A:EE:22:00:E1:FE:18:08:F1
X509v3 Authority Key Identifier:
keyid:A4:D1:66:29:B0:DA:92:0F:FF:39:BF:B5:AD:29:A6:8D:84:78:05:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNFmKbDakg__Ob-1rSmmjYR4BcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:cd:2d:55:0e:19:61:45:c5:7f:62:83:03:45:1d:58:45:77:
27:b4:ab:a9:e9:37:b1:8a:de:3f:f0:55:89:2f:1c:8d:74:68:
a1:3c:2a:48:e9:35:ce:06:1d:fb:db:66:58:91:f4:f4:6c:f0:
26:77:1b:7b:ec:d3:5e:ea:25:1d:cf:74:5c:4a:5b:7d:0b:29:
f1:d9:8a:69:eb:d5:90:3a:24:3f:47:d5:32:82:de:b7:f4:f0:
dc:88:b0:d3:ae:24:5f:86:2b:f5:a4:ce:3b:ac:5a:94:43:03:
0f:83:e9:8a:c1:ad:5a:81:3d:19:7d:ed:dd:fc:3a:22:f4:26:
22:25:40:ac:91:30:78:5c:61:15:e0:e4:c4:72:bf:a1:eb:eb:
09:68:f3:4f:7b:8d:cb:d2:e3:a7:69:fd:b5:36:3c:2f:a8:a5:
c1:2f:39:05:43:8b:93:d2:a1:0b:30:07:eb:72:63:fb:6c:ea:
c9:21:d2:89:9b:b9:69:61:20:c9:9e:00:d1:e5:68:c5:76:47:
e6:ec:54:d0:12:99:b3:3f:70:93:c4:e7:15:ef:04:28:13:cd:
aa:59:9c:77:8e:46:c9:f4:ff:2f:2d:94:be:54:b8:21:87:3a:
9f:64:19:df:8d:af:49:cb:f2:da:d3:90:4a:9e:23:8d:d9:a9:
87:2a:b9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:16:05 2026 by rpki-client