Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
File: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft (raw, json)
Hash identifier: 04HSDHeFVKzkl61PrrHQKeC/I7GFKUatBtgrws+gw3g=
Subject key identifier: AA:47:F8:E9:58:79:F9:CE:CE:6C:14:0D:B9:2A:8F:E4:FB:7C:49:AC
Authority key identifier: A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
Certificate issuer: /CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Certificate serial: 01A10B4B9BD26E854DB80A4AAD7A96DAC61C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
Manifest number: 1A43
Signing time: Mon 05 Oct 2026 09:01:06 +0000
Manifest this update: Mon 05 Oct 2026 09:01:06 +0000
Manifest next update: Tue 06 Oct 2026 09:01:06 +0000
Files and hashes: 1: Ccm4qTaFVoeEBQGq7AdHkms3sbE.roa (hash: sNTPIkd73n/EU/DbG6UaXBNfki1s2gEUwvwhofodNus=)
2: O_JWRj5Djic4pjl6umhJDPP7BuI.roa (hash: oXNGdNb1x3OVweYzH4oXuC+MRGHHCd9nwAtXQGgCLxw=)
3: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl (hash: XqN3SVNMGYMAsr3w8w8+DYuuMiEMNK+DHmmGMTL+ZyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:4b:9b:d2:6e:85:4d:b8:0a:4a:ad:7a:96:da:c6:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Validity
Not Before: Oct 5 09:01:06 2026 GMT
Not After : Oct 6 09:01:06 2026 GMT
Subject: CN=aa47f8e95879f9cece6c140db92a8fe4fb7c49ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c1:29:75:35:1b:8e:b9:3b:c0:92:80:77:a3:
77:93:03:92:a0:04:46:c4:42:7f:2f:bc:02:f2:d0:
89:77:e4:b3:c9:23:ee:34:93:f0:2a:27:88:6a:ce:
d9:9a:e6:74:88:09:a5:b7:a4:3a:1f:94:5a:7c:7c:
d4:54:ca:c2:46:cd:40:a1:cf:2b:20:58:68:fe:07:
04:a2:5b:b6:79:f0:07:e8:23:f1:80:10:3f:96:bf:
3c:64:dc:2e:7f:c1:7c:d4:45:9b:68:58:0e:6c:c0:
0c:31:05:2f:90:d9:13:93:70:0b:ca:76:1f:4d:f1:
d7:a9:61:00:ad:18:48:57:f3:ab:9a:52:e9:ce:4b:
af:38:3b:1a:b2:88:c8:ca:41:15:a5:e9:70:4f:5f:
79:3f:88:c8:f8:39:8c:8d:b5:fe:b2:9f:97:15:58:
32:b3:e7:19:46:6b:8e:b9:81:b6:e4:bb:91:16:dd:
9b:5f:28:69:10:8d:23:df:c7:04:ff:06:69:0f:61:
cf:c7:86:88:33:30:64:17:fe:0c:52:7e:7c:87:e2:
0e:d8:05:08:50:3e:72:44:cd:b4:1f:9c:28:d0:7e:
7e:d0:84:eb:52:8c:e6:ca:cd:c8:61:f9:9e:52:f7:
a6:88:6d:99:b6:e5:b6:16:d0:79:81:6b:82:9f:3e:
56:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:47:F8:E9:58:79:F9:CE:CE:6C:14:0D:B9:2A:8F:E4:FB:7C:49:AC
X509v3 Authority Key Identifier:
keyid:A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:67:33:cd:0e:e1:a7:62:76:de:a0:04:da:2c:20:cb:37:76:
