Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
File: pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft (raw, json)
Hash identifier: 1VVM4DJP2eLIm1Jv09r0s9ldmkRW70fJD/838D5ILq8=
Subject key identifier: D4:24:5C:F1:00:B4:07:CA:37:BE:04:89:65:BF:E3:E3:55:B6:81:7E
Authority key identifier: A4:F5:53:3A:52:7B:26:4C:A2:E8:37:32:85:D7:80:D3:3A:2B:D0:A1
Certificate issuer: /CN=a4f5533a527b264ca2e8373285d780d33a2bd0a1
Certificate serial: 01A0E173D8EA26EE99B91D65301C0ED99724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
Manifest number: 0708
Signing time: Sun 27 Sep 2026 06:01:00 +0000
Manifest this update: Sun 27 Sep 2026 06:01:00 +0000
Manifest next update: Mon 28 Sep 2026 06:01:00 +0000
Files and hashes: 1: pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl (hash: ByvXpADteIx5PAaTLiDFYUpy05nEwZ3o6WoI74OU9vY=)
2: t83QwmnsF94N1e2quVeWFqxv3Q4.roa (hash: S00r80MkvAcmYicBdHFKql/0j/7ix5B+Lwxl0Q6uMXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:73:d8:ea:26:ee:99:b9:1d:65:30:1c:0e:d9:97:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f5533a527b264ca2e8373285d780d33a2bd0a1
Validity
Not Before: Sep 27 06:01:00 2026 GMT
Not After : Sep 28 06:01:00 2026 GMT
Subject: CN=d4245cf100b407ca37be048965bfe3e355b6817e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:57:ef:b6:b6:5e:8e:2b:9b:7e:42:df:b1:b9:
67:2c:51:4f:a8:d9:3b:e0:9d:84:f8:89:02:de:f9:
4e:ff:59:47:ab:b1:79:2d:71:2f:1e:cc:07:d8:c0:
7e:11:6a:3b:9a:52:d2:1c:59:c3:4a:81:af:bb:26:
d4:bf:07:22:9f:bb:a9:2b:19:18:64:78:5d:e8:d6:
b9:18:6d:f8:3b:01:b1:0b:ce:7d:ef:6a:56:ac:67:
97:28:38:9a:fe:1d:aa:0e:aa:dd:d2:ec:1b:39:03:
22:ac:be:cd:1a:62:7a:ca:35:dc:09:2e:de:c5:09:
d5:97:19:83:76:f1:48:3e:1e:bf:27:e9:e4:44:3e:
6b:6b:9e:72:7d:e0:1f:2f:db:93:4e:a5:c5:f3:34:
47:55:a5:ee:ac:ea:b3:f7:74:69:5b:fc:60:8c:5f:
c3:d6:22:f1:6f:53:63:df:13:b7:c5:91:07:4f:ef:
69:51:b1:fb:be:1b:4c:64:3e:5e:0f:30:4c:d6:37:
70:2c:fc:7a:fe:3a:41:f4:70:98:d1:13:4c:cf:c3:
7c:2e:2a:c9:68:6a:48:dc:fa:7c:9a:37:89:63:41:
c2:ab:b2:d9:72:7f:01:d3:0f:59:81:55:63:bb:25:
bf:6e:aa:da:ec:ea:d7:4f:1d:d3:aa:94:a0:5d:b8:
c0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:24:5C:F1:00:B4:07:CA:37:BE:04:89:65:BF:E3:E3:55:B6:81:7E
X509v3 Authority Key Identifier:
keyid:A4:F5:53:3A:52:7B:26:4C:A2:E8:37:32:85:D7:80:D3:3A:2B:D0:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:39:20:9e:f2:d3:53:08:84:4b:b9:19:c2:eb:ff:9e:d3:e8:
c2:47:7e:e0:4f:76:b7:4e:af:ba:be:ac:54:62:74:19:08:01:
82:e2:9c:cb:6d:d0:e5:47:3a:49:a9:fa:54:cf:69:ce:1c:e8:
56:78:ad:6b:39:11:30:f5:2a:13:6a:bf:7f:2c:05:87:51:0c:
05:a1:1a:37:e5:a3:ea:e4:4d:c8:d1:b5:ed:c5:5b:eb:9e:0d:
3f:be:c9:47:9f:4d:c3:90:03:d3:02:fe:7a:cb:e5:a2:13:ab:
63:5f:05:bd:d8:a3:c2:96:78:20:28:e2:ba:19:71:6a:ad:7b:
23:f2:7e:6a:d0:21:cb:4c:5b:a8:ab:ca:f3:05:2f:a5:cc:51:
5c:33:57:27:19:2a:20:e8:ac:28:b7:a8:c2:fd:71:42:87:35:
70:80:c4:b3:43:1d:70:c3:5d:cf:ce:6a:90:0c:72:69:fe:4b:
6a:d8:99:93:10:8a:f9:5c:2d:c2:57:7a:14:2d:5f:90:15:68:
65:1f:03:34:ed:d5:f9:14:36:c8:9f:40:65:3b:95:c9:3a:d4:
66:5c:b1:e3:ed:44:51:6a:9c:f2:e7:ac:39:44:1d:8c:fa:df:
90:a4:7e:cf:39:c6:fe:9f:b3:f1:79:a4:a8:d5:78:1d:7f:21:
48:5d:53:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 18:54:16 2026 by rpki-client