Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
File: p4kEQNrxw6w4dz6FIVES90twYjI.mft (raw, json)
Hash identifier: 1TORxNR3+2SAebJHwFxuOj4htjAdu33E5faAolKjdYU=
Subject key identifier: EF:A9:DA:2B:89:71:9D:DE:C0:2F:B3:0B:00:13:F0:B8:7B:4A:34:30
Authority key identifier: A7:89:04:40:DA:F1:C3:AC:38:77:3E:85:21:51:12:F7:4B:70:62:32
Certificate issuer: /CN=a7890440daf1c3ac38773e85215112f74b706232
Certificate serial: 01A0C6A1584264A77E1135162FEFD02E1067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
Manifest number: 021F
Signing time: Tue 22 Sep 2026 01:00:57 +0000
Manifest this update: Tue 22 Sep 2026 01:00:57 +0000
Manifest next update: Wed 23 Sep 2026 01:00:57 +0000
Files and hashes: 1: iX6vy1XcuPqqbDz8w-InkH2wG7I.roa (hash: GqKpcRA3VOR2P5FWA83zgHTmjRMOW1fhvmM6tUVqgDI=)
2: jcRzJUg7IUVEUlfjHqL1NEbulJY.roa (hash: 043yV8J6dMsTpPpYvQ/xWssybIOO8FTRI8kOXFFcDXA=)
3: p4kEQNrxw6w4dz6FIVES90twYjI.crl (hash: IoHCpLAktj/+P79bGdhfY/HRETkgoHDO/52MrtPYrd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a1:58:42:64:a7:7e:11:35:16:2f:ef:d0:2e:10:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7890440daf1c3ac38773e85215112f74b706232
Validity
Not Before: Sep 22 01:00:57 2026 GMT
Not After : Sep 23 01:00:57 2026 GMT
Subject: CN=efa9da2b89719ddec02fb30b0013f0b87b4a3430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ec:13:e6:7c:58:d5:4e:43:a2:0e:a8:23:97:
b9:6d:69:fd:1f:5d:fe:c9:71:8a:c2:00:a4:a8:44:
06:ec:bd:68:71:0a:06:00:7c:21:2f:e3:c4:22:0e:
8c:11:a4:dc:03:fd:6d:93:75:2b:71:ef:b3:99:d8:
df:38:06:7e:09:01:6f:89:db:27:61:53:e2:ad:47:
b7:26:65:15:60:25:28:c2:55:8b:98:14:ed:2c:41:
a7:11:34:89:c9:39:58:9c:e6:68:76:79:86:b6:d0:
74:ac:fc:24:fb:b5:32:74:10:59:a5:0b:cb:5e:b6:
19:76:4b:9f:55:86:79:2c:4f:bc:a4:a0:ae:f0:8e:
c6:d4:fc:2d:1e:50:3f:e1:31:50:5c:a8:f4:a4:6f:
7f:6b:26:6e:99:59:d1:26:55:84:54:35:1b:bd:63:
a4:95:90:4d:0b:6f:de:37:77:fb:9c:2b:87:6b:ae:
f5:fc:ac:6e:5a:0e:35:6e:7a:7d:a9:32:c4:3d:ae:
a0:a4:cd:3e:ec:59:38:1a:f4:99:e9:cd:74:b6:35:
e1:6a:62:33:47:a3:ac:ce:63:a0:df:7c:4f:d8:c1:
0b:5d:f1:05:97:58:f3:4c:d1:a0:fd:19:c4:d1:c5:
c3:ab:08:02:ac:2b:e0:f6:12:26:93:82:f0:9e:62:
d2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A9:DA:2B:89:71:9D:DE:C0:2F:B3:0B:00:13:F0:B8:7B:4A:34:30
X509v3 Authority Key Identifier:
keyid:A7:89:04:40:DA:F1:C3:AC:38:77:3E:85:21:51:12:F7:4B:70:62:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c8:4a:cb:f3:06:ba:13:23:96:6b:3d:42:9a:70:60:b3:da:
19:a3:57:1e:cc:b6:9e:3b:1f:46:b6:2e:9d:60:a8:a1:b5:cc:
42:be:7b:91:ff:b9:bc:8e:27:94:69:be:ee:a0:9c:28:24:38:
0b:c8:60:71:5c:4b:79:e7:8d:aa:8f:45:40:f2:4b:87:93:1f:
e4:45:ae:8c:9c:fc:73:89:c1:49:aa:6e:26:d9:09:06:cf:47:
9f:18:0c:d2:1a:88:fa:2d:c3:1e:18:00:74:93:d8:43:9e:52:
05:95:5e:58:81:c7:e6:cd:7e:d6:f3:b6:9c:83:c5:5e:7c:da:
d7:86:82:89:88:1f:95:68:e8:b7:e3:b0:b3:e9:84:d1:37:50:
bb:db:e3:02:64:d7:85:e4:c0:3f:20:d5:35:0d:81:0c:fb:b5:
ce:19:11:82:61:68:1c:d6:ca:33:b3:8c:7c:fd:a9:cf:59:c4:
71:85:d9:19:5a:f1:00:cb:8a:b8:c2:b6:00:b2:19:18:08:09:
19:db:fe:79:ce:63:c9:cc:88:e3:bf:21:b6:1d:5a:69:0b:94:
7d:5d:47:8a:7a:0e:84:c8:4d:ba:7d:5f:2d:c4:0d:e2:d6:5f:
5a:5f:0d:4b:fc:15:4f:ef:0f:18:cc:29:06:79:be:7e:3d:30:
60:da:64:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:47:14 2026 by rpki-client