Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
File: pyREUNHHhV34SPNDGOHwlIkA2NU.mft (raw, json)
Hash identifier: WPsF02sktjsv9467uK6gLpaeYvCqdruAmdjojGh4R3I=
Subject key identifier: 9A:F9:25:97:48:A9:AD:71:93:96:F5:BC:DA:B2:3F:B3:CC:D5:D1:B7
Authority key identifier: A7:24:44:50:D1:C7:85:5D:F8:48:F3:43:18:E1:F0:94:89:00:D8:D5
Certificate issuer: /CN=a7244450d1c7855df848f34318e1f0948900d8d5
Certificate serial: 01A0CB59DBB5CCD88D1C9B0C95661C496FB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
Manifest number: 088A
Signing time: Tue 22 Sep 2026 23:00:58 +0000
Manifest this update: Tue 22 Sep 2026 23:00:58 +0000
Manifest next update: Wed 23 Sep 2026 23:00:58 +0000
Files and hashes: 1: I9uXijOFB1Buptjj8cSJTpw6dR8.asa (hash: 17y24aXIYzYapxA2/6x0iuPWu56wHFQvEJudXooiTwY=)
2: nHQieqZyPaOUuSrsXR7xvDoHvxg.roa (hash: zeyi1Qv46B7/sJB4zwdu9/Bq3e1lVsP+coEZ1xodVu0=)
3: pyREUNHHhV34SPNDGOHwlIkA2NU.crl (hash: fqrgcS7qLIhsKQ37PFpSZuhbXxBB3fHzmrFpFvKmdkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:db:b5:cc:d8:8d:1c:9b:0c:95:66:1c:49:6f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7244450d1c7855df848f34318e1f0948900d8d5
Validity
Not Before: Sep 22 23:00:58 2026 GMT
Not After : Sep 23 23:00:58 2026 GMT
Subject: CN=9af9259748a9ad719396f5bcdab23fb3ccd5d1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:11:86:cd:b0:60:9c:fd:80:d5:ff:26:10:9e:
87:a2:bf:5e:0b:fb:e6:98:c5:1a:b2:7d:6b:8b:35:
bd:eb:b7:7b:91:e4:2b:bf:c9:57:6d:f1:62:af:89:
ef:4f:09:0e:cb:98:77:55:83:8d:7e:5a:7f:22:d1:
c2:f3:50:b8:e8:c7:54:26:23:f8:43:98:4d:c7:7e:
1a:cb:47:14:cb:44:32:19:12:a2:b4:56:2d:bf:f2:
4c:5c:8f:ef:54:62:29:b4:d4:39:6f:23:c2:08:7d:
32:84:9b:45:6b:d1:e2:de:91:4a:6c:38:cf:d3:cb:
45:c4:a5:e2:fa:a1:f9:8a:94:8d:2d:87:0b:4d:ea:
7f:51:52:44:0b:3e:6f:21:c6:74:e9:b6:94:02:f2:
8f:69:3a:20:4c:ad:7c:1c:c7:af:f4:d9:ed:cf:4b:
6a:ce:26:f0:36:f8:46:4d:83:60:73:f4:02:ad:81:
77:d1:1f:64:ae:2e:67:db:9e:27:aa:a2:43:cd:58:
45:e2:ea:5f:61:21:3d:6a:9a:ae:46:9a:33:ff:4a:
67:1d:8c:33:de:53:c5:56:85:63:0d:c6:8b:2d:7b:
c9:7f:69:00:02:ff:9c:ff:da:1f:4d:c3:ef:f0:e2:
7f:23:31:eb:10:c4:e6:52:23:7f:fc:cc:68:21:b3:
07:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F9:25:97:48:A9:AD:71:93:96:F5:BC:DA:B2:3F:B3:CC:D5:D1:B7
X509v3 Authority Key Identifier:
keyid:A7:24:44:50:D1:C7:85:5D:F8:48:F3:43:18:E1:F0:94:89:00:D8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d9:cc:64:fb:38:4c:3d:89:6d:a3:aa:f7:56:22:5f:46:9b:
42:8a:59:b7:92:63:7d:ea:35:58:bd:59:3e:fc:20:f6:ec:28:
e4:df:ac:08:9b:1d:58:65:3b:66:b0:98:8b:3a:6d:55:c1:d6:
0b:3d:f2:69:41:3c:8b:04:3c:d4:f9:1e:ce:55:e7:71:53:4c:
96:46:57:c2:71:df:cb:27:8c:9c:2e:53:a4:29:24:ad:bb:49:
3a:2e:9e:4b:f9:0a:8a:80:36:0d:9c:9c:88:a7:bb:f9:5b:bb:
7a:e2:4b:05:65:8f:f7:e9:42:e1:15:cd:5c:21:b3:e6:87:e1:
d8:40:97:9c:8d:73:5e:7f:f7:05:1d:37:45:96:64:f3:0c:4c:
75:cf:ff:e3:f3:d5:34:28:ec:97:cb:7f:04:28:2c:0c:86:a6:
21:7b:3c:c2:79:3d:0e:1d:ef:d1:da:4a:f7:ab:bc:9e:d0:5e:
53:6e:95:d8:17:36:bb:d1:e0:32:d7:0a:d4:52:c5:19:0e:d8:
dd:82:1b:49:ae:e9:e1:24:f5:46:bf:86:c2:82:33:83:11:af:
f6:2f:1f:4f:fb:1b:bd:14:65:62:39:bc:98:fd:ff:2d:13:28:
dd:b0:ff:a9:5a:82:b0:5c:f5:e4:dd:55:20:10:d8:ff:89:08:
cd:3e:46:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:51:55 2026 by rpki-client