Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
File: PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft (raw, json)
Hash identifier: rFb6lpOPMJ/3RHK/lUX6OQpEjBxBBayr6X1Uqum+5CQ=
Subject key identifier: 9B:06:6B:95:93:CD:0D:95:58:E2:38:19:8C:8B:34:2E:9D:15:4C:0F
Authority key identifier: 3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44
Certificate issuer: /CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44
Certificate serial: 01A0CA47BA05FA7F64776275E0640ED4E288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
Manifest number: 03A5
Signing time: Tue 22 Sep 2026 18:01:33 +0000
Manifest this update: Tue 22 Sep 2026 18:01:33 +0000
Manifest next update: Wed 23 Sep 2026 18:01:33 +0000
Files and hashes: 1: 52gTPJdQN2IyRsgf9iKgbNid4cI.roa (hash: 5lE63bjKcJ3503lnep/t29RA6BQhkuc041jpBZfJLfo=)
2: PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl (hash: ZI/WYCoyX7a0kQxvkutkB6BkWi3CEV4TuJUMuRSkU5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:ba:05:fa:7f:64:77:62:75:e0:64:0e:d4:e2:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8a0498ec3b4eb44f4df2541ae39180abb65f44
Validity
Not Before: Sep 22 18:01:33 2026 GMT
Not After : Sep 23 18:01:33 2026 GMT
Subject: CN=9b066b9593cd0d9558e238198c8b342e9d154c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:62:04:b1:a5:e2:98:43:09:cd:8f:d5:dc:2e:
8b:03:7d:ac:9a:ac:60:75:71:ea:a2:cc:5d:7e:92:
36:e2:23:f8:81:e6:5b:2a:06:36:04:e0:7c:53:51:
f6:10:b1:db:d0:eb:c6:2b:f1:72:70:44:c0:81:54:
e8:cf:b3:50:63:88:62:6d:56:e1:96:b0:99:a6:2c:
36:ec:64:89:0f:d2:5d:a8:84:b8:af:f0:77:9e:35:
e5:55:88:48:33:16:da:1a:16:cc:ba:d4:ff:02:fc:
0a:ee:84:b5:d5:c1:b9:1c:db:f7:8b:d9:d0:d2:3e:
39:91:30:5e:9c:e9:5c:8a:10:1c:f9:7b:31:73:96:
5f:22:8d:4e:2b:81:1b:3e:3f:11:3b:6a:ec:4e:03:
a7:51:f3:06:50:b6:99:81:bd:19:82:05:13:20:b4:
ad:cc:b7:a6:2e:80:39:7c:10:88:71:45:03:3a:05:
43:36:96:04:4a:58:42:01:b6:c3:ab:c2:e4:94:7f:
5f:15:0a:29:a5:ac:09:7b:22:b0:10:24:9c:8b:e5:
82:e8:ff:6b:a0:e8:04:63:7c:6f:97:24:8b:8b:d8:
f4:ec:83:34:62:2b:80:bb:cf:c2:17:5d:8a:d2:ea:
d8:84:c5:79:12:c8:98:5f:e4:47:c3:16:1d:f0:ac:
9f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:06:6B:95:93:CD:0D:95:58:E2:38:19:8C:8B:34:2E:9D:15:4C:0F
X509v3 Authority Key Identifier:
keyid:3C:8A:04:98:EC:3B:4E:B4:4F:4D:F2:54:1A:E3:91:80:AB:B6:5F:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIoEmOw7TrRPTfJUGuORgKu2X0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/02f63e-4ea2-43ac-abd5-0dab2312902a/1/PIoEmOw7TrRPTfJUGuORgKu2X0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:2f:3f:cd:a9:5d:a9:6a:f1:22:38:28:8d:46:86:3b:73:94:
ef:df:17:bc:69:a9:88:a3:cb:b4:10:65:23:8f:b9:f3:25:96:
0f:b2:ac:0a:b3:c3:21:9e:b2:e0:f3:f2:21:98:80:16:ad:75:
eb:e8:24:46:20:04:ab:8a:45:62:88:8d:4c:3b:ee:7c:47:2d:
04:62:3b:ea:b3:31:c8:12:c7:43:6b:69:33:e9:17:09:36:45:
c6:34:44:60:08:58:5f:e1:3e:6c:c2:86:ab:3f:b3:29:e1:5a:
26:f3:af:38:c9:34:0c:9a:79:2e:b6:03:8d:a3:9f:1b:fd:c6:
aa:06:b7:59:c6:81:fd:cb:2c:3d:da:ec:fa:41:5d:48:ee:1f:
40:3c:49:cf:c8:58:8d:6e:88:42:ae:dd:69:18:bb:06:f0:80:
91:f0:2e:f8:39:6a:9b:9f:ca:b4:2a:fa:20:60:7b:4a:33:22:
81:3c:16:30:10:a3:07:0c:c2:f8:fd:7f:2d:33:48:b1:6b:69:
c7:32:cd:74:e9:44:18:e3:1f:85:9b:b3:93:b6:83:c2:7e:d3:
9a:78:93:17:b3:8a:ef:c4:37:e1:d3:df:5d:75:6e:da:6e:f5:
f6:a8:6e:50:e7:fc:c5:a7:ea:1a:56:64:0a:a4:8c:2d:46:ee:
85:84:c8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:49:29 2026 by rpki-client