Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft
File: pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft (raw, json)
Hash identifier: t9n2d9ayGEGzAevhsIlHYIO6H43uUceoc4TL6xqeq3U=
Subject key identifier: F9:90:72:2A:CE:B3:21:DE:C8:B4:BA:C1:6A:4F:74:25:3A:CF:B9:59
Authority key identifier: A4:53:7C:BE:DA:D3:56:81:9C:BC:77:AE:3F:CA:17:D6:54:31:C2:80
Certificate issuer: /CN=a4537cbedad356819cbc77ae3fca17d65431c280
Certificate serial: 01A1280CE3A195976E1281690A5698A1CC60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft
Manifest number: 0114
Signing time: Sat 10 Oct 2026 23:01:35 +0000
Manifest this update: Sat 10 Oct 2026 23:01:35 +0000
Manifest next update: Sun 11 Oct 2026 23:01:35 +0000
Files and hashes: 1: 5eCm7YiekLnQx2Yrufz0DKOe4t8.roa (hash: A4yzIFhcFavgDz/cnTf1E1mu+4JZXUZX4YW5ffY43Tw=)
2: AmJH-oKP8JDfCGjtvLBdScjcl94.roa (hash: JYSfH/iBbNzkn+YYYr8OyA3qLrDl+3bHlmfyOFI1Y70=)
3: BnfQ_AzrFoZh3KLGYso6JJ9GXdo.roa (hash: ENsW9JPhfPIhP5yk5NQtzakTi0pxm6wJtb9Q7w/b4ZM=)
4: FBnng7ak4AJweaj7mNiiDGPhP-A.roa (hash: 7O6BMYqqhyaPH6JejfjvmE43i9bE4Safke5zHGTaAxk=)
5: aZqL4PQIRKXk-Nf9g8MWjRBJYWY.roa (hash: oswi/PqLXiY69b2lF56784lBrhIisxDRepTm/CrpEY8=)
6: pFN8vtrTVoGcvHeuP8oX1lQxwoA.crl (hash: rjte61mZgiCstWoXNcezlSwI3HFPJMVeGgtytMbD8xw=)
7: qThwM4VOPtwJ-fORifwyTLzk-FM.roa (hash: inwDpdNUtTVuD4hxozBiGnVD6vXL05h5rizEBbo4mSI=)
8: vlQgVNHMOMDCgexHalesjIDPMos.roa (hash: NKNm5ZfHR4kcXtf4m4rKT2uIMrcP5kuQXn9iZz+SX+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 23:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:0c:e3:a1:95:97:6e:12:81:69:0a:56:98:a1:cc:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4537cbedad356819cbc77ae3fca17d65431c280
Validity
Not Before: Oct 10 23:01:35 2026 GMT
Not After : Oct 11 23:01:35 2026 GMT
Subject: CN=f990722aceb321dec8b4bac16a4f74253acfb959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4e:2c:00:0e:8b:2a:d5:17:57:e9:1c:b9:e1:
54:0a:d0:c9:fb:3e:2b:3b:16:74:71:a0:85:f2:24:
3f:98:65:8a:d5:a3:d6:7f:f7:b7:5a:e9:f1:f0:c4:
fb:a5:11:bf:a2:21:10:21:82:66:7c:84:70:b8:68:
ce:54:0e:8c:ea:f8:e0:cd:8d:77:df:9e:08:f4:8d:
5f:09:2a:7b:44:89:6f:ae:3e:66:47:7c:cd:c2:7d:
5c:4d:be:e0:d3:f9:20:f3:27:76:97:2f:bb:1e:7f:
aa:fb:7d:41:c2:61:45:53:88:d6:ed:ae:cc:c8:10:
10:0b:aa:50:70:df:37:d4:5a:e1:4e:ff:54:85:5e:
0d:23:d4:ab:46:76:9c:2d:23:fb:85:ac:d6:8a:30:
01:b8:c0:6d:1e:38:82:30:3c:80:f0:fb:e1:f7:42:
be:29:1c:98:fa:fd:86:b6:87:6d:6f:08:97:5d:4d:
0d:a5:3e:9e:af:39:14:d0:71:b0:68:a3:64:e7:9d:
91:14:55:a9:f0:78:47:0e:d0:e6:e5:df:3a:cd:bd:
55:a6:e2:29:c8:a1:d9:e0:5f:29:9e:9e:a8:fa:0b:
a5:a7:f4:50:af:16:f6:bd:97:c2:af:5a:34:91:0a:
35:5b:d4:ae:68:63:ed:19:48:56:d8:dd:6c:cb:75:
ea:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:90:72:2A:CE:B3:21:DE:C8:B4:BA:C1:6A:4F:74:25:3A:CF:B9:59
X509v3 Authority Key Identifier:
keyid:A4:53:7C:BE:DA:D3:56:81:9C:BC:77:AE:3F:CA:17:D6:54:31:C2:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:77:0d:c2:4f:52:3d:94:f2:e7:f3:64:26:59:8c:8e:c1:50:
d3:cc:fb:87:68:43:6f:c3:75:b3:1c:4d:35:7f:cd:28:d0:ea:
42:25:11:85:91:e8:e2:ce:71:fe:e8:fd:b6:12:0a:c6:77:15:
0a:98:05:19:d6:7e:ca:cf:47:1e:bf:89:86:54:ac:ec:49:b1:
ce:84:aa:05:49:a0:99:f2:cb:5c:ec:d3:90:9b:c2:33:54:92:
f0:f2:81:7f:89:1a:98:5d:3d:8e:53:be:b5:c6:dd:31:03:88:
ec:ec:78:f5:5f:87:50:3b:5a:6d:aa:97:1b:3e:84:69:56:b0:
11:96:ca:b6:4e:61:47:93:8c:a0:21:81:ba:c4:b2:44:c2:bb:
03:5c:c4:e8:50:eb:d6:ae:cf:0c:da:50:00:f4:06:35:6b:b9:
70:4e:9b:d8:7f:b8:b1:c9:5a:08:9d:c5:d3:c7:ac:ed:3a:90:
83:bc:ef:78:de:e8:0e:f9:bc:94:5b:cb:ca:9c:87:cf:67:ac:
90:cb:a6:18:61:2a:b6:f5:d7:5d:bb:04:03:12:11:e9:67:e2:
cf:74:6c:0c:32:02:05:02:96:f8:2a:43:3d:86:bd:a8:80:7e:
02:a4:6f:65:3b:66:86:46:bf:d2:25:6a:13:8a:7f:06:9f:b5:
82:c7:c9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:26:58 2026 by rpki-client