Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
File: pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft (raw, json)
Hash identifier: XJjPz3nXF8j0aD4Ov3C8CgtoCZ5IXO4CNPcyRXMNIw0=
Subject key identifier: 3D:2F:1B:87:DB:34:15:7D:1E:78:03:03:92:26:AA:74:32:DB:80:DE
Authority key identifier: A5:54:16:09:CD:94:7B:ED:FC:99:12:58:40:03:01:08:A3:F1:41:C1
Certificate issuer: /CN=a5541609cd947bedfc99125840030108a3f141c1
Certificate serial: 01A1152B17607BC2822E59DE6918328FBEF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
Manifest number: 0406
Signing time: Wed 07 Oct 2026 07:01:47 +0000
Manifest this update: Wed 07 Oct 2026 07:01:47 +0000
Manifest next update: Thu 08 Oct 2026 07:01:47 +0000
Files and hashes: 1: 2751EE97ZUX46PuQKd5VXZi8NQ4.roa (hash: ttrLfXYMhhaOogoOW1E72PyGhahP9uiFnKhfYUnBtRs=)
2: 92O93VxDU4pUVWr7dnT1Y4KqdI0.roa (hash: 27cPDTqD5XdPrxS6jGsrQqv1l0PeJCPzXimQBRdpqQ4=)
3: pVQWCc2Ue-38mRJYQAMBCKPxQcE.crl (hash: R0ABoVHPqC0nPqMiW5xIulX4Nq9qvT/Vkssr489YEhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 06:59:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:2b:17:60:7b:c2:82:2e:59:de:69:18:32:8f:be:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5541609cd947bedfc99125840030108a3f141c1
Validity
Not Before: Oct 7 07:01:47 2026 GMT
Not After : Oct 8 07:01:47 2026 GMT
Subject: CN=3d2f1b87db34157d1e7803039226aa7432db80de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:45:44:23:20:c6:e9:17:ac:eb:b2:e0:2d:6b:
59:29:3f:68:9d:7e:57:87:4f:78:de:e0:50:ae:ec:
cb:2a:ea:73:f0:74:36:d3:7b:de:dc:1d:63:3c:b8:
84:e5:15:24:65:eb:f2:42:0c:09:87:89:13:b3:30:
55:db:28:e2:db:49:a4:85:f0:c6:b0:6b:30:ac:d8:
cb:d3:52:a4:9e:bb:62:2d:ec:78:2b:07:0d:4a:9a:
4f:cf:8d:1c:5c:00:92:1f:35:ed:fa:ed:11:b9:c1:
df:c7:67:fa:a9:f7:23:b2:9a:25:8a:60:5d:b4:12:
23:9d:6f:30:97:8a:d7:3d:08:ce:25:f9:a4:df:36:
ce:d8:6e:ce:40:b5:ec:b8:3a:d8:b7:ae:2d:13:0b:
16:b5:98:6c:a1:b9:0d:52:91:fb:b8:37:0f:18:7c:
7e:fe:c5:3f:63:8e:29:70:fe:09:e6:47:b7:0f:60:
68:d5:3e:44:53:de:41:a9:dc:41:fb:73:85:40:f4:
e6:26:ad:d9:2c:58:b7:0e:5d:7b:63:61:38:02:9a:
57:d0:56:fb:89:1b:47:28:1f:03:03:12:a1:45:8b:
c2:d3:ef:b1:f3:07:9e:8b:20:ce:49:8e:76:e9:5c:
39:4e:dd:2f:17:27:80:88:52:f0:3f:c1:62:9c:9a:
10:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2F:1B:87:DB:34:15:7D:1E:78:03:03:92:26:AA:74:32:DB:80:DE
X509v3 Authority Key Identifier:
keyid:A5:54:16:09:CD:94:7B:ED:FC:99:12:58:40:03:01:08:A3:F1:41:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:2a:11:cf:54:51:3d:46:8e:3c:7a:13:63:94:64:90:49:1b:
fa:ec:2a:00:38:f8:36:0c:36:65:29:31:34:ee:b0:ef:d9:85:
1d:16:b7:ed:2f:b4:ce:6c:8a:c0:3f:73:49:ce:3d:be:c7:9c:
3e:77:88:90:c0:9d:8c:68:46:20:4c:ef:0a:b6:56:b0:ae:88:
31:82:c7:be:1b:d9:9c:78:25:81:54:12:25:43:bb:a4:05:c4:
66:75:a0:57:39:2d:45:8e:1c:94:b1:c5:3f:57:e1:78:6a:57:
23:6b:5c:11:b8:7f:48:88:f9:44:c8:15:4c:c1:07:5d:f1:90:
2b:de:5f:46:0c:fd:7e:87:7a:18:4e:f1:e6:33:f4:87:d6:a2:
3a:65:5c:c2:38:81:d7:97:24:13:e6:03:a9:04:54:90:3b:44:
47:63:02:ad:bd:bb:93:62:0d:07:c0:f0:de:9d:04:b3:3d:bc:
76:78:fc:ee:23:83:97:fe:01:7e:88:c9:08:ce:0a:a1:22:1d:
16:16:44:22:81:f0:29:08:73:3a:02:12:5c:a1:31:ce:00:d3:
27:3a:1e:2a:c4:da:b0:4f:7c:de:a5:cd:ca:f3:b7:c8:cc:76:
18:31:0c:b6:af:5b:4f:7a:0f:65:4c:01:62:c4:e3:4a:88:6e:
77:4b:f9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 10:13:10 2026 by rpki-client