Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft
File: pLm08Dm8goYBw44OrUwZWrvf_mM.mft (raw, json)
Hash identifier: 5RF+GL9HjWDBxYVn86cB1wRH93VscJhshyGpQvXVjSA=
Subject key identifier: AC:D4:1C:80:AF:3F:7A:0B:7F:8F:5D:44:7B:12:48:DA:E6:E7:D2:09
Authority key identifier: A4:B9:B4:F0:39:BC:82:86:01:C3:8E:0E:AD:4C:19:5A:BB:DF:FE:63
Certificate issuer: /CN=a4b9b4f039bc828601c38e0ead4c195abbdffe63
Certificate serial: 01A0EAAE44EA7E6571FF1D202C73FEC4476B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLm08Dm8goYBw44OrUwZWrvf_mM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft
Manifest number: 04E4
Signing time: Tue 29 Sep 2026 01:01:24 +0000
Manifest this update: Tue 29 Sep 2026 01:01:24 +0000
Manifest next update: Wed 30 Sep 2026 01:01:24 +0000
Files and hashes: 1: JdkIQygmhQqcLnZC2_hEonjSX5Q.roa (hash: S2ckYV6ssSGLHtxoF3cPRRAOhiSavGP1nolNPr7KzVg=)
2: pLm08Dm8goYBw44OrUwZWrvf_mM.crl (hash: b+pE6hRvMPf1F8jmwsc67jKZPAguv2dVSlohIg+Pz9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLm08Dm8goYBw44OrUwZWrvf_mM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 01:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:ae:44:ea:7e:65:71:ff:1d:20:2c:73:fe:c4:47:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b9b4f039bc828601c38e0ead4c195abbdffe63
Validity
Not Before: Sep 29 01:01:24 2026 GMT
Not After : Sep 30 01:01:24 2026 GMT
Subject: CN=acd41c80af3f7a0b7f8f5d447b1248dae6e7d209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9e:9f:a1:fb:eb:bc:da:42:27:0a:5f:6c:00:
36:60:ce:32:0e:37:4f:ff:8c:da:06:f0:a2:a6:cf:
12:ce:cd:77:b4:db:e6:3d:58:b6:45:f5:21:9a:29:
c5:58:2d:c5:ba:34:46:b2:92:e0:d0:70:1b:65:ad:
df:13:41:2b:66:07:28:84:f4:c2:59:1f:72:ff:15:
9a:cc:1e:9a:72:6f:97:76:c7:c4:b6:d8:a7:70:0a:
a4:16:13:a6:58:1b:0e:70:e1:54:7d:1f:60:8c:0f:
d2:f3:e9:e7:6c:12:48:7b:10:82:0d:14:4e:d6:18:
e5:ea:55:de:b0:91:2f:d0:da:81:50:31:0e:d3:ad:
bf:f1:c3:e1:41:76:10:60:6b:3c:df:81:f8:f3:40:
e4:9d:73:f2:1e:d6:f9:f1:25:1b:7a:76:2e:b1:66:
b4:3a:42:b7:97:58:82:91:60:d5:4b:34:dd:dc:92:
4f:57:59:de:10:d1:2d:ed:5d:ca:b8:a0:78:10:db:
c3:e0:17:48:3e:11:9f:e0:7d:22:1b:21:43:9a:46:
92:28:dc:a2:91:dc:02:49:30:85:c3:9f:ec:73:7a:
f0:f0:22:e7:16:f1:04:e2:f0:a1:79:c7:d6:6b:cd:
41:26:f5:8f:16:8a:cd:78:0e:53:d3:6e:14:38:1f:
71:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D4:1C:80:AF:3F:7A:0B:7F:8F:5D:44:7B:12:48:DA:E6:E7:D2:09
X509v3 Authority Key Identifier:
keyid:A4:B9:B4:F0:39:BC:82:86:01:C3:8E:0E:AD:4C:19:5A:BB:DF:FE:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLm08Dm8goYBw44OrUwZWrvf_mM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:53:ec:e4:7b:2b:4d:b9:18:ef:04:16:b6:92:69:44:d3:36:
