Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/P1oa6clM3jczsUz3HS5FAjYCG-c.mft
File: P1oa6clM3jczsUz3HS5FAjYCG-c.mft (raw, json)
Hash identifier: Of4DsvOOf3d6yur7otGTJBEn0+G29aRXznmErCy20c4=
Subject key identifier: 68:6F:84:14:95:36:A3:4A:4F:77:C0:7B:B9:56:43:89:FA:E5:DA:E2
Authority key identifier: 3F:5A:1A:E9:C9:4C:DE:37:33:B1:4C:F7:1D:2E:45:02:36:02:1B:E7
Certificate issuer: /CN=3f5a1ae9c94cde3733b14cf71d2e450236021be7
Certificate serial: 01A0D5DE2FA2D4A77269B57B0F742E27163D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1oa6clM3jczsUz3HS5FAjYCG-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/P1oa6clM3jczsUz3HS5FAjYCG-c.mft
Manifest number: E8
Signing time: Fri 25 Sep 2026 00:01:43 +0000
Manifest this update: Fri 25 Sep 2026 00:01:43 +0000
Manifest next update: Sat 26 Sep 2026 00:01:43 +0000
Files and hashes: 1: 5tvg6R-aNFHAmDm8hsBhHIkdM_o.roa (hash: oPbe4w173UuB1VDOYJqEbd8iNWC/h8MGEf5qvBqUZd0=)
2: P1oa6clM3jczsUz3HS5FAjYCG-c.crl (hash: 7qHuIC+wHA+OlR9M8x/tlD+dTkHoEMT87me7o1MEu/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/P1oa6clM3jczsUz3HS5FAjYCG-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/P1oa6clM3jczsUz3HS5FAjYCG-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1oa6clM3jczsUz3HS5FAjYCG-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:2f:a2:d4:a7:72:69:b5:7b:0f:74:2e:27:16:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5a1ae9c94cde3733b14cf71d2e450236021be7
Validity
Not Before: Sep 25 00:01:43 2026 GMT
Not After : Sep 26 00:01:43 2026 GMT
Subject: CN=686f84149536a34a4f77c07bb9564389fae5dae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d8:88:a5:c0:02:3f:18:9d:3b:b9:d6:d0:b4:
66:cd:16:28:53:be:2e:4e:88:78:59:31:2b:5a:e2:
f3:f5:fe:c6:eb:2e:94:fb:c0:58:d3:6b:7d:75:81:
53:e0:3d:b6:62:54:c4:cd:bf:7b:a6:c5:46:cb:5e:
b9:48:43:e4:23:dd:32:b4:d6:73:b1:a8:2f:87:d8:
3f:39:19:ff:29:01:a7:23:43:18:1d:e4:be:1a:9d:
16:e4:ef:29:f8:95:0b:dd:ce:d3:c9:e3:8a:3a:e6:
2f:df:ad:ab:cb:8d:50:be:2d:b0:b0:cd:bb:76:62:
d2:55:75:b8:cd:d3:c1:b5:fc:91:52:95:cd:fc:17:
f5:7c:09:7d:52:f2:8b:70:09:4e:e3:4f:b7:ef:9d:
40:cf:40:3a:17:70:c1:88:17:59:e5:8c:8e:13:58:
c6:25:ce:85:70:5e:df:a5:8a:93:27:b1:29:14:0d:
87:da:39:9c:5d:c9:3f:8f:3d:78:d7:df:76:20:28:
85:26:ee:9d:25:16:40:97:cf:a8:af:26:2e:95:71:
be:27:d2:1c:d7:1d:fb:fd:91:27:3c:31:e0:ea:b7:
a5:eb:19:1d:98:4a:25:18:0c:06:00:ff:6f:f6:9a:
bb:40:fb:ad:44:a6:93:51:53:d0:c5:44:5d:e2:ad:
93:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6F:84:14:95:36:A3:4A:4F:77:C0:7B:B9:56:43:89:FA:E5:DA:E2
X509v3 Authority Key Identifier:
keyid:3F:5A:1A:E9:C9:4C:DE:37:33:B1:4C:F7:1D:2E:45:02:36:02:1B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1oa6clM3jczsUz3HS5FAjYCG-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/P1oa6clM3jczsUz3HS5FAjYCG-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/P1oa6clM3jczsUz3HS5FAjYCG-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:09:78:69:5a:e5:50:f4:83:3a:62:96:ea:0b:30:b6:99:c4:
1f:8b:f3:f6:e2:fd:3a:dd:43:0f:4d:22:54:57:a1:a8:ae:89:
4c:d8:3c:02:96:16:a3:1e:f6:30:09:c2:fc:e7:ec:e0:72:3e:
87:95:82:35:78:84:fd:43:ad:a0:f2:68:96:63:53:9b:d3:66:
08:76:2d:f0:b4:cc:be:8a:43:8c:87:f3:3e:45:eb:09:4c:c1:
72:1c:f9:4f:3e:24:88:aa:6a:92:0d:dc:02:49:9c:96:95:93:
48:d5:9b:56:c3:da:04:2c:af:3c:1c:df:c8:ac:de:d4:93:a1:
25:9a:1d:49:49:85:18:dd:c1:76:ac:b7:70:1a:55:8d:8e:89:
37:1d:88:ad:99:11:50:4b:13:97:c0:a6:26:8e:d1:f1:62:03:
06:bd:95:3a:fe:5d:10:1b:cf:95:6f:66:39:48:61:6d:2a:90:
82:7a:b3:b8:e8:b4:27:2f:fb:e0:91:ad:c2:dc:40:4c:3a:da:
5b:32:f4:15:9b:3d:d0:66:5c:63:58:86:fe:2a:de:ad:bb:dd:
7f:35:ff:00:b7:b3:a5:82:ec:0f:35:7c:e5:41:01:15:67:06:
5e:c7:21:da:63:b3:12:5d:f2:fd:d1:d9:e8:5c:f9:d6:56:e6:
0e:9b:18:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:59:25 2026 by rpki-client