Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
File: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft (raw, json)
Hash identifier: WdZAS9N4bqHYfo8W3nJf1rCwo0s7lQPw+N3zPXHrmrU=
Subject key identifier: DB:37:3A:1A:06:DE:C4:18:38:A8:8F:C6:52:1A:B9:96:2D:8F:EC:71
Authority key identifier: A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
Certificate issuer: /CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Certificate serial: 01A0D9178BA368BBFB25B87DF9FA7A38D9A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
Manifest number: 1A6D
Signing time: Fri 25 Sep 2026 15:03:13 +0000
Manifest this update: Fri 25 Sep 2026 15:03:13 +0000
Manifest next update: Sat 26 Sep 2026 15:03:13 +0000
Files and hashes: 1: 8xpf1H5jnrklNTBoaVn0u85Fw00.roa (hash: xVZEKXXOjsh0YBdOeRbRNQ2rIeuGE/aopxCQhkfvBRc=)
2: k1f4H5R1t7ioWxpD9zQTzDGVw34.roa (hash: UazRYiujjVi7Q1FCel0edXG5MOLygjSQmvy3K0uCobk=)
3: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl (hash: SM5AngjDJ6v/zbQGvJH/q2WdfBhHkLHY6gc6R84QtNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:17:8b:a3:68:bb:fb:25:b8:7d:f9:fa:7a:38:d9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Validity
Not Before: Sep 25 15:03:13 2026 GMT
Not After : Sep 26 15:03:13 2026 GMT
Subject: CN=db373a1a06dec41838a88fc6521ab9962d8fec71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4c:41:e5:76:49:4f:3f:25:81:bf:b3:7c:d5:
57:98:85:69:6b:ff:05:7c:f5:b0:3d:8f:f9:31:ad:
a9:17:90:90:3a:32:f6:b8:29:7a:f3:6b:cf:f5:a4:
42:1a:86:5f:72:cb:b9:e8:55:88:b0:d8:cf:8f:0d:
6a:1d:57:6c:18:aa:38:41:ec:16:68:fe:7f:2d:85:
39:7b:2f:f0:51:d8:be:93:f9:10:65:41:e5:56:06:
98:07:0c:4f:79:af:f5:2d:15:1f:6a:9b:0a:79:cb:
b2:c0:f5:d0:11:61:73:88:9c:c0:e8:be:50:6f:a3:
15:fc:b6:2f:dc:d9:b4:88:df:50:bb:51:1a:2f:ae:
82:05:fc:02:8f:f1:97:de:0d:f2:cd:7d:5d:77:82:
de:46:f2:fd:f4:46:b9:80:d7:bf:97:17:87:24:b6:
76:6d:0b:66:05:8c:38:f5:29:45:e4:46:8b:da:be:
03:28:fc:d3:82:1e:cd:0f:cb:42:a5:bb:5d:a7:94:
e8:93:6a:f2:35:00:5e:12:6a:75:d7:72:2a:68:c8:
3c:c7:14:8c:e4:d7:18:e2:7b:3c:89:c3:27:09:79:
d0:67:1a:13:48:09:49:ba:49:9f:fc:3a:13:80:4b:
b3:e3:9f:a9:9e:1a:3e:8a:c4:d9:f2:0d:bd:56:ce:
6a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:37:3A:1A:06:DE:C4:18:38:A8:8F:C6:52:1A:B9:96:2D:8F:EC:71
X509v3 Authority Key Identifier:
keyid:A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:10:5a:6f:d0:2c:ce:5e:ac:62:ec:74:3c:07:1c:ac:5b:6d:
e6:73:b8:e6:a7:8e:ae:e9:aa:d2:14:87:ad:05:4a:61:d9:59:
33:0d:a8:13:05:68:9c:b5:db:74:47:0b:1b:16:16:3b:f9:1f:
d2:be:85:25:3f:66:aa:62:40:24:bf:ab:76:32:cf:ee:f6:b9:
c8:7e:cf:5f:bd:68:0d:69:dc:68:97:08:d3:03:00:3e:0a:9b:
f3:a8:b1:60:93:a6:ca:d8:b6:aa:a6:0d:5b:52:60:73:c2:a8:
c2:b1:7e:8e:1a:53:4e:6d:25:0e:53:95:87:b9:d6:11:29:b5:
0f:f4:92:0c:f7:f6:86:4b:a5:51:2b:c9:f1:81:9f:64:d0:24:
67:3e:71:ba:69:60:f8:e7:28:8d:18:0d:d1:07:b3:63:86:f4:
54:1d:a4:a0:c3:a9:53:82:00:e0:af:f9:c6:7f:a5:29:58:4f:
56:2b:74:4e:88:b2:39:20:b1:9f:8c:9c:30:67:c9:61:9f:44:
a7:bd:e1:4b:79:14:12:06:e7:82:f8:70:22:13:aa:fa:d5:a8:
71:6d:e4:1e:3d:fd:ba:2d:3a:d0:0f:40:8e:64:51:29:86:e1:
b6:e7:7b:8f:6a:74:13:2e:ca:37:14:fd:0f:97:c2:51:a4:3c:
3a:38:c3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:53:31 2026 by rpki-client