Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
File: pZrIMj67a-IPronQmMokE4-MkAU.mft (raw, json)
Hash identifier: BIPb9IpkN7ELyvD3yVhjH9UkFW59L6Abh9X5rlF8CLA=
Subject key identifier: E1:DC:94:D3:55:63:CB:83:D8:5C:1D:55:71:19:65:5B:C4:CE:2A:6A
Authority key identifier: A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
Certificate issuer: /CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Certificate serial: 01A135910C2DA000D423A36FA2B6D33C2CFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
Manifest number: 1AA2
Signing time: Tue 13 Oct 2026 14:01:00 +0000
Manifest this update: Tue 13 Oct 2026 14:01:00 +0000
Manifest next update: Wed 14 Oct 2026 14:01:00 +0000
Files and hashes: 1: Svs8WaYMaBYooAK5Llbdr0Xwf0o.roa (hash: ulklpVL+jocMv3vi7VJBHLEzxNJlxmy7adHjaQUdJa4=)
2: liNOwl4ffjTNwLOg4lX3c6vkVXc.roa (hash: ec9XZ/8wZUP1CTV/xvGoOKI7TsGIEdOECU3xzYakfZA=)
3: pZrIMj67a-IPronQmMokE4-MkAU.crl (hash: NzzGd2m2y9+IO6ojk8Yircs15SVhCDh9QztGevetaMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:91:0c:2d:a0:00:d4:23:a3:6f:a2:b6:d3:3c:2c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Validity
Not Before: Oct 13 14:01:00 2026 GMT
Not After : Oct 14 14:01:00 2026 GMT
Subject: CN=e1dc94d35563cb83d85c1d557119655bc4ce2a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:10:77:a5:1a:1f:06:97:bd:ea:d8:6f:fe:f7:
9f:e3:a3:d0:09:db:f1:cc:4b:16:68:cc:4c:e7:aa:
ce:d5:63:79:59:0c:fc:da:4f:13:b2:16:f9:ff:73:
8a:63:07:06:43:92:e1:5f:17:68:f0:27:26:57:b8:
b5:06:e4:9d:b2:f3:de:3d:1f:99:19:db:eb:6d:14:
85:7b:71:f3:f2:75:07:2d:7c:a6:34:26:aa:11:6f:
26:e6:07:97:61:9c:b5:96:11:52:0e:da:99:6f:57:
76:86:70:fb:f3:2f:92:97:20:3d:97:26:94:77:dd:
49:4f:5e:a5:a2:26:e4:19:4c:b6:ff:64:f6:00:ae:
81:fe:fb:3c:74:27:d8:56:f6:14:2b:01:47:ef:5d:
93:c9:e3:26:7b:70:57:99:93:fb:e6:03:de:e0:a4:
ed:de:5e:4c:e7:ee:7d:61:74:4f:55:08:d6:d2:b8:
3c:7f:83:fb:07:d1:99:59:db:9e:f0:86:f6:37:b7:
9d:d3:00:c4:f5:24:e9:98:04:6f:6b:a4:18:20:c8:
7a:e6:1a:04:ad:a8:67:d8:98:d0:bd:9a:3c:69:b3:
27:45:1a:f2:2b:b7:11:05:c8:59:c7:ab:0a:3e:e1:
7f:b2:54:4e:a4:20:65:91:c0:ad:50:c7:ac:98:6a:
81:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DC:94:D3:55:63:CB:83:D8:5C:1D:55:71:19:65:5B:C4:CE:2A:6A
X509v3 Authority Key Identifier:
keyid:A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:2c:40:d5:84:35:23:15:ac:86:fe:01:26:ee:da:57:3f:98:
f9:bf:57:c7:da:73:d7:06:7e:9c:8c:30:ee:d2:04:6a:d9:e3:
8f:b8:c1:45:00:ac:2b:de:62:7c:dd:31:6a:61:7f:ec:30:bc:
ce:88:ec:b3:af:c3:7d:b5:39:17:a1:9f:70:14:ba:fc:88:1b:
bd:42:c3:93:b8:a3:83:fb:eb:d7:a4:5c:ac:78:91:16:44:63:
98:2f:8e:db:82:73:73:bc:50:bd:5a:84:e0:64:dc:f4:4d:7e:
00:7a:dd:c4:bc:78:22:00:b7:ce:6e:4e:f9:68:6b:4c:50:53:
c1:0a:43:1e:9d:6b:03:13:8b:b6:fb:fb:b5:c1:40:6d:c3:50:
d4:e4:63:ee:da:39:52:6a:e4:30:bc:bc:2b:a2:f3:88:56:dd:
07:6c:56:52:4a:24:b2:7f:db:39:f4:bc:16:3d:e2:23:92:76:
f5:05:f2:c1:64:df:18:42:c4:56:d1:e7:52:86:28:06:d2:c9:
78:91:6b:fa:06:d0:77:8e:47:0c:4c:fe:6b:d1:d3:68:35:0e:
08:f2:0e:90:0c:8a:60:e4:80:7f:7c:ba:77:73:28:51:8d:91:
4d:9b:f8:71:29:0d:c1:09:93:25:98:e7:41:fd:9c:8f:e2:ac:
ea:10:c2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:43:59 2026 by rpki-client