Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
File: pByW6THu5BuJnWLH24NjNEajxCs.mft (raw, json)
Hash identifier: smCujEdc5r81VrxlwtZJKMHYsTltVtmadPXX3EdvMWw=
Subject key identifier: 3A:1B:3C:96:62:2F:D7:74:8A:9A:3F:0A:1D:99:AC:9C:A8:63:27:12
Authority key identifier: A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B
Certificate issuer: /CN=a41c96e931eee41b899d62c7db83633446a3c42b
Certificate serial: 01A12F21C823286C6ABDADEBBDE2C66C52CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
Manifest number: 1A9D
Signing time: Mon 12 Oct 2026 08:01:45 +0000
Manifest this update: Mon 12 Oct 2026 08:01:45 +0000
Manifest next update: Tue 13 Oct 2026 08:01:45 +0000
Files and hashes: 1: 08erSysabwz5oeBdP8PLy755AHA.asa (hash: RIOLOsPK24oYYh42JNS8I14+Rr+oEV6iLUu+Usr4/PY=)
2: Ug2vF1vgPHmEqRhi6uOzDzFa8k4.roa (hash: J3X4+yL+W+OJhZWrAFHs4AhqGxikLkSzill4Qp4q87Q=)
3: pByW6THu5BuJnWLH24NjNEajxCs.crl (hash: LlsVpM4iIW9kXzKwkHsyewNEHF0csWxWmJG9uJyfwVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:21:c8:23:28:6c:6a:bd:ad:eb:bd:e2:c6:6c:52:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41c96e931eee41b899d62c7db83633446a3c42b
Validity
Not Before: Oct 12 08:01:45 2026 GMT
Not After : Oct 13 08:01:45 2026 GMT
Subject: CN=3a1b3c96622fd7748a9a3f0a1d99ac9ca8632712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e9:2f:12:dc:bb:fb:12:f9:da:34:08:da:e7:
16:fa:bc:82:43:bf:48:cf:bb:aa:9f:fd:ea:81:b5:
8d:6e:80:f9:e9:06:84:83:78:6e:02:5d:c8:51:bf:
9b:13:1a:6b:9b:a5:32:28:59:44:ce:8e:a6:a3:11:
8e:17:bf:14:ed:1e:44:9f:07:24:fb:f0:da:59:4d:
40:46:9c:8f:bb:e2:24:a4:98:7d:ac:41:e7:3f:68:
a5:99:04:52:8f:e1:4e:80:03:42:37:e4:79:8e:4b:
7a:fd:3e:bc:83:05:1b:53:48:97:39:bb:92:a5:49:
63:25:60:57:4b:66:c7:de:2b:05:23:51:a0:62:a6:
3e:ed:f6:58:7e:4e:b9:8b:b2:de:51:f9:47:da:47:
16:78:ec:11:dc:1f:1a:c2:e9:75:34:13:6b:54:6e:
df:ea:6e:23:45:0a:2f:bf:06:96:b7:b3:08:6d:86:
d1:5d:87:72:10:da:74:a9:5f:cc:34:4a:e9:9b:51:
6a:5e:39:52:c0:ac:54:0a:6f:4c:21:16:07:99:40:
e8:79:16:d9:a5:49:32:e6:64:1b:d5:87:7f:85:e3:
2a:e1:08:b1:2c:10:6f:fb:11:df:93:b3:32:71:29:
d7:57:dd:16:bd:7a:1f:34:c2:b7:2f:c3:e1:99:28:
65:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1B:3C:96:62:2F:D7:74:8A:9A:3F:0A:1D:99:AC:9C:A8:63:27:12
X509v3 Authority Key Identifier:
keyid:A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:31:ef:56:97:eb:2b:7f:c3:7d:5e:07:09:34:15:7f:e3:e3:
6a:33:85:5b:bf:3a:f3:6d:00:22:df:25:be:d7:03:ca:ea:ac:
33:27:3c:15:ab:34:5f:dc:1c:90:5c:8b:82:14:5e:ef:db:85:
63:6a:12:9d:b3:90:44:7f:e1:1a:35:ec:4e:3f:82:1c:8b:c9:
f4:35:29:cf:48:c8:2d:d8:cd:8d:95:8e:63:da:75:8a:cf:e0:
21:9d:34:27:37:31:e6:7f:86:f6:59:9c:38:bc:d9:a3:de:02:
99:89:6f:d0:d6:7f:94:94:ea:5a:85:9f:5a:96:35:bb:7d:71:
2a:d3:9d:cd:99:cf:2b:44:f8:ca:2c:42:3d:df:11:eb:c4:d2:
58:07:ab:f6:06:3c:9d:a5:26:c4:8b:16:23:95:30:47:bd:eb:
73:90:b0:0c:3c:2b:33:c7:54:53:89:c6:8a:c5:f8:38:53:c6:
93:57:c7:b2:96:90:91:4a:67:74:a0:c8:9e:7f:14:34:fc:a7:
9e:88:37:81:7c:2a:ba:ce:00:bf:b5:76:1e:e8:4e:6b:b4:49:
d8:1b:0e:5a:e0:a2:df:e6:4a:a0:90:98:46:8a:31:bc:bf:d6:
1c:4c:9c:8e:c8:14:36:1c:3c:9f:97:98:59:98:8e:6a:79:3b:
01:6d:0b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 15:17:51 2026 by rpki-client