Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
File: pZrIMj67a-IPronQmMokE4-MkAU.mft (raw, json)
Hash identifier: CD9Ed1Tu8oqfAonvbhBwptR1LM1rfsj8PBAZIN1+m44=
Subject key identifier: 25:F6:17:37:8B:8D:0C:F1:8F:D6:4E:58:C0:4F:7F:33:E6:0E:27:10
Authority key identifier: A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
Certificate issuer: /CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Certificate serial: 01A12FC595EDAACBF94D536706B72D825A39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
Manifest number: 1A9F
Signing time: Mon 12 Oct 2026 11:00:40 +0000
Manifest this update: Mon 12 Oct 2026 11:00:40 +0000
Manifest next update: Tue 13 Oct 2026 11:00:40 +0000
Files and hashes: 1: Svs8WaYMaBYooAK5Llbdr0Xwf0o.roa (hash: ulklpVL+jocMv3vi7VJBHLEzxNJlxmy7adHjaQUdJa4=)
2: liNOwl4ffjTNwLOg4lX3c6vkVXc.roa (hash: ec9XZ/8wZUP1CTV/xvGoOKI7TsGIEdOECU3xzYakfZA=)
3: pZrIMj67a-IPronQmMokE4-MkAU.crl (hash: MKDq0dPGfrJH8cdihDCkz3QzShdA3JiVSREx0SdNRlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:c5:95:ed:aa:cb:f9:4d:53:67:06:b7:2d:82:5a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Validity
Not Before: Oct 12 11:00:40 2026 GMT
Not After : Oct 13 11:00:40 2026 GMT
Subject: CN=25f617378b8d0cf18fd64e58c04f7f33e60e2710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:eb:76:e0:59:f1:56:b0:36:c7:88:bd:12:b2:
3a:ae:90:24:88:62:83:cd:53:90:e2:a9:48:71:2d:
85:24:33:18:c8:99:22:5f:da:a6:e2:b4:89:78:b5:
3e:c5:34:47:8d:3d:df:62:cc:7e:ed:24:32:4a:eb:
37:64:8d:56:48:93:39:e2:b5:3e:09:b3:94:35:ed:
b8:d5:9b:19:ea:84:18:a4:93:e6:9d:be:c8:16:64:
fa:90:eb:2c:3b:b8:8f:a4:d9:a4:1b:8f:f4:2d:31:
dc:2a:b2:76:d2:76:a9:99:3f:a3:60:ef:4a:f6:58:
82:e6:74:0a:6b:77:2b:79:88:27:10:65:25:49:c1:
df:0b:6a:30:38:c4:28:b3:ea:15:09:29:f0:56:68:
78:6d:21:59:ac:7e:d9:f5:1c:6d:5a:7a:5b:74:56:
ba:04:ad:e8:60:ec:84:eb:8b:64:8c:49:d9:f3:c9:
47:d5:85:ef:e3:52:10:2c:ed:5c:c8:ec:08:3c:b5:
5d:15:63:2e:b9:05:a9:fc:e4:3b:c1:6d:ba:ad:89:
7c:64:b4:39:a3:ee:71:61:91:39:83:32:ce:20:4a:
a6:98:e4:2a:1c:2c:3c:03:e0:3c:ef:b5:00:f3:13:
c9:ba:57:23:ae:21:37:59:7d:62:b6:1c:21:c6:92:
f4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F6:17:37:8B:8D:0C:F1:8F:D6:4E:58:C0:4F:7F:33:E6:0E:27:10
X509v3 Authority Key Identifier:
keyid:A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:fa:17:b4:e7:bc:30:8b:0b:3d:3b:ca:1d:c6:8b:8d:df:34:
37:e3:93:ca:97:56:37:74:d7:81:14:29:60:76:35:26:58:5e:
c2:73:18:17:e4:b2:89:f2:72:97:d9:35:76:38:f5:bf:10:43:
21:5f:a6:bd:4f:5c:8d:98:80:08:a2:63:fd:b1:2a:71:67:89:
9d:a3:f3:ff:ed:74:99:12:00:be:e7:50:81:12:ce:33:17:57:
be:0f:b5:ae:de:0b:44:35:25:66:31:f0:6b:76:95:63:ec:ad:
7d:c5:31:52:9f:12:c3:a7:dd:60:9f:e4:dc:6d:e8:2b:5f:ba:
89:12:5e:6d:73:50:bc:a7:81:fa:c0:95:6b:f0:67:1f:a5:57:
1d:85:5e:46:16:a3:36:4b:a1:21:ba:ce:47:36:20:da:10:e1:
0c:55:5e:e0:d3:9b:1a:56:0c:69:1a:41:8e:4c:bf:ce:64:fc:
80:32:b4:6c:74:23:03:d1:09:74:47:98:6b:e7:e7:a6:1f:61:
fe:2a:18:66:99:bf:41:91:99:f7:36:0e:76:83:0a:1b:3b:8b:
96:aa:ac:d7:43:2b:d7:ee:ec:2a:66:b2:3a:52:b6:dc:99:88:
e9:e0:9d:a0:19:14:07:6d:29:29:46:92:85:fc:db:05:cd:9e:
e3:0d:28:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:58:37 2026 by rpki-client