Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
File: 1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft (raw, json)
Hash identifier: ThpfqeXmGl1MkJlnGJrBGgXsM2pXn8q4+qFauijbfCA=
Subject key identifier: 8F:95:EA:5E:68:14:31:D9:6C:07:C8:7F:05:93:2F:07:72:7A:9C:9C
Authority key identifier: F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
Certificate issuer: /CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Certificate serial: 01A0CF3635CA54BF7B40950FDE7677F36ECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
Manifest number: 1A71
Signing time: Wed 23 Sep 2026 17:00:31 +0000
Manifest this update: Wed 23 Sep 2026 17:00:31 +0000
Manifest next update: Thu 24 Sep 2026 17:00:31 +0000
Files and hashes: 1: 1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl (hash: jG/HLObU4moC3CxRSK8fiXt7Vl/S5rd0+iTeWwr/bng=)
2: 2NBuPX9Sr7_9fzAA2_SqLU2A0xs.roa (hash: qnZc+3b2NxrywxDp6pPyOY9sOLIQiJ8XLeTOBtAP7ro=)
3: 5o42lxEDEDt3W8NdF-yOn7UvTZc.roa (hash: oNLBYQIHXcwUoe2IZOdpad4iTA7mmS0+SZkfH4CWA+E=)
4: FP32CXa4bJkrAzn-mUypAVuTRcU.roa (hash: 2l89ddYZWse7SniAD+u1r0X1fyl4WgZC/mow8ll5aKY=)
5: TfDEDSgAF-UuRojXKYwf49xN9QY.roa (hash: l+8RUoTM1uw0SrqFD9LLiUFpKCi1Zds5YbMXCL51Vlw=)
6: VmYFVolGbLMMfwkvFM8kJCuQGzE.roa (hash: /WuPYjGHN6jIW+r1DMVdwmeNT1yyt/R8q6y8mp9Mt4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:35:ca:54:bf:7b:40:95:0f:de:76:77:f3:6e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Validity
Not Before: Sep 23 17:00:31 2026 GMT
Not After : Sep 24 17:00:31 2026 GMT
Subject: CN=8f95ea5e681431d96c07c87f05932f07727a9c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f1:b6:51:6b:56:89:15:75:b2:27:e5:5c:2f:
3d:cf:7b:4f:a3:b1:6d:61:28:ac:de:fa:40:47:00:
59:48:e6:42:2f:df:ac:5e:3e:fd:9e:26:81:54:e7:
a9:86:41:74:25:b3:2b:84:8e:42:7b:7e:77:33:5c:
19:7f:20:11:9f:37:6a:ee:c9:a9:30:6f:d5:8e:6e:
92:d3:6f:e9:0c:9b:17:e5:2e:38:d4:e3:5b:3c:a2:
d0:88:2e:6f:01:2e:49:d1:32:d4:61:ff:5e:1d:c6:
72:ee:e4:80:f5:33:56:ca:1a:c0:03:b5:07:8e:96:
97:e4:05:b4:98:79:b1:bf:dd:ce:21:a8:8d:b6:1f:
49:ad:d5:61:62:45:ac:86:cd:cd:13:d2:3d:e4:be:
04:0a:b3:b7:08:a7:5c:52:5e:13:c4:5c:5a:23:10:
1a:dd:5f:22:04:3a:4f:b5:48:5f:a8:67:cd:40:98:
43:8f:e6:5f:ad:bd:94:26:99:83:8b:45:7d:aa:96:
70:72:11:9f:d9:6e:d8:c9:80:b0:eb:d2:07:0e:57:
a2:8d:23:7f:7b:2e:83:37:77:e3:f9:41:86:94:ec:
14:57:23:e3:ec:0a:31:ec:ea:79:71:29:f7:05:26:
c6:03:a8:42:cf:da:ea:d7:f5:f4:bc:5c:65:9e:b3:
a4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:95:EA:5E:68:14:31:D9:6C:07:C8:7F:05:93:2F:07:72:7A:9C:9C
X509v3 Authority Key Identifier:
keyid:F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:66:f8:cb:7e:30:33:42:57:99:fc:90:4f:1c:bc:47:7c:46:
76:63:25:eb:2d:a1:2e:14:cf:d8:21:18:71:ca:f5:8c:91:37:
1d:03:0e:60:3a:e8:04:71:5a:a3:79:22:a7:68:09:12:db:47:
4b:e2:8b:c5:0a:8a:73:b6:85:a4:56:3d:e1:df:a7:84:27:0f:
29:39:b6:1d:0d:0b:e8:16:09:fe:ce:c4:59:f1:cf:a8:f2:6a:
91:68:f1:3f:3b:0a:f0:8e:96:d1:25:9a:85:cd:f6:c5:b2:a7:
ed:32:9f:1d:b7:ee:6c:30:ab:eb:b9:93:d1:db:6c:54:81:f4:
71:ba:f7:df:3b:5a:73:18:1d:b2:d5:9d:64:72:b0:8d:4f:9e:
8b:36:3c:cf:09:e8:c4:75:a9:ac:04:37:1f:32:86:5b:bf:82:
1b:b1:75:4e:73:be:47:2a:96:38:57:76:11:7c:eb:87:fb:16:
21:43:f2:ac:e0:8c:ea:ff:f4:04:c6:b2:53:f0:a2:dc:13:2c:
2b:1b:52:8b:29:68:25:ee:9d:4f:a9:73:aa:ea:b6:05:f4:80:
b4:6d:7a:ea:2a:1e:bc:1e:79:69:ef:db:c2:64:47:72:50:eb:
12:27:0d:3e:5d:1c:f7:d8:7b:d6:51:76:fb:97:53:7b:d9:ff:
fe:5b:c3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:36:23 2026 by rpki-client