Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
File: pAoIH7qPsz77RiWe-T9oeNcBUOs.mft (raw, json)
Hash identifier: WNQIDb2lu+sNOm63wvKy2ljxSVVYqYACi7RP22W4Ozo=
Subject key identifier: C8:DB:C2:B9:A6:8C:FF:DB:58:6C:24:F3:38:1A:6F:62:94:22:6C:3C
Authority key identifier: A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
Certificate issuer: /CN=a40a081fba8fb33efb46259ef93f6878d70150eb
Certificate serial: 01A11A8716E5F430C749425E397B3FFCFDCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
Manifest number: 0FF1
Signing time: Thu 08 Oct 2026 08:00:23 +0000
Manifest this update: Thu 08 Oct 2026 08:00:23 +0000
Manifest next update: Fri 09 Oct 2026 08:00:23 +0000
Files and hashes: 1: VBRvFj1EOS8ywtDDLAz1AuJ-F3M.roa (hash: ZcSJ73xAFGVAh8eRMHYLBDppD5u63RXHyLpMLnO53qI=)
2: mnODa5wDvkGX4Jfpz4BI1Vtzz80.roa (hash: jyMMr46dns8Qs3JvGsMvWCbFmVoKBoUCnfmLlBoBHdM=)
3: pAoIH7qPsz77RiWe-T9oeNcBUOs.crl (hash: hCWR6XMYM3CZ5ne6QDOopL7qEwpO3a+CHgvaL/MDH74=)
4: vmahc-gH9xY8uloECYneObmRUwo.roa (hash: 6npTr2kUzSthDDmcUqv6TyudZTdNiJRtH1eH8fs3DyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:87:16:e5:f4:30:c7:49:42:5e:39:7b:3f:fc:fd:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a40a081fba8fb33efb46259ef93f6878d70150eb
Validity
Not Before: Oct 8 08:00:23 2026 GMT
Not After : Oct 9 08:00:23 2026 GMT
Subject: CN=c8dbc2b9a68cffdb586c24f3381a6f6294226c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c6:f6:81:da:8f:3a:b0:20:4b:eb:20:b3:c6:
cf:40:81:47:80:db:bd:25:cb:a5:1f:8e:58:4d:e8:
14:b0:73:db:f0:fb:d3:52:6e:5a:e0:17:1c:d3:3a:
db:b4:fe:20:99:18:ce:a1:fd:75:83:90:99:34:83:
b3:c5:f4:bd:51:c9:25:92:ea:bf:5b:f2:95:fa:3f:
cd:4e:22:ba:ed:04:73:5e:31:65:44:70:3e:81:17:
57:9d:0e:b4:51:66:d1:ab:69:30:5d:38:e2:0a:16:
7c:4e:6b:56:40:a1:c1:3f:95:af:fb:b2:32:ed:58:
4f:cf:7b:88:4f:2d:39:5c:04:13:42:58:1f:f9:96:
01:e6:9e:0f:11:8a:62:8d:b8:d1:45:c8:79:09:5e:
bb:07:9a:a4:5c:01:03:40:2e:ab:98:92:13:15:b0:
a3:c1:6b:6c:d0:70:65:07:f4:f4:cc:50:31:2a:4e:
7a:b3:78:50:56:dd:86:32:be:d7:53:58:b3:b7:5f:
82:e4:80:f4:16:9c:de:c9:52:6e:55:43:69:17:be:
b5:aa:30:23:c4:13:5d:d3:33:77:b7:c0:c3:da:a0:
df:be:7e:78:89:f1:16:16:b2:ab:5b:2e:d4:2f:27:
9d:c0:76:b8:38:06:06:df:07:91:48:df:93:bc:52:
a1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DB:C2:B9:A6:8C:FF:DB:58:6C:24:F3:38:1A:6F:62:94:22:6C:3C
X509v3 Authority Key Identifier:
keyid:A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:13:33:99:76:3a:43:2b:56:03:53:92:11:39:cc:82:c7:8a:
e2:5b:a1:c0:86:30:45:ca:cb:ae:fe:e7:db:64:44:ac:55:47:
50:85:e8:10:61:a5:5d:91:69:14:62:64:7a:f6:d6:b9:b4:e6:
b4:d7:6d:36:4f:8f:91:12:70:a9:0d:72:f0:d4:a2:e8:68:24:
1b:7e:63:ef:34:1e:56:ab:65:3e:fd:68:64:90:b2:ee:21:a6:
a2:2f:9e:d1:b9:b1:12:23:ef:76:96:f4:b4:84:ca:94:ce:53:
cb:fe:93:81:a5:36:d8:6d:ea:e6:63:16:a2:a0:42:b3:03:5d:
72:da:86:f4:0f:29:f1:76:da:c6:30:3d:a2:de:32:56:c0:3f:
78:1e:b5:49:3c:37:ce:1b:f9:62:32:2d:32:ee:5a:db:ec:95:
7f:39:20:e9:f9:16:b8:17:f9:2f:5a:e7:b1:39:f8:7b:2c:bf:
1c:cd:49:94:9b:4e:b8:bc:f5:41:c6:10:81:dc:1b:ca:b4:91:
a3:c5:11:95:bb:55:0c:ea:77:a2:1e:ff:00:e1:3e:e3:3b:9a:
1b:21:cd:39:2f:d6:55:37:d6:03:55:d4:93:b6:36:44:82:d8:
13:46:fa:19:43:e0:5d:80:b3:70:55:a3:9d:c7:83:6d:a9:47:
04:ee:bc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:05:21 2026 by rpki-client