Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
File: pstoJGZQvVjCKirgCtBmF4qB628.mft (raw, json)
Hash identifier: HP0dZ2vl9Ch/iWbz35d1w6wJ5IKmM2MhpJVbx1dDg9g=
Subject key identifier: 9C:A7:D8:B1:AC:D6:12:75:F0:61:98:9C:87:F1:B0:DD:FC:31:B8:61
Authority key identifier: A6:CB:68:24:66:50:BD:58:C2:2A:2A:E0:0A:D0:66:17:8A:81:EB:6F
Certificate issuer: /CN=a6cb68246650bd58c22a2ae00ad066178a81eb6f
Certificate serial: 01A0E099055DECEC9332991A4D54BD3FA7E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
Manifest number: 12F1
Signing time: Sun 27 Sep 2026 02:01:59 +0000
Manifest this update: Sun 27 Sep 2026 02:01:59 +0000
Manifest next update: Mon 28 Sep 2026 02:01:59 +0000
Files and hashes: 1: SNOlYOcqtrnciePvkCUcLJcoUvU.roa (hash: loMPRzn55InS2adOqJYmW2DSfbGu3PbAMnR1VbbSvpc=)
2: pstoJGZQvVjCKirgCtBmF4qB628.crl (hash: eZsFw7zVhFXG0tn063i5RsAMWeeLHXxHQ7QXY3I4B8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 02:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:99:05:5d:ec:ec:93:32:99:1a:4d:54:bd:3f:a7:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6cb68246650bd58c22a2ae00ad066178a81eb6f
Validity
Not Before: Sep 27 02:01:59 2026 GMT
Not After : Sep 28 02:01:59 2026 GMT
Subject: CN=9ca7d8b1acd61275f061989c87f1b0ddfc31b861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ce:ae:5c:34:f9:8f:a6:26:f9:ce:ec:11:71:
f3:fc:5b:cd:e5:36:8e:a5:5f:b6:8b:d7:eb:43:8f:
4e:ab:6c:7e:b0:f7:65:ca:1a:6c:87:be:3b:f3:2b:
dc:43:22:11:ac:70:5d:f4:77:8d:63:ce:90:95:63:
97:04:da:1e:99:23:be:f3:24:be:9f:fd:58:f3:49:
2c:c8:cc:fd:4b:ec:9f:f4:c4:8e:ce:3c:78:ba:7a:
e7:3f:2c:a4:5f:fe:fc:7b:d8:ae:02:99:cf:a0:e5:
3f:e7:cd:90:47:c7:d5:83:b2:85:fa:b6:4a:c6:ee:
90:f0:9e:ce:74:a7:25:3d:98:d1:bf:30:fd:ae:e5:
53:85:ce:e9:93:15:1a:4e:63:4f:46:ea:b9:65:68:
86:a6:27:14:bb:67:62:77:31:ad:93:44:d2:78:66:
14:e0:82:cf:ea:6e:65:0a:ff:35:43:84:d1:05:37:
ae:8d:1f:08:b7:af:f2:96:d9:3e:a1:af:c5:ee:42:
31:85:3c:15:2a:48:3d:4e:cc:1f:6a:ea:a3:7e:2d:
b7:e7:4a:69:9d:a4:fa:75:5f:e1:97:fd:88:92:e8:
4d:4e:7a:00:91:8c:27:89:f3:61:d3:e9:40:bb:c7:
c8:f6:3c:72:15:f0:b0:74:18:89:89:eb:28:2e:ba:
23:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A7:D8:B1:AC:D6:12:75:F0:61:98:9C:87:F1:B0:DD:FC:31:B8:61
X509v3 Authority Key Identifier:
keyid:A6:CB:68:24:66:50:BD:58:C2:2A:2A:E0:0A:D0:66:17:8A:81:EB:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:64:56:e4:36:da:f2:b9:be:5a:ae:c1:f9:be:fb:9f:b6:f7:
7f:18:55:61:25:98:df:b9:10:52:41:f7:72:f8:f8:1a:51:fa:
ca:8a:fb:b9:7b:f6:d7:1c:1a:1c:0b:df:e5:23:c0:a1:d9:16:
51:21:f7:33:89:a7:79:19:6e:db:15:a1:fc:fc:4d:3a:ea:c7:
32:cf:3e:93:01:db:1c:fb:a1:57:ca:22:1f:51:15:a9:80:1d:
9f:b9:8e:a5:c9:4b:a7:da:4c:24:72:2e:11:b8:9c:f7:1a:3e:
69:9f:0f:c4:b3:4c:36:8a:68:16:5f:11:b6:8a:cd:f6:44:eb:
26:3f:10:d3:20:b4:08:ba:af:8a:45:b4:63:f3:11:e7:43:d9:
a6:5d:fb:14:a8:ab:a4:78:52:fd:a6:55:25:bb:99:88:2f:63:
85:23:b1:e5:1a:5e:ba:4b:af:b6:36:8c:33:84:8d:c3:db:10:
9f:98:67:8e:db:fe:bc:da:7a:1c:27:e0:67:9d:6e:e9:ef:78:
65:ca:7e:ba:55:2f:04:57:88:75:bb:dd:c9:94:71:e2:a1:f1:
44:72:ba:c8:7b:94:8c:f8:4a:c0:3b:83:e1:56:c4:dc:52:a6:
f1:ad:c0:52:98:26:c1:d5:38:56:07:dc:86:e1:cb:5b:2a:1b:
59:6a:33:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:02:52 2026 by rpki-client