Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
File: to-PMlFKGD6Xejx982Rz1WJgxKQ.mft (raw, json)
Hash identifier: Xa52Pdn7RZPITF/NmOPK7PEMk8DxR98VwilBK2B8mI0=
Subject key identifier: 9C:3E:B6:C3:29:D6:02:70:B9:96:51:54:FB:EE:85:A2:B8:3A:C8:99
Authority key identifier: B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
Certificate issuer: /CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Certificate serial: 01A0EB8A645D968A2B45191623309F39CB2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
Manifest number: 0EDB
Signing time: Tue 29 Sep 2026 05:01:50 +0000
Manifest this update: Tue 29 Sep 2026 05:01:50 +0000
Manifest next update: Wed 30 Sep 2026 05:01:50 +0000
Files and hashes: 1: UycNDBh6XIKJ82eOMM9nsWm3RUU.roa (hash: j5CuV0Ecvfd3t9K7/xrfKK4OIBdyHHKPYNpzUJ5l9jc=)
2: to-PMlFKGD6Xejx982Rz1WJgxKQ.crl (hash: tIdUYWUpdWC2Tv/bPhQcwc6n+Ny4wAQUeld+0sVGhoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 05:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:8a:64:5d:96:8a:2b:45:19:16:23:30:9f:39:cb:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Validity
Not Before: Sep 29 05:01:50 2026 GMT
Not After : Sep 30 05:01:50 2026 GMT
Subject: CN=9c3eb6c329d60270b9965154fbee85a2b83ac899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:32:29:5d:6f:85:ea:41:15:44:3a:aa:61:84:
f1:f6:70:c8:bd:5a:b6:1e:48:f7:1d:bc:d2:dc:c4:
79:ef:0f:4e:ca:f5:7e:3d:83:af:37:a9:c2:2b:d1:
c2:28:1c:60:26:91:0a:43:92:07:a7:c1:b4:d8:19:
25:da:b5:a7:0a:a0:ad:f4:3d:19:32:c1:f7:dc:ba:
1c:a7:5a:10:66:5c:c0:3f:26:ac:7f:83:b5:d8:ff:
45:89:41:b2:7b:aa:58:00:d8:ce:a1:8b:4f:0d:be:
1f:2a:f2:85:08:af:28:e6:9f:e6:f1:3d:45:1b:35:
63:b8:50:3a:21:59:29:76:8b:0a:08:14:52:e8:02:
e4:3f:2d:93:26:1a:2f:e0:30:f6:17:11:5a:fc:a7:
af:00:9c:86:3f:06:96:36:03:f3:3a:a7:e4:fe:9f:
ca:bf:ef:20:2a:5c:0e:44:f1:cf:da:72:15:b6:18:
60:d5:8f:7a:cb:c3:c4:c9:35:2a:28:7f:af:a7:63:
f0:34:32:2c:11:62:c5:7e:91:20:74:70:36:1d:82:
79:23:4a:6e:b3:52:5b:41:49:53:c0:e5:b4:af:f4:
b1:f8:e4:cc:97:a8:da:2f:59:1f:f2:91:ab:a1:09:
d1:a9:0d:26:5f:35:ec:61:20:5a:00:da:c4:6b:ac:
18:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3E:B6:C3:29:D6:02:70:B9:96:51:54:FB:EE:85:A2:B8:3A:C8:99
X509v3 Authority Key Identifier:
keyid:B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:c6:cc:b2:13:d7:72:4a:16:f4:b1:42:f5:95:f9:5a:bb:83:
48:4a:92:91:bd:a6:59:0d:03:c4:f8:18:e9:66:a0:df:eb:8f:
70:93:ae:63:6e:9c:a7:e1:79:2b:be:27:b5:ca:23:4d:83:41:
41:9a:ce:80:4b:70:82:f1:ee:c9:e7:5a:f2:ac:39:94:36:5f:
ee:a4:03:f5:32:ff:9f:24:9d:9c:2d:7b:1b:cb:ea:c3:fc:5c:
08:a0:a1:96:c1:ec:24:f2:b1:73:12:f1:21:cb:18:a6:7d:ec:
41:a4:fd:35:36:4e:a5:36:45:9d:4d:f3:5a:7c:58:8f:2d:e9:
59:08:49:49:88:81:b7:4e:83:23:6d:05:4d:c2:49:3a:34:5b:
fd:92:b9:f8:af:db:28:21:72:59:7e:c5:6b:62:05:d1:3f:cd:
0a:ac:90:15:a7:c6:b5:54:79:b5:ec:e9:1b:80:97:cf:ad:3b:
15:7f:dc:b7:32:54:67:1e:43:e5:fc:4b:74:3d:cb:e0:b1:5f:
bd:48:01:82:b5:9c:2d:4c:64:8e:c0:9a:f6:d8:9d:58:d2:44:
65:a5:e6:da:c0:db:d0:b9:57:f1:ec:ab:6c:fa:48:ac:62:c3:
f2:73:b7:30:4f:23:41:c1:9c:5d:61:dc:1f:f5:58:9e:9a:55:
49:55:5e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:19:22 2026 by rpki-client