Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
File: pDOBaM2dWvBgQBP8QnQSb8WB88s.mft (raw, json)
Hash identifier: d7OTIA17MERRgkc+BqDdrLq5eQoFdR6M10T1JmVQHHY=
Subject key identifier: 2F:DD:0E:D0:11:EB:E5:4D:A0:9A:35:1A:FA:C5:AF:63:4D:A9:0E:5B
Authority key identifier: A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
Certificate issuer: /CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Certificate serial: 01A10BB918591BC0A55023F47DCDC4E55434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
Manifest number: 1127
Signing time: Mon 05 Oct 2026 11:00:42 +0000
Manifest this update: Mon 05 Oct 2026 11:00:42 +0000
Manifest next update: Tue 06 Oct 2026 11:00:42 +0000
Files and hashes: 1: 5t5_5MqWJNollBMPqdFua97XfMM.roa (hash: KTz9ZppQRmMMx9XPLOR36od8YyLkBIE5elG5FeL6i2Y=)
2: FSHrqYhJli1tSVyjlj_58RREeXk.roa (hash: uSCHyOKTAFU7tgMnLJvTfArI/447X68lLDwgFscWtJQ=)
3: pDOBaM2dWvBgQBP8QnQSb8WB88s.crl (hash: d/vfg8RCXZJLmhFwfs8+n6MEFuJL46jSop9cL94cjJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:b9:18:59:1b:c0:a5:50:23:f4:7d:cd:c4:e5:54:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Validity
Not Before: Oct 5 11:00:42 2026 GMT
Not After : Oct 6 11:00:42 2026 GMT
Subject: CN=2fdd0ed011ebe54da09a351afac5af634da90e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:20:19:b1:2c:37:46:34:a6:51:2a:2e:d2:42:
e0:59:ed:36:ec:c0:94:a8:04:e1:e6:e9:0f:99:9a:
eb:f1:c3:86:28:c6:38:6b:30:e6:04:ea:2c:2a:0a:
3e:a4:be:33:da:3b:62:09:71:bf:20:c7:90:01:e3:
e3:5b:34:d5:80:5f:04:79:25:94:8e:3a:e6:a7:2b:
09:26:b9:af:19:8e:a6:da:1f:3b:19:34:f4:81:87:
ad:29:f5:20:09:06:04:94:13:89:71:79:0e:a2:8a:
62:ec:79:a5:2b:c3:db:36:1e:0b:8a:2b:c2:f4:9c:
8e:05:9a:f2:c2:21:3a:2f:99:be:48:64:dc:d8:03:
1e:08:b5:b0:50:cc:78:eb:bd:ac:84:75:1c:50:ca:
6f:75:a5:c5:c8:66:16:59:c5:86:80:6c:91:30:b3:
21:20:93:d6:63:89:71:b2:44:d5:58:c4:4a:d6:b0:
8f:be:cd:43:8b:2c:3f:3c:f5:0f:e7:a0:66:8b:1f:
4a:f4:89:5f:14:75:84:f4:93:18:20:c5:ca:c2:87:
eb:ea:aa:2f:18:97:73:54:15:e1:84:27:96:bb:80:
c9:f3:0b:dc:71:17:47:85:a9:aa:7c:50:34:87:43:
3e:72:82:8a:82:bc:c0:b0:92:d1:50:43:02:44:6b:
79:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DD:0E:D0:11:EB:E5:4D:A0:9A:35:1A:FA:C5:AF:63:4D:A9:0E:5B
X509v3 Authority Key Identifier:
keyid:A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:76:81:78:24:29:2e:3e:e9:c2:43:66:58:60:35:27:07:6a:
e8:f4:81:85:f1:d9:f1:03:91:78:c0:f0:00:38:b6:75:ea:39:
2c:c0:0b:34:b2:f3:a0:64:b5:d3:1b:39:37:3e:4d:d4:dc:49:
f3:fd:c1:11:19:46:13:a7:91:16:85:61:a2:f0:93:f5:d0:89:
9f:6c:09:f4:41:99:ea:75:98:9f:59:58:31:18:df:11:0e:5d:
13:38:64:45:69:4e:1f:64:0b:bf:f2:6f:8b:c5:fd:24:d6:04:
39:83:5a:2f:11:78:5a:a3:82:82:ac:e6:8e:0c:4b:70:1e:5a:
d6:df:80:10:05:9f:07:71:2b:e1:8e:c8:a7:89:4c:85:5e:ea:
98:5a:99:e8:2b:68:dc:c1:0f:d3:e8:2a:21:2c:7e:5e:99:34:
98:75:02:be:36:bf:f4:a0:36:8f:99:d5:4f:dc:a4:13:ad:8e:
c7:02:e0:2e:9c:41:c0:81:fd:f3:e0:0d:47:c0:42:a9:ce:17:
ae:26:d4:51:03:f5:ff:69:91:27:43:63:76:7d:4f:c2:19:cf:
20:73:38:be:05:2b:e8:c4:7b:83:c8:93:20:0b:cf:88:00:1e:
db:9c:a3:88:70:c6:aa:6c:4e:93:18:8d:bb:f2:cd:d1:c1:35:
0c:71:7a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:35:31 2026 by rpki-client