Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
File: pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft (raw, json)
Hash identifier: VSJCYNj8daDiE4+jz7RrfRl0/Z0tNYKyjiyGEVe1iGA=
Subject key identifier: 8E:4F:B8:9D:C7:2A:49:D1:41:53:E4:0A:43:86:7A:00:7A:32:37:F7
Authority key identifier: A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6
Certificate issuer: /CN=a4f6d657c0fa21828d313507354dec1481580ed6
Certificate serial: 01A122E5D79CC0EF74A826A402A3B7030DB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
Manifest number: 0431
Signing time: Fri 09 Oct 2026 23:00:50 +0000
Manifest this update: Fri 09 Oct 2026 23:00:50 +0000
Manifest next update: Sat 10 Oct 2026 23:00:50 +0000
Files and hashes: 1: jYQejTs_VCB1cpCr7qrPeVI5_VI.roa (hash: RuEfXGQ8FdYs+It13SdSHwiFRFM5ZGec+HI06Kuq/Ik=)
2: pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl (hash: E9Y9NkSOw53QroUw0sXt63KyGM8gQxYmXMusQwW1Li8=)
3: sIQZHyrMKrx0aGLhGaxyLwG43WI.roa (hash: 1DHs9q3U0NDHbbr1v8UvKlsFj4sQc1jDRLQRmJtbDIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:e5:d7:9c:c0:ef:74:a8:26:a4:02:a3:b7:03:0d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f6d657c0fa21828d313507354dec1481580ed6
Validity
Not Before: Oct 9 23:00:50 2026 GMT
Not After : Oct 10 23:00:50 2026 GMT
Subject: CN=8e4fb89dc72a49d14153e40a43867a007a3237f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:37:1a:6f:b6:95:e1:11:2a:ef:94:6d:2f:00:
74:a0:ef:a1:c9:5b:4d:cd:71:1b:ec:f1:77:30:07:
2d:f4:a2:66:01:5a:fb:b7:2f:a3:a0:c8:ad:f7:aa:
f1:44:85:48:80:75:b0:f5:f7:05:81:4f:a7:45:ed:
7b:7a:57:cc:86:4d:ca:56:72:b7:cd:09:ba:6a:f2:
ac:06:b6:b7:7e:bf:9f:b7:76:62:9f:27:70:f2:59:
7e:47:15:3e:4e:1a:30:be:95:5e:33:88:4d:ac:d5:
54:30:9e:b0:2b:ca:c1:55:80:f4:d5:60:67:c1:04:
04:fb:3d:aa:cf:ac:51:cd:0d:b8:e6:f4:10:a6:93:
fe:ab:94:e9:52:4d:a8:be:03:ca:20:e5:5c:99:1a:
0b:7e:1a:8b:95:91:ab:f3:33:af:29:b7:8c:79:94:
29:5f:62:88:fb:a1:04:d1:23:12:26:d8:d4:b7:bb:
37:cb:39:42:c4:21:45:da:f1:0e:f2:3b:a5:12:1c:
41:78:ab:3b:37:19:38:5c:23:7a:52:48:d5:b5:e8:
fd:69:c7:60:28:84:fc:a5:56:5a:48:ce:4e:fa:97:
ea:69:f9:d5:c0:31:33:d8:c0:20:54:a3:0e:fc:a9:
86:7c:26:e8:45:11:f6:b2:43:7d:63:8c:00:0e:a5:
0b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4F:B8:9D:C7:2A:49:D1:41:53:E4:0A:43:86:7A:00:7A:32:37:F7
X509v3 Authority Key Identifier:
keyid:A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:5f:01:cd:a2:d7:96:98:b8:d6:a9:05:52:fd:cc:d0:04:6b:
9f:69:c7:9f:eb:a1:4e:5d:96:d7:b1:7f:47:f5:64:01:12:3f:
08:06:10:27:8c:a3:9d:c9:c1:36:a0:1d:f9:03:71:86:81:cd:
bf:f0:d3:4f:a3:c7:fd:4a:80:bb:25:ee:c8:51:2d:0a:7b:c4:
67:0f:ad:96:9f:88:8a:b2:c5:e1:85:48:49:ea:a8:70:59:2e:
9b:e2:f2:1f:d7:e8:d1:fb:22:5a:5d:04:13:05:ae:41:c4:85:
e3:b1:a3:c9:ef:f7:9a:75:8d:6b:b1:d8:c8:70:d7:87:0a:44:
36:c4:1e:aa:ed:d8:ca:d1:9a:e8:19:fe:7d:04:6c:0e:9b:ce:
58:b2:95:a5:ba:fc:5a:0b:ed:64:0d:b9:4c:71:1c:12:94:0d:
8a:e7:88:e8:ca:6d:3f:25:e9:71:5c:ff:af:a1:bb:de:63:b4:
b7:8f:52:0c:02:a4:63:aa:bc:82:0d:39:bf:aa:30:c3:ad:e0:
a1:b8:e0:2f:b7:1f:07:cb:17:26:29:ee:af:39:05:41:98:98:
32:85:77:a6:bb:94:08:85:fd:4e:0e:2d:78:12:fe:02:8c:1f:
85:be:d5:0e:87:4c:f0:93:6b:10:e3:f3:67:46:e9:dc:2e:1d:
5d:6e:eb:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 06:43:37 2026 by rpki-client