Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
File: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft (raw, json)
Hash identifier: KTrd3+HYjYtbp9kOboUb33QXwYvisYzYHnEyHrUWXWk=
Subject key identifier: 8E:E4:CD:48:4E:F7:F6:D6:DD:60:45:57:77:44:57:8C:A0:B5:33:5E
Authority key identifier: A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95
Certificate issuer: /CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
Certificate serial: 01A145A88C4460BA79C823CA54C43682DC65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
Manifest number: 1AA8
Signing time: Fri 16 Oct 2026 17:00:36 +0000
Manifest this update: Fri 16 Oct 2026 17:00:36 +0000
Manifest next update: Sat 17 Oct 2026 17:00:36 +0000
Files and hashes: 1: ZMTWhcJ1e7tvXHUUl4ANoGMrIWk.roa (hash: 9yOiqGJYeL5bi8PHF9fNeVVcmhOJdy6bDsiWR0m6Ve0=)
2: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl (hash: Z03iWtIKGqranPlMDyzATkkKFcUxnja7SD6NsUoFXzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:a8:8c:44:60:ba:79:c8:23:ca:54:c4:36:82:dc:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
Validity
Not Before: Oct 16 17:00:36 2026 GMT
Not After : Oct 17 17:00:36 2026 GMT
Subject: CN=8ee4cd484ef7f6d6dd6045577744578ca0b5335e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:66:4e:7d:75:49:d6:97:6c:af:64:b0:15:f9:
de:4f:cb:19:2b:6a:22:65:dc:a5:be:f4:6b:a5:aa:
94:ae:66:76:3f:ba:0a:e0:07:d8:ab:ea:02:1e:d9:
54:b0:b8:fc:c0:44:6e:74:f9:a6:12:0c:4f:b3:d5:
7a:04:2f:94:d9:9e:17:c0:1c:91:6f:67:42:7e:b1:
b3:0d:1a:d4:ae:d9:a6:92:77:f8:1c:32:16:e3:57:
e8:13:cd:fc:55:80:05:60:59:51:b3:c1:9d:a3:3c:
43:81:09:83:54:a5:24:55:94:23:3c:79:9e:b5:56:
98:56:11:e6:a6:7c:d4:7f:3c:6b:7e:e7:72:10:30:
61:86:2b:36:bb:6f:cd:3a:18:07:32:a6:fa:1c:64:
44:71:2c:7a:a4:39:46:0f:22:83:92:e0:f9:c2:62:
55:51:95:06:59:5f:af:6a:94:a9:66:f3:ed:7e:13:
e1:da:50:72:55:0a:f6:b2:07:01:66:51:50:1d:11:
1f:68:41:98:52:c8:b9:43:e1:47:56:38:d6:b1:94:
0c:b8:7b:b5:81:04:cf:e2:01:b5:8f:9a:be:a8:63:
f7:48:5f:21:b1:d2:79:cd:86:97:50:c4:71:03:2b:
7c:80:c8:3d:15:6a:2a:f5:cd:ca:51:51:16:98:c9:
5f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E4:CD:48:4E:F7:F6:D6:DD:60:45:57:77:44:57:8C:A0:B5:33:5E
X509v3 Authority Key Identifier:
keyid:A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:72:d2:07:97:21:55:cc:6d:e1:00:c3:4a:9d:64:06:00:c7:
92:11:87:67:62:a3:f2:36:e3:c4:89:6f:85:47:2b:72:a6:f2:
1a:c2:e2:46:24:b8:fd:34:37:56:08:a0:b9:7c:f9:e6:16:00:
a2:c8:ea:68:1a:e3:30:ab:02:35:fb:58:0b:58:66:22:b0:da:
3c:b8:15:6c:a0:a3:06:d1:3f:d3:f7:3d:d2:d3:33:b5:ec:1a:
49:b5:e3:95:7c:54:53:20:f1:57:c7:b8:d9:db:99:af:32:a0:
54:ac:8b:a5:a7:b2:f5:17:aa:bb:f0:17:92:5c:dd:c7:11:22:
a9:bd:b5:fb:f9:03:39:28:fd:5e:e8:a1:cc:a2:7d:7f:6d:8f:
ab:93:ff:ab:84:2c:22:8c:9b:a0:ac:36:dc:1b:8d:7b:4a:2c:
95:c0:d8:44:6b:1e:50:0e:99:36:85:8a:b5:e3:7c:23:72:66:
90:9b:6e:62:7d:4d:42:80:ea:62:88:ea:48:e7:aa:69:52:f5:
0d:7b:95:0c:22:68:8a:41:6a:d2:fa:40:93:26:e9:6a:ba:f4:
54:f8:d6:5a:e1:cd:c9:72:48:e6:16:33:ee:9c:91:fe:89:73:
b3:b0:b9:c2:2c:0f:13:bd:d4:55:4e:ec:e2:f0:05:f8:50:bd:
a0:ab:6a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 20:32:15 2026 by rpki-client