Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
File: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft (raw, json)
Hash identifier: +GLZAABgbMa6oAVdZdNyBPs8ooIKnkNmoAhNFjbz7Kk=
Subject key identifier: D1:6B:0B:04:A0:7C:FB:EC:FE:46:59:36:4A:C0:36:19:9B:6C:BC:FA
Authority key identifier: A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
Certificate issuer: /CN=a57f291818d8719738268d844994a2e10824d4c9
Certificate serial: 01A0EA76F94752161639690AC183252B6249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
Manifest number: 1A7A
Signing time: Tue 29 Sep 2026 00:01:00 +0000
Manifest this update: Tue 29 Sep 2026 00:01:00 +0000
Manifest next update: Wed 30 Sep 2026 00:01:00 +0000
Files and hashes: 1: JPBii3Hqcq30q25CjK9-h-C44rw.roa (hash: 0nYkKiEoyllpIK9/qO7+AH5OvjbE8XnCXRin+xPio6U=)
2: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl (hash: fQK0MyhgY06SJ3eS41DQ1SLjIcpJ0U2X3R7dX/wO/Oc=)
3: qVXn2mio2xGIpazTfAYClCM2JZM.roa (hash: utP7O671cytqXjasGTBwll6HaIxFO1XJW1EluiUhDqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:76:f9:47:52:16:16:39:69:0a:c1:83:25:2b:62:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57f291818d8719738268d844994a2e10824d4c9
Validity
Not Before: Sep 29 00:01:00 2026 GMT
Not After : Sep 30 00:01:00 2026 GMT
Subject: CN=d16b0b04a07cfbecfe4659364ac036199b6cbcfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bf:75:91:cc:4c:f8:2c:19:02:5a:b6:ea:7c:
23:f2:fc:cc:64:f8:01:fb:a6:c3:b6:87:6b:db:27:
3d:af:f5:c3:1d:d7:f3:5e:09:36:c1:3d:17:4a:0d:
4d:15:10:a1:0d:f4:75:57:ae:00:33:9b:33:df:02:
2f:18:5c:04:49:10:f5:b3:3c:2a:c2:b2:41:1b:ab:
b4:27:3a:56:3a:5e:04:dd:b6:b7:e1:14:6c:03:6d:
40:1a:eb:35:a6:f2:9a:88:fe:9e:aa:b0:fd:3b:50:
40:9f:35:2f:d0:e8:df:95:ea:b4:67:0b:07:79:6d:
e2:6b:20:8b:51:54:93:c9:87:60:aa:5f:4e:e1:d2:
a7:ad:64:db:2a:ef:77:ad:bf:87:cb:a2:1d:d1:97:
51:bb:19:f5:f6:61:dc:0f:ff:bd:3d:fc:b2:f6:5a:
98:a5:b5:48:a2:48:b0:63:f2:83:ce:31:86:8b:e1:
76:99:61:7a:25:e7:80:71:6e:c6:4b:ca:6f:9a:7b:
31:43:5a:ca:5f:66:84:68:52:f8:e5:4d:7e:d1:33:
10:68:f4:c9:ee:b7:c6:57:04:c9:7a:ea:ec:2b:df:
21:af:3c:ba:4c:36:e4:ac:97:61:42:9e:0f:f8:6a:
de:90:74:f5:b9:67:3a:58:58:7a:f7:9c:22:17:7b:
8b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6B:0B:04:A0:7C:FB:EC:FE:46:59:36:4A:C0:36:19:9B:6C:BC:FA
X509v3 Authority Key Identifier:
keyid:A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f9:4b:d6:7a:ca:d2:f5:ac:7f:bb:ff:d4:63:cc:a6:3f:46:
29:02:27:9a:64:16:af:0b:81:45:09:6a:f6:25:78:8c:9a:6d:
09:57:03:07:a2:16:9b:63:ef:07:4a:1d:71:f8:94:f1:76:ac:
79:1c:22:c1:dc:24:7d:75:d8:d1:a4:ab:d6:3c:37:33:65:c8:
6a:53:2f:8d:2e:1d:b5:2a:0d:a9:31:82:cb:d1:40:22:5a:10:
c8:55:71:6b:27:64:1c:31:7c:5d:a8:4c:0b:ba:be:9c:99:0d:
0a:1b:c2:e3:95:9e:7d:24:61:50:89:6b:d2:e0:25:54:97:93:
8c:ed:03:ca:0c:89:0a:56:9a:86:6e:85:b5:e4:f2:2e:5b:ba:
8b:f6:9d:ed:3d:9a:e4:c4:2f:83:63:de:b4:d4:75:6c:a0:d9:
16:e0:3c:8f:00:ed:10:83:4e:a1:0a:31:56:4e:98:49:c0:e9:
c6:04:15:3e:13:a4:c1:40:f4:0b:de:90:8b:dd:9f:ec:ff:d1:
70:a4:9d:dd:72:3b:e5:48:77:5b:84:dd:bc:9c:1b:3d:fe:ed:
36:2f:e5:4c:a3:d3:2f:e3:02:a5:7e:72:28:6c:86:04:0d:d7:
fa:fa:ff:77:eb:32:ec:b0:d0:f9:75:86:7d:1e:27:29:1c:57:
bb:04:58:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:57:10 2026 by rpki-client