Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft
File: pVB1uOQuRRTvSdP-ovGHJk50-y4.mft (raw, json)
Hash identifier: XwXqpowtrHqMQr+bNuyISl7J4pp2JvDs3poaRp6gOVY=
Subject key identifier: 4C:95:9A:45:30:52:98:B8:61:3F:29:C2:47:E8:19:7B:5E:15:A9:D4
Authority key identifier: A5:50:75:B8:E4:2E:45:14:EF:49:D3:FE:A2:F1:87:26:4E:74:FB:2E
Certificate issuer: /CN=a55075b8e42e4514ef49d3fea2f187264e74fb2e
Certificate serial: 01A0EB53A2D3AE02F79D6B752207E7425632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pVB1uOQuRRTvSdP-ovGHJk50-y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft
Manifest number: 0715
Signing time: Tue 29 Sep 2026 04:02:01 +0000
Manifest this update: Tue 29 Sep 2026 04:02:01 +0000
Manifest next update: Wed 30 Sep 2026 04:02:01 +0000
Files and hashes: 1: XQv7wEz4cC45Y-u3Csa_kFWZP8A.roa (hash: Rg6Z2DsQeZ19hmYMspcAw/07/1QRuxsRYhNWi/fAiwc=)
2: pVB1uOQuRRTvSdP-ovGHJk50-y4.crl (hash: bRP8+zyn8CoYpMOwNDC7wZvvM/zIxkZNzLpzKqXtpQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pVB1uOQuRRTvSdP-ovGHJk50-y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 04:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:53:a2:d3:ae:02:f7:9d:6b:75:22:07:e7:42:56:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a55075b8e42e4514ef49d3fea2f187264e74fb2e
Validity
Not Before: Sep 29 04:02:01 2026 GMT
Not After : Sep 30 04:02:01 2026 GMT
Subject: CN=4c959a45305298b8613f29c247e8197b5e15a9d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:16:9b:b6:d8:8d:86:6a:e2:f6:0b:59:97:c3:
cb:92:2c:93:a5:d5:f4:91:89:19:6f:e3:89:d1:47:
3b:c7:6a:6a:1b:e1:2c:c7:68:fe:fc:e3:78:19:38:
07:7f:9f:96:29:7f:4a:23:a7:b7:cf:80:d6:ba:a4:
3e:fa:7e:47:8c:50:02:4f:f9:e4:b3:df:fb:b5:98:
91:d7:88:e4:76:bc:e8:6c:73:51:b1:48:13:31:aa:
45:96:37:cd:4c:8f:3a:14:2d:de:9d:a4:f3:21:14:
20:e6:02:f7:a5:e4:ee:4b:ff:8a:ba:0e:25:a8:28:
bc:99:08:b8:e9:fc:aa:8c:36:5d:1a:d3:15:d3:26:
6a:f2:70:60:f7:6a:42:1c:fc:6e:1b:59:2c:84:90:
6b:9c:75:3a:7d:40:93:46:51:a7:59:65:d7:9f:30:
18:0a:ca:74:eb:79:04:b5:4c:40:c2:60:ac:27:ca:
58:dc:5e:de:6e:dc:b3:3f:27:92:b6:84:f6:0a:37:
6f:e7:16:55:73:ac:f0:5a:bc:cd:36:bb:f5:62:50:
dc:0e:2f:ec:1e:17:a1:86:b6:35:14:70:b7:ee:24:
79:b7:eb:d4:09:c2:08:c4:8c:6d:e0:e2:c4:1f:42:
e6:ff:5c:98:b0:45:9f:12:16:7a:f2:58:2c:dc:29:
da:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:95:9A:45:30:52:98:B8:61:3F:29:C2:47:E8:19:7B:5E:15:A9:D4
X509v3 Authority Key Identifier:
keyid:A5:50:75:B8:E4:2E:45:14:EF:49:D3:FE:A2:F1:87:26:4E:74:FB:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVB1uOQuRRTvSdP-ovGHJk50-y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:88:63:72:ea:c0:16:8c:4b:56:2f:07:29:0a:3a:30:39:f5:
e4:c0:52:31:a8:43:ad:17:11:c2:63:9b:8c:46:28:93:12:da:
51:49:be:bc:15:dc:61:c2:1f:49:77:74:eb:69:de:e5:3c:63:
23:ae:b8:bc:3d:ed:c7:af:60:a0:f1:92:be:73:de:86:6d:1c:
6d:f5:3b:92:46:4a:35:f7:5f:9b:84:ca:ed:97:82:dd:4c:26:
8f:65:94:3e:72:59:eb:af:84:27:b0:f8:7c:fa:f1:80:3c:0f:
2a:ea:a7:1d:07:f0:ef:1c:a3:3b:cc:4d:47:cb:68:ae:ad:9f:
da:ef:1f:ad:53:f3:20:c6:ba:54:29:8b:3f:8c:b4:9e:af:ce:
2e:87:20:0e:72:36:67:c0:6e:ef:f1:23:6e:63:71:ad:b2:ac:
4a:41:d5:0f:a0:f0:92:50:3b:2e:fc:12:80:fc:d4:a3:24:82:
a9:81:46:38:11:dc:55:2d:b9:b5:85:11:64:14:d8:45:78:ab:
77:73:cf:40:fd:bd:93:e3:7e:70:0c:67:77:0b:70:b5:7e:f3:
ab:a6:f6:9d:b2:9b:e3:be:0c:96:0d:40:5d:2d:c9:8f:7f:e8:
2e:75:c1:13:7e:7b:7a:b2:5c:b2:2b:a4:4e:db:92:d0:73:2f:
a8:95:54:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:11:31 2026 by rpki-client