Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
File: _pLvNTIb-Pcic0v_nfpj-9DwaQo.mft (raw, json)
Hash identifier: +coxNNVRwNo2J43H0rzdorJ//l1gfLzMk+e8DA9kNQc=
Subject key identifier: A9:56:E7:97:6B:BA:09:4C:EE:0F:FB:88:F7:F9:89:8E:84:AD:BD:7D
Authority key identifier: FE:92:EF:35:32:1B:F8:F7:22:73:4B:FF:9D:FA:63:FB:D0:F0:69:0A
Certificate issuer: /CN=fe92ef35321bf8f722734bff9dfa63fbd0f0690a
Certificate serial: 01A0DF4EE0428C05B91C4299B51B6057BC1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
Manifest number: 13DF
Signing time: Sat 26 Sep 2026 20:01:23 +0000
Manifest this update: Sat 26 Sep 2026 20:01:23 +0000
Manifest next update: Sun 27 Sep 2026 20:01:23 +0000
Files and hashes: 1: UBGkKBFV2Aa7JBw4pAiIxve4fn0.roa (hash: 9cBrWgFQDzVn82NDm23DCCjfy/yynDnSQwWNQi58HvU=)
2: _pLvNTIb-Pcic0v_nfpj-9DwaQo.crl (hash: Jl8gAPK5xFWH49jdDfTuNW7JWKyCvGxF8Z6Vhj3etG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:4e:e0:42:8c:05:b9:1c:42:99:b5:1b:60:57:bc:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe92ef35321bf8f722734bff9dfa63fbd0f0690a
Validity
Not Before: Sep 26 20:01:23 2026 GMT
Not After : Sep 27 20:01:23 2026 GMT
Subject: CN=a956e7976bba094cee0ffb88f7f9898e84adbd7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:40:18:d7:13:8f:1c:7c:e5:d8:d5:ce:58:26:
ee:7c:c4:65:3b:e4:42:db:3d:c9:0c:a9:0f:b6:9e:
63:20:9f:99:4d:77:32:a8:1e:e4:d2:e8:45:01:07:
8d:44:cc:a4:2e:d9:64:19:17:5e:61:ae:30:c5:14:
81:47:f1:77:a9:20:4b:01:33:a3:72:f4:9c:a7:11:
05:97:e4:b4:2b:bf:38:62:81:ba:db:e9:72:e0:32:
74:53:1d:d3:08:bb:90:2f:2d:d3:7e:76:ca:40:0e:
b5:7a:17:18:e4:cc:56:27:7a:d5:15:ee:7f:d0:c4:
59:e1:0d:20:6d:f6:d1:a6:d4:9d:97:6e:b1:aa:22:
b3:f5:99:db:1c:6b:66:3f:86:92:53:a7:f7:b4:82:
4b:4e:99:27:ac:c9:17:e2:44:39:74:97:be:0a:45:
4d:86:b1:77:89:55:2d:4b:fd:3f:06:05:7a:11:5b:
38:16:a0:c8:e6:1f:8f:fd:0f:89:e8:0d:0c:da:35:
31:63:26:3a:21:3e:50:e7:51:54:de:82:25:d3:d2:
a2:33:b2:a7:8f:41:fb:cb:67:ec:15:b7:3e:52:0d:
84:e5:cc:10:78:97:5b:a6:c4:cf:e6:a6:ea:64:d1:
78:ba:28:19:80:e3:ca:2e:b5:23:2f:42:00:e2:e0:
d2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:56:E7:97:6B:BA:09:4C:EE:0F:FB:88:F7:F9:89:8E:84:AD:BD:7D
X509v3 Authority Key Identifier:
keyid:FE:92:EF:35:32:1B:F8:F7:22:73:4B:FF:9D:FA:63:FB:D0:F0:69:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:8d:4e:25:71:29:5b:d1:45:79:33:d8:e9:3a:80:0c:50:3a:
e3:9e:25:81:40:8d:ae:4e:c1:6a:e9:e7:17:5a:8b:e2:af:68:
12:0a:db:30:69:6c:53:85:8a:5b:d2:0b:f6:03:63:e5:51:df:
33:fd:be:77:5a:24:24:32:d2:64:2a:8d:fb:f5:fd:26:68:15:
4c:8f:a5:a7:57:f7:8e:59:7a:3e:a4:6c:8c:c8:68:27:53:48:
4b:b9:e7:a4:97:9d:a5:1c:58:31:04:f7:27:ac:4e:35:7b:58:
6f:8a:21:5a:f8:a9:6f:01:ad:08:a1:4b:bc:c2:55:77:6f:1d:
13:23:a9:e6:56:6d:f3:32:7a:84:1c:85:4c:a5:5d:72:f1:a6:
c5:1c:f6:44:5f:e4:d7:22:67:43:46:bf:10:45:a9:c8:2d:c0:
0b:b6:6c:75:6b:46:70:b5:76:33:d3:b6:34:5b:68:af:57:80:
65:3c:68:15:2a:d6:0d:3f:57:83:f0:1f:16:15:1e:50:3b:b3:
c5:c2:46:92:64:29:ef:73:d1:b9:c2:d6:17:4f:a7:aa:9f:0e:
25:fa:80:4b:da:66:12:c0:0e:e8:49:d5:fa:9c:a0:dd:68:75:
ff:46:4b:15:23:86:e3:ff:b4:7f:db:a2:ee:7e:2c:75:08:5c:
29:52:b5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:24:33 2026 by rpki-client