Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
File: pNAp8sMhrbWeyl_KV6Hrm99THWo.mft (raw, json)
Hash identifier: 2TzP1dByxrVv87I/eOB2hIwUg0XxXBdOxTIJG3KvZaU=
Subject key identifier: 2A:AF:F0:93:12:5D:9A:1B:54:0E:D4:0F:0F:8D:0B:58:87:55:D5:C6
Authority key identifier: A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
Certificate issuer: /CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Certificate serial: 01A1242FAC7F91858F7286B440EB832A4B34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
Manifest number: 1A9A
Signing time: Sat 10 Oct 2026 05:01:06 +0000
Manifest this update: Sat 10 Oct 2026 05:01:06 +0000
Manifest next update: Sun 11 Oct 2026 05:01:06 +0000
Files and hashes: 1: WCuXL5bdayCD-yg2u5cxoFH2Qss.roa (hash: fzizFDGzIYB7cPC/5AvExyYCWu5OSdpEHrHOTtkH4kY=)
2: odGmnWHV8DvWoy1JIU0WX6KSpRQ.roa (hash: KVh++uKmrCKdQJxhd1HSXSf6Faxjd8tG0oNOioQCVgk=)
3: pNAp8sMhrbWeyl_KV6Hrm99THWo.crl (hash: GV+vmPMl4zx/kKn8McvM4MUIzKj1FrcOpgkIPNr785w=)
4: rHP4WUAqcSQvgCZtg8_htfcNuko.roa (hash: Mb29TkYRCVH9g/5FuCaCpqq3Nrrav/iSJCN1hGSFHTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:2f:ac:7f:91:85:8f:72:86:b4:40:eb:83:2a:4b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Validity
Not Before: Oct 10 05:01:06 2026 GMT
Not After : Oct 11 05:01:06 2026 GMT
Subject: CN=2aaff093125d9a1b540ed40f0f8d0b588755d5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:07:8c:db:5c:1a:f4:14:3a:7c:d9:2b:48:a2:
f2:06:0a:7a:30:07:5e:3f:d4:8c:87:16:e9:0e:d0:
d1:d2:06:fe:8d:71:70:9c:51:10:10:1f:55:51:1f:
e6:7a:df:c7:1f:54:3c:7a:63:5f:21:3c:a1:f6:aa:
94:76:22:3b:aa:87:bf:ae:cb:ef:e8:33:28:20:46:
53:15:86:0f:04:54:f9:db:76:a8:81:3c:ba:50:c3:
cb:b4:35:4a:cc:7f:43:4b:f8:38:5a:52:85:62:42:
e2:27:6d:b3:b0:38:89:7d:c5:fc:4a:b2:1a:39:f7:
06:3a:8d:0f:84:2a:c2:b4:86:f1:ec:f8:e4:37:51:
e0:33:83:da:d5:a4:dc:69:e0:24:79:16:a0:4a:e7:
b8:81:84:54:0d:33:75:df:18:22:53:20:d0:07:ff:
15:ce:f0:9a:b9:7d:a3:42:bf:44:4c:03:ae:58:a9:
3f:98:4b:ff:07:1c:6f:e5:74:2c:a3:0d:4a:09:95:
8f:af:a3:d7:7b:21:9b:26:95:73:65:37:78:ba:0b:
cf:1e:54:de:7f:56:41:f3:a7:1f:b5:cc:fe:77:1b:
0f:11:a6:b4:15:a1:24:2b:e7:22:d6:d1:10:82:02:
80:6b:6a:a5:0a:5a:b8:79:84:d8:9b:c9:37:e2:01:
9f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AF:F0:93:12:5D:9A:1B:54:0E:D4:0F:0F:8D:0B:58:87:55:D5:C6
X509v3 Authority Key Identifier:
keyid:A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:78:44:07:1c:fa:0a:1d:23:1d:48:0a:bc:c1:1c:b7:c9:c9:
b9:ee:c6:e4:7a:aa:73:d5:19:49:1c:7d:53:37:b1:90:fe:dd:
f8:6f:73:ba:ef:98:66:f0:b7:3f:d2:f4:8a:9e:6d:15:75:61:
f4:3d:79:d3:a0:b9:a2:0e:ce:4a:ea:70:05:91:e7:41:5c:78:
07:01:e9:9b:8b:b6:7b:8e:3a:36:ef:d8:0f:e4:c6:df:05:c0:
96:16:48:35:9e:2b:c5:cc:a4:98:83:19:92:66:b3:d6:9b:34:
dd:8c:cd:57:f8:5d:a6:e7:59:50:c4:98:33:f5:7d:4e:aa:53:
aa:a7:0e:b7:b9:31:4c:40:60:1e:95:40:00:99:ba:7b:5c:90:
25:ed:15:ec:fb:b2:9b:27:da:57:d2:d3:92:61:6a:4c:a7:66:
5b:df:53:92:8d:48:10:f2:74:03:5c:4b:84:d7:f7:33:13:0c:
1a:44:08:24:09:19:4b:b4:88:10:89:f8:8f:19:73:dd:16:fa:
dc:3c:29:96:12:41:a1:4c:bd:18:3c:1c:ea:ab:25:6d:a0:87:
6a:64:05:88:1c:6c:8a:ca:dd:1c:73:e4:31:4f:80:ce:fd:c7:
46:f0:e9:0c:64:39:57:90:06:d4:e6:db:fa:d5:ce:2f:6e:c6:
fc:30:d5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:08:07 2026 by rpki-client