Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
File: peC5TwtOTIRu-c8nzciBEIdrHPM.mft (raw, json)
Hash identifier: OrXoHjV/Aj+wLEZAcrTVNuS6jFH9qsFia3215Ustwv8=
Subject key identifier: 09:E7:04:87:84:A2:23:D2:2A:84:20:1B:80:10:24:3D:8C:07:6B:B4
Authority key identifier: A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3
Certificate issuer: /CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3
Certificate serial: 01A0ED792C67CEE0961EE2A8BF2F41445B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
Manifest number: 1A7D
Signing time: Tue 29 Sep 2026 14:02:16 +0000
Manifest this update: Tue 29 Sep 2026 14:02:16 +0000
Manifest next update: Wed 30 Sep 2026 14:02:16 +0000
Files and hashes: 1: pbzEOsOOyDKksxCPhBhG-xag72U.roa (hash: iF4hi9XQEfO4uOx6Je7Sgz4Viq0kEg/cT2o7PAWCJTI=)
2: peC5TwtOTIRu-c8nzciBEIdrHPM.crl (hash: Pv7ZbOaLD8ItbYEoXqM+wfiz5hsTIxeytEX7ePFirGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:79:2c:67:ce:e0:96:1e:e2:a8:bf:2f:41:44:5b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3
Validity
Not Before: Sep 29 14:02:16 2026 GMT
Not After : Sep 30 14:02:16 2026 GMT
Subject: CN=09e7048784a223d22a84201b8010243d8c076bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8a:d3:fd:f2:6f:6c:34:4c:b2:6a:5a:28:d9:
9b:e9:40:36:92:e8:63:d8:c8:31:f1:8f:01:6b:b9:
b1:fb:be:3d:96:58:88:c9:92:34:e9:c9:6b:9f:28:
5c:7b:b7:63:2d:a6:48:25:87:61:f4:ca:a0:5c:1d:
6b:0a:2f:41:b0:29:26:ee:b0:73:5c:06:7e:27:78:
7d:f4:4f:68:ef:3f:ff:4d:f3:31:8e:44:12:5b:a1:
d7:d4:1c:2c:9f:96:5c:a7:ce:59:3f:b7:ed:ed:e5:
63:5e:9f:b7:1a:2f:9f:74:88:3f:92:67:c6:ae:36:
e7:28:c9:7d:d4:a8:14:0f:87:49:43:3e:dc:5e:6c:
98:d7:c4:be:04:ea:58:42:e3:46:23:0a:4d:cc:4d:
66:f0:70:41:c1:3d:f3:99:fb:7a:5c:98:a2:21:ae:
7b:7d:83:a4:83:a6:71:2f:3f:b2:2e:0d:84:cb:9a:
4b:b8:e8:96:03:81:df:e1:04:f0:fb:46:02:3e:62:
42:54:8f:47:43:d5:22:3d:a3:56:00:9d:16:f1:47:
fe:1d:d3:03:7e:52:de:03:b3:16:ed:43:7e:f4:65:
e8:34:55:02:df:d6:ae:16:1c:12:d6:d5:de:4a:98:
e6:dd:48:e6:b7:1f:27:fd:86:b9:4b:b8:47:cd:e9:
6f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E7:04:87:84:A2:23:D2:2A:84:20:1B:80:10:24:3D:8C:07:6B:B4
X509v3 Authority Key Identifier:
keyid:A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:dc:7e:b4:37:02:dc:b7:a8:5c:ed:58:1d:82:6c:cc:8c:5c:
61:62:27:24:b4:cf:19:88:3c:1a:40:62:8a:f0:9c:98:34:27:
8d:07:54:40:f9:c7:8d:a1:2f:99:fe:31:e2:f9:6d:45:79:7b:
81:73:87:7e:e5:8c:78:8c:07:70:59:c4:49:9c:52:0e:e3:f0:
12:33:ab:4e:24:39:ad:0e:c9:fb:36:75:9a:e8:b8:0d:4f:5a:
0d:38:63:cb:f9:4c:09:cf:7d:89:54:53:6a:1f:59:af:fb:a1:
6f:61:dc:dd:0c:14:d1:c5:f5:8f:a5:9c:63:50:a4:5d:84:00:
73:b0:22:8d:7b:1f:fb:a4:2f:c4:cb:df:34:ce:fb:a5:f7:76:
e7:78:5c:8b:92:1c:90:20:ce:0e:84:79:67:ee:0d:0e:e8:30:
c2:0d:e9:6a:f9:e3:58:66:03:2e:34:cc:bc:f5:81:c1:f6:93:
83:47:2f:8f:27:7a:d8:db:0f:d8:a9:af:6c:5f:99:21:41:c1:
2f:7a:e0:a8:17:d6:75:eb:8c:a8:61:7a:71:5b:ef:82:a1:5c:
ca:99:57:f8:eb:e3:8f:94:5c:50:eb:9f:63:fc:3f:3a:d5:1b:
c1:45:2d:b6:95:97:13:8a:4a:70:cf:9a:4b:a5:12:2c:07:fc:
1b:51:87:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:43:04 2026 by rpki-client