Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
File: PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft (raw, json)
Hash identifier: xQ+zpfTmiJI54oiU9qLOgO286utPTLetVtGnGZrpB9A=
Subject key identifier: DA:35:AF:B3:B2:B9:EB:07:BB:2A:A3:E1:F5:2E:70:61:77:2A:11:75
Authority key identifier: 3C:A1:FA:BE:9F:0B:3E:97:7F:8E:08:29:C0:BF:5F:08:78:38:46:68
Certificate issuer: /CN=3ca1fabe9f0b3e977f8e0829c0bf5f0878384668
Certificate serial: 01A0FB6AC49A4B3942B5CF1BBEDC0F42E284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
Manifest number: 1A83
Signing time: Fri 02 Oct 2026 07:01:13 +0000
Manifest this update: Fri 02 Oct 2026 07:01:13 +0000
Manifest next update: Sat 03 Oct 2026 07:01:13 +0000
Files and hashes: 1: PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl (hash: 7zq8xLDPogC5B27JL9wKbiVZegj7syazYSJkWdROWkw=)
2: m5c3Kp4r9aaG4JXnWoVgbW6fzLM.roa (hash: zFQk8P7qdiOsDme61W/zQfVewpw/uX39LK39s6ZU7J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:6a:c4:9a:4b:39:42:b5:cf:1b:be:dc:0f:42:e2:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca1fabe9f0b3e977f8e0829c0bf5f0878384668
Validity
Not Before: Oct 2 07:01:13 2026 GMT
Not After : Oct 3 07:01:13 2026 GMT
Subject: CN=da35afb3b2b9eb07bb2aa3e1f52e7061772a1175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e3:fc:7e:a0:31:fe:9a:e7:1c:7a:45:18:a6:
76:74:8e:81:eb:31:b3:33:94:4d:62:d6:ba:49:82:
d7:f6:0c:26:81:95:1f:83:fa:e3:8e:d4:23:1a:4e:
8a:8f:2a:68:04:45:a2:e2:2f:f8:62:29:f8:de:94:
39:4b:21:99:5f:dc:9b:8c:a2:f5:1e:e9:f5:67:97:
30:98:38:0a:63:0e:ce:2d:7d:14:32:5c:98:c0:03:
95:39:f0:87:34:ef:58:66:b5:f5:de:e6:ee:8c:a5:
d5:3f:a5:cd:3a:b8:1c:49:2e:b2:89:cf:1e:22:22:
fb:d2:60:e4:c2:66:da:ac:18:a9:12:8f:7f:f8:23:
ff:02:e8:35:c9:86:ee:76:91:6e:16:a6:7e:5a:b0:
82:b6:ca:7f:c8:06:70:53:a4:9a:64:e0:6b:9c:71:
ef:2b:3c:ef:9c:5c:4f:48:84:4a:77:f2:36:af:15:
c9:d1:38:22:95:91:f7:56:13:7e:c1:1f:d7:ce:f9:
1f:ad:65:5b:57:a2:18:d7:fe:72:49:0a:0c:8c:77:
8a:17:49:79:19:66:58:b0:98:2f:b7:f2:53:94:bb:
1b:a9:bc:90:03:79:cf:c3:3f:0f:c4:16:36:17:02:
78:ca:78:41:6d:2b:b4:0f:2d:ac:8c:12:f9:92:2a:
cc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:35:AF:B3:B2:B9:EB:07:BB:2A:A3:E1:F5:2E:70:61:77:2A:11:75
X509v3 Authority Key Identifier:
keyid:3C:A1:FA:BE:9F:0B:3E:97:7F:8E:08:29:C0:BF:5F:08:78:38:46:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c6:ca:7c:68:48:35:8a:d5:66:70:48:ad:62:aa:ce:0a:12:
e4:61:a5:63:38:0f:2b:86:a4:94:06:17:6a:bd:8e:43:a9:f3:
45:f2:72:4c:33:c3:e6:23:d9:33:3f:fb:f3:7d:ea:f8:a8:a2:
35:24:91:11:92:12:bc:6d:95:ff:bb:06:85:1e:87:fd:e2:a9:
e5:cb:26:62:e9:1d:0d:4b:77:50:2c:3f:ee:90:ab:34:93:ac:
ae:9f:bd:44:8c:44:07:f8:33:5d:69:67:41:96:04:92:2d:90:
47:eb:9b:db:7b:6c:e0:85:ba:40:0d:eb:5e:05:36:6a:1f:15:
c7:10:f5:d5:cb:b3:47:ab:83:da:39:12:72:10:65:5e:8c:1e:
06:51:d1:49:c2:9d:ce:45:fc:d8:5e:4a:6a:48:65:5e:5d:bd:
92:c7:b9:da:35:47:30:cd:08:ce:7b:22:20:df:2e:f5:f4:a2:
74:34:79:b9:66:9a:bc:8f:ef:70:a7:fb:6e:66:44:d9:40:b9:
ce:ed:f2:63:9b:7a:e3:a7:e1:ef:5f:87:28:ce:19:51:b7:36:
60:a0:72:8f:09:d8:5e:58:d3:dc:3a:2c:3e:91:f8:60:1e:c7:
9d:1d:e3:04:c6:38:85:09:bb:40:a8:d8:d9:e4:85:c0:65:3b:
45:27:31:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 17:25:25 2026 by rpki-client