Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft
File: PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft (raw, json)
Hash identifier: y8fIUgI0A3MFXa2ARIItid0GBfsVLfiABsxKHOsSbAo=
Subject key identifier: 26:EA:E1:2A:07:74:62:2D:13:AC:7F:82:57:87:43:9B:D2:68:98:24
Authority key identifier: 3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54
Certificate issuer: /CN=3d8a553e05f0319bf452fa206c14ccda87304654
Certificate serial: 01A0D45E33B3E3BDD9FFEA8619257231ECB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft
Manifest number: 147C
Signing time: Thu 24 Sep 2026 17:02:18 +0000
Manifest this update: Thu 24 Sep 2026 17:02:18 +0000
Manifest next update: Fri 25 Sep 2026 17:02:18 +0000
Files and hashes: 1: 7XPR057HTONIllGtY9NijiuY-tk.roa (hash: rKfjiDRkcr3HFT8PmmA3P0sCBQ3drFmQ5QDnLKCb/BE=)
2: BkwxXA7fP42om6HRgHGfrfIh2H8.roa (hash: rAhJcTyihfR2XB9K2sMs93uqkPdzNnWihXN2DQ+14tM=)
3: PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl (hash: wJ84STC8VTzoDEoCaZYadx3ymtzb3vUJt7yNSv3zpYk=)
4: T4FApCxhFe83q9A7YZlC1nZYzIE.roa (hash: LjUt5usAgPWHNriSJWMg7OS8Oagi6w46/dUqLi/UEzA=)
5: Wn-ZLE8xGx2iUZq_8EgFIe3BY1M.roa (hash: SwGxPAdfidv7O5nNS+nKj4I72Qs5sJPeTh9qbwfsZWo=)
6: YuGYvjrFzLezHsgzIUZ0asWCqVk.roa (hash: aZLneGXD5YvsOe9tvMiGcrBxDYxxGmpY4vDCZwd72Z8=)
7: fLae4aR9HsO6ApeohQnbJHEsvgg.roa (hash: /b3Xi59hV2RbWadggK4I0wXvCWO8lTHkzV3V9hJ6K0Y=)
8: jccKxXf-KlBy0OODUdeGAP1Pln4.roa (hash: kXcgJH+D8EkeDblDPw+VtydCo7evj5I/OxvPnwmyUe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5e:33:b3:e3:bd:d9:ff:ea:86:19:25:72:31:ec:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8a553e05f0319bf452fa206c14ccda87304654
Validity
Not Before: Sep 24 17:02:18 2026 GMT
Not After : Sep 25 17:02:18 2026 GMT
Subject: CN=26eae12a0774622d13ac7f825787439bd2689824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8f:24:7d:5d:66:d6:30:8c:4d:b3:ca:bd:f7:
31:25:29:7c:4a:06:47:6e:8b:9f:27:52:62:11:33:
28:1d:40:6d:da:af:f2:4c:e1:ee:15:4d:b4:11:bb:
6d:5f:7c:bb:cc:78:be:dc:51:e6:14:33:72:f6:94:
13:4b:07:3a:ef:27:31:ad:56:05:8f:52:a9:0c:bd:
bb:4e:d0:e8:ca:5a:4d:8d:0f:ad:56:b6:7c:5e:f3:
4d:e2:b8:ab:25:dd:7c:42:33:cf:39:7e:f0:7a:1f:
25:ff:b6:59:2b:29:39:e2:8b:87:61:2a:73:4d:ce:
ea:98:b6:11:18:d2:01:df:38:1b:04:b7:df:1d:11:
97:c4:36:42:2d:bc:e0:cc:cf:d1:71:f3:a2:f0:4c:
9d:74:57:c8:22:c1:16:21:99:4f:6e:e7:4a:2c:02:
de:71:1d:9b:ea:41:b2:46:07:8e:d4:3f:65:e3:1e:
51:38:8e:ee:dc:38:db:d5:b1:85:b8:bc:1c:c2:d5:
a2:8e:06:87:67:ab:c2:d5:51:9f:f9:c6:f1:ae:ef:
3f:a6:ff:22:40:6b:72:58:92:42:b7:62:16:8f:3b:
7b:7e:b6:72:85:b2:fd:94:11:cc:82:ec:73:fb:bf:
b5:a6:96:30:46:59:47:f5:a8:f9:ef:40:c6:f1:36:
74:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EA:E1:2A:07:74:62:2D:13:AC:7F:82:57:87:43:9B:D2:68:98:24
X509v3 Authority Key Identifier:
keyid:3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b0:59:f0:90:23:85:0d:5c:77:a0:ed:ce:79:6a:e0:82:4f:
d6:ab:c8:c5:b1:1c:f8:a4:1c:f7:b5:7d:c7:32:89:bb:36:f0:
97:1b:a3:aa:6d:c5:b2:49:8e:2a:30:f9:1f:3b:4f:1c:24:6b:
21:aa:da:97:f2:89:91:d2:14:70:89:e0:69:ee:6a:06:7e:d0:
5b:58:4d:14:67:93:8a:41:e9:a1:ad:db:cb:84:39:3b:11:07:
1d:71:a7:63:98:4c:b7:22:fb:6a:5f:72:49:83:70:4b:d3:a8:
3b:5e:49:11:7c:8a:77:73:37:d3:75:cd:b5:e1:f6:e2:44:6d:
72:34:fa:ed:04:06:86:43:0a:c8:c7:6b:a6:11:10:b1:c9:18:
dc:34:21:0d:00:f8:81:87:83:46:96:a5:bc:60:aa:fe:17:6a:
a8:14:9f:ff:1a:4c:25:67:32:d4:29:08:79:2e:01:4f:1f:0e:
82:9e:52:25:19:17:aa:34:97:28:7b:a1:10:10:45:da:70:a6:
0f:e4:85:ec:76:69:cb:f2:b9:64:10:a6:60:27:90:20:94:4a:
eb:27:20:86:28:32:da:08:8d:ad:e6:a6:72:a1:d3:db:96:56:
ae:93:fa:d9:27:41:13:ca:32:9b:a5:ce:af:4d:01:51:2b:2a:
54:e4:da:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:16:21 2026 by rpki-client