a9:e4:0c:98:5f:c6:d1:5c:e4:a7:e7:f5:52:6a:20:97:25:44:
5d:2e:6b:ce:d5:1f:89:4d:5a:e6:b4:86:b2:02:05:b9:73:11:
b8:04:c5:73:63:d2:98:ba:d7:ee:6f:d1:24:dc:0e:6d:5e:c2:
03:e8:13:83:03:7f:bf:3f:8b:59:3a:66:3d:82:1e:6f:09:42:
83:90:59:8b:78:c6:ba:c6:70:f2:61:9f:63:36:e5:98:6a:20:
b9:4e:d5:2c:97:a5:2c:54:ca:0c:93:5b:f3:4b:60:2e:f6:78:
02:01:d4:b3:9f:20:fb:e7:94:da:0f:65:8e:08:8d:52:07:00:
01:93:0f:7e:5b:d5:dd:d0:ee:3d:04:d4:c0:12:ea:f3:b6:98:
a0:f1:11:de:f9:c9:f0:94:36:03:b1:2b:1d:89:00:3a:18:44:
44:b9:81:9f:df:4f:4a:72:81:94:3a:1a:83:3e:f3:26:5b:66:
65:c9:a3:3d:e9:79:d1:c4:57:46:9d:ed:42:21:2e:d8:e8:f7:
67:2a:c1:6f:6a:fb:66:75:32:94:55:26:e7:c7:66:96:5f:79:
71:f9:39:e3:8a:ca:18:8f:8d:81:82:50:7f:0b:bd:58:03:bd:
1f:27:b0:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaELS5vSboVNuApKrXqW2sYcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YjBjMDU3MzFlZmE0YmJlNWMyYTMwYWU1MTg5Zjc3ODVk
MmQ0OTkwHhcNMjYxMDA1MDkwMTA2WhcNMjYxMDA2MDkwMTA2WjAzMTEwLwYDVQQD
EyhhYTQ3ZjhlOTU4NzlmOWNlY2U2YzE0MGRiOTJhOGZlNGZiN2M0OWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssEpdTUbjrk7wJKAd6N3kwOSoARG
xEJ/L7wC8tCJd+SzySPuNJPwKieIas7ZmuZ0iAmlt6Q6H5RafHzUVMrCRs1Aoc8r
IFho/gcEolu2efAH6CPxgBA/lr88ZNwuf8F81EWbaFgObMAMMQUvkNkTk3ALynYf
TfHXqWEArRhIV/OrmlLpzkuvODsasojIykEVpelwT195P4jI+DmMjbX+sp+XFVgy
s+cZRmuOuYG25LuRFt2bXyhpEI0j38cE/wZpD2HPx4aIMzBkF/4MUn58h+IO2AUI
UD5yRM20H5wo0H5+0ITrUozmys3IYfmeUvemiG2ZtuW2FtB5gWuCnz5WdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpH+OlYefnOzmwUDbkqj+T7fEmsMB8GA1UdIwQY
MBaAFKWwwFcx76S75cKjCuUYn3eF0tSZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGJEQVZ6SHZwTHZsd3FNSzVSaWZkNFhTMUprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yNTE0OWMtMDkzMi00NjgzLThhYjgt
ZDE1ZmViZGY1ZWNmLzEvcGJEQVZ6SHZwTHZsd3FNSzVSaWZkNFhTMUprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yNTE0OWMtMDkzMi00NjgzLThhYjgtZDE1ZmViZGY1ZWNm
LzEvcGJEQVZ6SHZwTHZsd3FNSzVSaWZkNFhTMUprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApGczzQ7h
p2J23qAE2iwgyzd2qeQMmF/G0Vzkp+f1UmoglyVEXS5rztUfiU1a5rSGsgIFuXMR
uATFc2PSmLrX7m/RJNwObV7CA+gTgwN/vz+LWTpmPYIebwlCg5BZi3jGusZw8mGf
YzblmGoguU7VLJelLFTKDJNb80tgLvZ4AgHUs58g++eU2g9ljgiNUgcAAZMPflvV
3dDuPQTUwBLq87aYoPER3vnJ8JQ2A7ErHYkAOhhERLmBn99PSnKBlDoagz7zJltm
ZcmjPel50cRXRp3tQiEu2Oj3ZyrBb2r7ZnUylFUm58dmll95cfk544rKGI+NgYJQ
fwu9WAO9Hyew6g==
-----END CERTIFICATE-----
Generated at Mon Oct 5 16:18:31 2026 by rpki-client