Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
File: pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft (raw, json)
Hash identifier: jdqMFv6JY2Q8XZRYxXQHBiL5Lvp3tQybBmt+6PLMV3k=
Subject key identifier: 72:5C:6D:C0:E4:C5:E9:CF:2E:1A:98:1A:1A:5A:5F:55:22:2C:78:FD
Authority key identifier: A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0
Certificate issuer: /CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
Certificate serial: 01A1347E913F8E84DA3C4AB8077F06F4A1B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
Manifest number: 1022
Signing time: Tue 13 Oct 2026 09:01:12 +0000
Manifest this update: Tue 13 Oct 2026 09:01:12 +0000
Manifest next update: Wed 14 Oct 2026 09:01:12 +0000
Files and hashes: 1: Z8sIth2fuLtbZU5YZYofujl3N3Q.roa (hash: OuZ+DZI7vPFF2f+5cYLFAwbQ08o0C2E+Uzidod1oA7I=)
2: pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl (hash: N43pGROgmW0PLGhileJ6pRu+5kQ2txUAg6DstM1lFak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:7e:91:3f:8e:84:da:3c:4a:b8:07:7f:06:f4:a1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
Validity
Not Before: Oct 13 09:01:12 2026 GMT
Not After : Oct 14 09:01:12 2026 GMT
Subject: CN=725c6dc0e4c5e9cf2e1a981a1a5a5f55222c78fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:60:a8:5e:92:54:c8:dd:f8:cf:f1:52:19:14:
db:75:90:f6:72:c1:ee:78:67:42:85:f2:51:31:b3:
30:de:04:1a:c0:59:52:96:4e:1d:bb:49:0a:2f:f2:
70:52:67:bd:5a:cb:db:87:c2:09:2d:e5:14:84:36:
8e:bf:5c:98:5c:cc:04:ed:83:0c:9a:be:89:11:f7:
56:5b:03:e1:02:e5:b5:2a:4f:fb:f9:35:34:5f:75:
a8:82:a8:73:ac:cd:cb:ca:c3:36:4d:01:3a:bf:6b:
8e:81:74:9f:53:68:c7:34:da:f1:8d:0c:85:07:e0:
f3:50:17:94:a9:bd:b7:17:1e:3d:42:10:ed:df:9f:
e5:c7:22:9f:21:f9:d6:c8:17:bd:55:cf:ca:bf:fb:
53:4a:ca:59:5b:1a:9a:fd:14:af:49:99:6a:86:14:
c7:75:f6:c1:4d:1a:88:31:44:fd:88:f6:25:88:4a:
32:38:d2:1b:46:19:cd:46:a6:fa:2a:7d:88:94:50:
ba:25:cb:fb:28:a3:b3:0a:53:aa:f1:9a:74:76:64:
bb:12:f3:01:e9:99:5e:d2:ff:15:de:70:b2:a7:58:
e9:4f:13:30:48:00:a2:98:67:50:cd:a0:5a:c5:d5:
4d:ec:c9:12:d5:cb:d6:f0:46:9b:95:a6:22:17:68:
93:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5C:6D:C0:E4:C5:E9:CF:2E:1A:98:1A:1A:5A:5F:55:22:2C:78:FD
X509v3 Authority Key Identifier:
keyid:A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:08:31:7a:e3:21:b8:8e:1e:6a:c2:2d:62:ad:23:63:4c:f5:
d3:a4:dd:20:c0:df:da:f2:9a:62:19:dd:01:4c:a8:29:7f:a5:
5b:d4:40:59:86:ac:88:f8:e9:fa:db:1d:d3:0f:dc:2c:6f:25:
73:d9:95:4d:67:84:14:58:28:cb:01:7a:cd:c8:f7:18:33:f8:
51:97:fb:12:db:83:9e:8b:3b:3f:56:de:bb:78:b8:ee:cb:d5:
b8:36:6c:7f:73:6d:95:d0:65:ef:e4:20:71:df:33:58:46:fb:
1e:c5:bd:1c:76:c4:0b:62:bc:95:a5:b7:c7:95:cd:01:f3:20:
13:12:e7:aa:ce:56:d9:aa:8e:30:ac:f1:b4:35:cc:dd:41:42:
35:a3:20:dd:e4:58:b9:c9:3b:19:d8:45:74:ce:79:bf:1c:cb:
ea:38:8e:cb:94:ab:37:ff:f6:bd:8c:54:cc:2d:2c:71:06:66:
9e:a8:1f:01:12:a0:4b:ed:c3:5e:7a:a7:c9:e1:82:d9:cd:42:
7b:5a:82:f8:67:6e:52:2b:f3:ec:f8:0e:1a:f3:b1:7e:92:b9:
50:9e:6d:63:c8:10:ef:9b:02:98:10:95:00:f5:ee:b7:35:2d:
d4:8f:0d:26:d0:8d:14:8d:d5:ad:83:98:51:e6:d6:20:5f:4c:
6b:dd:da:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 20:30:37 2026 by rpki-client