d1:ed:a7:f8:d5:69:cd:35:b0:79:a7:24:f1:c1:e0:9d:e4:74:
19:6e:82:5d:b4:11:44:f4:2e:40:8d:49:15:2e:f4:02:b5:85:
79:4d:48:ca:91:cd:90:74:4b:78:06:8a:0b:bc:62:16:e1:9a:
f8:ae:46:e5:92:96:81:d6:3a:bb:21:07:ce:70:af:dc:fe:c3:
46:c6:2b:71:86:5c:43:a9:fd:25:9c:86:22:a8:8c:3b:a7:23:
d2:35:97:fd:65:01:34:da:2e:97:d6:7a:02:5e:a0:0f:48:4d:
c0:35:87:13:b2:c5:7e:94:9b:dd:fb:53:6c:02:aa:69:c6:58:
7c:3f:7a:9a:7a:5c:64:0c:7b:09:2a:d3:5a:a5:4a:e5:84:55:
70:60:dd:24:4f:0e:d9:80:4b:a5:12:69:33:7a:d9:17:37:be:
66:bc:8c:97:12:60:ca:3a:15:12:80:7d:01:2b:b8:d8:20:c7:
ac:55:b0:45:a0:c3:42:0b:e2:27:48:ee:2a:84:c7:ea:4e:f0:
c6:d4:22:c1:9d:c3:e4:f1:63:d4:87:23:da:23:cf:52:fa:b0:
2c:20:3b:71:52:a6:d7:8f:78:56:06:8b:5b:18:f9:47:a3:e5:
55:23:de:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDqrkTqfmVx/x0gLHP+xEdrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YjliNGYwMzliYzgyODYwMWMzOGUwZWFkNGMxOTVhYmJk
ZmZlNjMwHhcNMjYwOTI5MDEwMTI0WhcNMjYwOTMwMDEwMTI0WjAzMTEwLwYDVQQD
EyhhY2Q0MWM4MGFmM2Y3YTBiN2Y4ZjVkNDQ3YjEyNDhkYWU2ZTdkMjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup6fofvrvNpCJwpfbAA2YM4yDjdP
/4zaBvCips8Szs13tNvmPVi2RfUhminFWC3FujRGspLg0HAbZa3fE0ErZgcohPTC
WR9y/xWazB6acm+XdsfEttincAqkFhOmWBsOcOFUfR9gjA/S8+nnbBJIexCCDRRO
1hjl6lXesJEv0NqBUDEO062/8cPhQXYQYGs834H480DknXPyHtb58SUbenYusWa0
OkK3l1iCkWDVSzTd3JJPV1neENEt7V3KuKB4ENvD4BdIPhGf4H0iGyFDmkaSKNyi
kdwCSTCFw5/sc3rw8CLnFvEE4vChecfWa81BJvWPForNeA5T024UOB9xoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzUHICvP3oLf49dRHsSSNrm59IJMB8GA1UdIwQY
MBaAFKS5tPA5vIKGAcOODq1MGVq73/5jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcExtMDhEbThnb1lCdzQ0T3JVd1pXcnZmX21NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy81NmExNjMtOWNjYi00MTMxLTk3MmQt
OGNjNmQxOTIzMzViLzEvcExtMDhEbThnb1lCdzQ0T3JVd1pXcnZmX21NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy81NmExNjMtOWNjYi00MTMxLTk3MmQtOGNjNmQxOTIzMzVi
LzEvcExtMDhEbThnb1lCdzQ0T3JVd1pXcnZmX21NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO1Ps5Hsr
TbkY7wQWtpJpRNM20e2n+NVpzTWweack8cHgneR0GW6CXbQRRPQuQI1JFS70ArWF
eU1IypHNkHRLeAaKC7xiFuGa+K5G5ZKWgdY6uyEHznCv3P7DRsYrcYZcQ6n9JZyG
IqiMO6cj0jWX/WUBNNoul9Z6Al6gD0hNwDWHE7LFfpSb3ftTbAKqacZYfD96mnpc
ZAx7CSrTWqVK5YRVcGDdJE8O2YBLpRJpM3rZFze+ZryMlxJgyjoVEoB9ASu42CDH
rFWwRaDDQgviJ0juKoTH6k7wxtQiwZ3D5PFj1Icj2iPPUvqwLCA7cVKm1494VgaL
Wxj5R6PlVSPePQ==
-----END CERTIFICATE-----
Generated at Tue Sep 29 12:37:29 2026 by rpki-client