Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
File: pmJGuAbomrpA5-WIiPNXZROjk0o.mft (raw, json)
Hash identifier: /YivrPhk3jQ//9rGlUPX8w0yKvA1ajGtDY8O6XIV4yQ=
Subject key identifier: B5:C3:57:3D:B5:C4:AC:38:77:89:75:A9:41:F9:16:6A:9C:A5:53:3D
Authority key identifier: A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
Certificate issuer: /CN=a66246b806e89aba40e7e58888f3576513a3934a
Certificate serial: 01A1005B09E3E415A56DEA2242D574567F96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
Manifest number: 1A8C
Signing time: Sat 03 Oct 2026 06:02:08 +0000
Manifest this update: Sat 03 Oct 2026 06:02:08 +0000
Manifest next update: Sun 04 Oct 2026 06:02:08 +0000
Files and hashes: 1: 8MCnCiuGbqnzU7k4AiuuVxxMVjI.roa (hash: 3AKQoBBhnfUzI34hMZSnvSfZtjxdcBOFKymfp/vwl0g=)
2: MnRpYakEEH_3YM8B7YjpXHZCSHs.roa (hash: As4Z8EIpoOCvUeHagBG0PnKSVumw3phPbQAL1UT50X8=)
3: Xw_Yrbs6dG8gOuv7i9EZQhlPhlw.roa (hash: EFAh20ucPzMb4NyAoN8tNqkVM4vbiB7eJqswxMwPTCU=)
4: pmJGuAbomrpA5-WIiPNXZROjk0o.crl (hash: aUqxLGYfoCAaVNGwBp62oTsnIGkCIsa5qkEj29SCxgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:5b:09:e3:e4:15:a5:6d:ea:22:42:d5:74:56:7f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66246b806e89aba40e7e58888f3576513a3934a
Validity
Not Before: Oct 3 06:02:08 2026 GMT
Not After : Oct 4 06:02:08 2026 GMT
Subject: CN=b5c3573db5c4ac38778975a941f9166a9ca5533d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:55:d9:5f:5a:3a:5a:d2:6f:61:f0:b9:71:15:
52:af:bf:07:02:7c:cc:29:54:91:84:71:cb:81:e0:
89:b7:cc:90:84:c4:86:5f:a1:7f:1b:d4:73:d4:a7:
b4:f0:c5:d6:a0:31:74:16:25:86:db:52:8c:ea:70:
bd:ff:12:67:6f:04:8a:cf:f6:2a:e3:5b:1f:d2:3f:
de:fd:6a:a7:06:6f:ae:3a:ad:ef:6e:13:5b:c2:6e:
b4:e8:36:97:66:e9:d6:10:f0:27:c4:8f:37:27:35:
ea:8a:f7:f0:93:e0:ae:ac:b9:8f:a1:34:53:c9:76:
cf:e4:0a:40:4b:7c:06:94:73:1b:20:34:1f:da:1d:
e9:12:38:c5:5f:62:a3:8f:39:55:06:69:53:fb:b1:
b3:ad:a8:94:81:c8:fe:df:ee:db:8d:40:f0:3b:ef:
80:66:9c:93:df:6f:ae:f6:ab:a6:65:fe:74:58:4f:
fd:a7:ed:8a:fa:37:33:96:d6:e9:e9:33:78:16:3a:
b0:4f:14:06:a1:6b:d1:e2:13:51:ff:17:6c:11:61:
72:8a:5b:44:60:d6:39:82:4b:fe:f1:08:e3:22:78:
1d:f0:9e:4d:b6:2f:e1:f2:c3:49:19:62:5f:ad:39:
72:cf:d7:3b:73:30:c5:57:1c:a2:e3:e6:36:e4:73:
13:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C3:57:3D:B5:C4:AC:38:77:89:75:A9:41:F9:16:6A:9C:A5:53:3D
X509v3 Authority Key Identifier:
keyid:A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:05:98:82:f8:21:df:c4:b0:52:35:ef:0e:df:d9:87:db:71:
d7:65:ef:2e:3c:cb:05:21:fe:52:65:57:1b:48:ce:65:29:ec:
ba:c0:62:72:c6:4b:b2:58:5f:37:96:1b:65:97:2e:f3:a6:40:
19:18:6a:d8:a6:92:04:b4:a6:49:bf:b0:42:3a:f6:10:e2:fa:
5d:c1:c7:36:06:79:4b:60:53:8a:32:cc:00:c8:6e:53:1c:32:
08:a9:e9:8a:96:f5:fc:83:52:64:3d:52:1f:1d:13:8f:35:db:
1d:62:9b:bf:ac:57:9f:82:8b:08:26:7e:bf:35:19:6a:06:fd:
42:49:c3:4e:e5:c7:d1:e0:75:45:15:ac:0e:98:90:41:66:b0:
65:e5:d3:4f:d9:a1:ba:f4:4d:52:68:5f:96:cf:02:a3:a2:34:
53:15:ea:d6:83:2b:e6:c4:5a:da:f0:5d:c4:af:3d:10:a4:9b:
0f:cd:a5:ad:9e:2c:8c:5f:ce:41:6d:cf:7f:22:c4:2e:3d:73:
5c:d1:71:7e:52:67:3a:03:cb:eb:47:6f:a0:1d:1a:fd:10:4f:
87:ab:7f:87:f1:f2:3f:a8:a7:b0:46:eb:1e:e4:34:91:16:a0:
92:29:dc:8b:79:6e:79:1c:4f:4f:54:8b:d5:9f:a3:9b:ae:aa:
b6:64:44:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:24:59 2026 by rpki-client