Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
File: pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft (raw, json)
Hash identifier: zD31WPzJEtDoUmY1rYgE/EvchzYTJu4C+xQJPUdaLZA=
Subject key identifier: F1:F2:FB:D2:B6:CE:49:26:43:2F:5A:63:38:3A:D9:32:61:35:43:A9
Authority key identifier: A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9
Certificate issuer: /CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9
Certificate serial: 01A0C7B37902F7C6D397629CA071B4A5610A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
Manifest number: 19F8
Signing time: Tue 22 Sep 2026 06:00:22 +0000
Manifest this update: Tue 22 Sep 2026 06:00:22 +0000
Manifest next update: Wed 23 Sep 2026 06:00:22 +0000
Files and hashes: 1: RI1PUJj0Q_MD3P8uweukuXuYhlU.roa (hash: Udb4Yel6QV6x+EojTVD0SPU2vkANJh/DkSOzlaEFuOQ=)
2: pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl (hash: PqLiSOKxhfKuyZZDver7hgKDDsRC6HpbwtSHgqYc2Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b3:79:02:f7:c6:d3:97:62:9c:a0:71:b4:a5:61:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9
Validity
Not Before: Sep 22 06:00:22 2026 GMT
Not After : Sep 23 06:00:22 2026 GMT
Subject: CN=f1f2fbd2b6ce4926432f5a63383ad932613543a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9c:2e:39:14:12:9a:2f:5d:3d:bc:66:70:a3:
12:55:de:7f:27:1a:20:df:32:c1:79:be:2a:fa:3d:
b2:df:07:d4:07:3a:ff:b2:69:7b:c2:3c:dd:ca:5e:
ab:c7:f3:3f:a5:76:8c:a7:dc:7b:af:a1:39:e2:5f:
96:81:f5:13:d1:8b:9a:a9:6a:72:b6:03:4e:e4:c2:
4d:dc:70:5a:f2:3f:33:92:14:5a:7d:88:56:09:85:
1e:9d:8c:80:76:66:40:0d:db:ad:bc:71:8d:71:1b:
1b:c5:bd:bf:1b:93:0f:b0:8c:07:bd:13:5e:86:fb:
23:16:1f:c1:49:d4:73:e7:a9:b9:58:1b:06:8e:66:
ff:96:85:4c:7e:ea:a5:8f:9f:8c:64:9b:fe:15:d5:
86:34:5b:59:95:cd:91:ee:03:37:6e:71:fc:b2:2c:
cc:d6:1a:e3:39:82:af:93:34:a3:b6:47:4a:dd:a2:
9e:af:eb:28:86:e6:00:ee:f9:32:71:bb:f5:69:46:
71:42:db:5c:8e:5f:ec:8d:41:5f:ac:92:be:56:ff:
bd:00:ed:fc:3b:d9:ec:49:c6:98:23:c0:e4:c2:d3:
be:8b:02:9b:af:ab:7d:1f:7d:57:8e:62:77:a0:36:
28:a1:85:91:c0:5d:ad:c7:f6:7a:c1:62:ec:2f:08:
45:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F2:FB:D2:B6:CE:49:26:43:2F:5A:63:38:3A:D9:32:61:35:43:A9
X509v3 Authority Key Identifier:
keyid:A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:4a:b1:d7:3c:08:43:5e:5b:30:d1:eb:a8:7d:51:3b:81:f6:
06:35:22:da:e2:c4:bf:47:60:26:b3:b3:18:67:ce:31:03:90:
84:02:74:1c:02:3d:56:0f:9d:a8:46:61:21:83:32:5c:df:3c:
b7:27:9d:1f:7b:7c:44:cb:b2:e9:f1:ba:e3:ea:bc:38:12:c4:
e2:a1:f1:c0:81:bc:c0:55:9f:31:55:1a:c9:4e:2a:b5:ec:da:
b2:49:9d:ef:eb:26:76:d3:14:89:08:2c:08:2e:a1:a9:ed:93:
72:d7:4e:3c:c8:25:a3:99:d2:13:cf:ba:dc:b8:ce:2e:3b:a3:
9c:e9:e2:6a:df:2c:20:77:d2:d2:a9:36:66:9e:8d:6c:34:ed:
86:37:f9:31:13:c7:c1:ab:da:72:be:8c:80:48:ef:10:75:b1:
6d:17:56:fc:b6:e8:f4:9f:33:c4:c5:df:6a:d9:6d:06:24:6c:
ab:a4:3f:df:b2:e6:61:f9:b7:79:37:4c:cb:74:10:29:18:96:
4c:12:c0:3f:a6:95:4e:36:f5:43:5f:55:49:13:6f:5e:bc:12:
c5:9c:d6:f3:52:26:12:19:11:52:1a:f3:c2:98:2d:52:b0:c5:
5c:5a:11:26:53:2a:53:bc:0c:62:c8:39:68:61:e0:62:8a:ef:
74:87:8a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:55:36 2026 by rpki-client