Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
File: pMtQ54o6MeM3XPKquGXoRf8umcE.mft (raw, json)
Hash identifier: yMreD4BF1LY35PrB6n2ttaog1e7uwJs8eZrSvW7JuQI=
Subject key identifier: 51:9E:AF:0B:26:FB:29:5E:C1:A4:6F:3B:6D:F1:14:11:6B:C7:B6:D4
Authority key identifier: A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1
Certificate issuer: /CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
Certificate serial: 01A0C5FCCC85EE5ECE76B8DB31C8581D887C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
Manifest number: 1A77
Signing time: Mon 21 Sep 2026 22:01:14 +0000
Manifest this update: Mon 21 Sep 2026 22:01:14 +0000
Manifest next update: Tue 22 Sep 2026 22:01:14 +0000
Files and hashes: 1: KeBHh_EXoo6vxPcJVgCWPFy_Qck.roa (hash: Lb6JJsVM1wJrwKLdOhRrqdN+kt/BOWmpYchxNlLSv+A=)
2: RgbTxSuQRNXFVhZjHsG1yRfbDcY.roa (hash: QEQTGxs8uKOEp8JVm8z26NyHbZ3CIT8Ts2wlZUqrfqw=)
3: fc-z64p9INgXqSlpt0wgmjnDjcM.roa (hash: iAvsJsJGvYYjjk6ye/5/KN/cmvlNuk2vjqxHBnhTILY=)
4: pMtQ54o6MeM3XPKquGXoRf8umcE.crl (hash: DCoAWJ8iIfFbLzpYXsKBN/TBLdog74muDxCr/5gD2lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fc:cc:85:ee:5e:ce:76:b8:db:31:c8:58:1d:88:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
Validity
Not Before: Sep 21 22:01:14 2026 GMT
Not After : Sep 22 22:01:14 2026 GMT
Subject: CN=519eaf0b26fb295ec1a46f3b6df114116bc7b6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4f:ec:3f:b4:24:34:69:0e:04:bf:57:79:e8:
75:1c:fb:3c:02:4d:00:cf:10:c5:ef:fd:d0:1e:b5:
ac:78:e8:3d:5c:f1:26:5a:6b:9c:ea:3d:e1:7a:50:
52:d9:f0:43:31:6a:78:d1:8a:e2:5f:31:31:9f:95:
38:d0:04:53:a7:f0:a3:9b:6d:63:ff:ab:85:15:d9:
36:a8:86:b1:e6:ee:67:57:8b:cc:ff:6f:34:e7:f8:
b0:84:2c:df:99:bb:21:88:bc:c5:00:08:79:7f:7f:
fe:f9:ae:b5:e6:ac:45:0e:96:51:c9:0a:9f:3b:a0:
3b:45:92:5f:87:96:5d:97:0a:84:8b:ab:4a:9b:a9:
1c:81:59:3f:ec:dd:bc:a7:1c:82:1a:36:fa:24:e6:
7c:c6:66:f9:30:70:d9:51:1f:9d:d6:6a:e5:30:3b:
5a:57:a3:c1:b2:5a:f1:13:9d:49:63:44:7e:21:2b:
de:9e:57:03:9f:33:69:e8:f6:0e:5f:df:eb:31:9a:
87:4d:39:7f:3c:8f:d9:14:8a:aa:87:51:6a:f4:f2:
07:e5:1a:da:7c:b6:e4:5c:f0:a6:e2:8d:88:2d:27:
94:c5:9a:dc:11:cc:61:51:39:91:8e:ba:24:b7:e6:
e1:6c:3a:14:08:f5:d2:9e:cf:0a:99:17:9e:a4:d2:
a1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:9E:AF:0B:26:FB:29:5E:C1:A4:6F:3B:6D:F1:14:11:6B:C7:B6:D4
X509v3 Authority Key Identifier:
keyid:A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:39:4c:89:30:6b:cc:47:a8:3d:17:3e:b1:70:16:48:e0:12:
1b:f9:24:6a:9b:f2:c8:0f:6d:79:c4:09:75:56:5b:60:55:c1:
74:e7:ec:9e:a3:0d:ad:26:f7:24:d6:01:89:b5:c2:55:23:57:
f7:e2:83:8b:78:63:aa:d7:cc:d5:d6:c5:51:f6:47:eb:a5:cd:
76:66:69:55:e0:e5:a7:ba:a1:f7:5e:04:c9:96:c2:9a:f6:6d:
1e:00:f9:25:23:de:cc:60:f1:1e:1c:1e:1c:8c:0d:de:11:d1:
5b:8b:bf:21:f2:a5:0f:f4:33:16:4e:18:d7:c4:ad:a6:05:ac:
7e:12:fe:1d:11:4e:bb:9d:be:55:58:f9:c3:6e:21:02:ee:84:
b5:52:f5:99:81:de:2e:6b:36:48:d1:f1:c1:c8:d2:e0:4c:a8:
44:62:2e:d0:7f:60:75:90:e1:2c:5d:bf:81:b6:48:e3:6f:04:
b0:9d:1e:11:de:69:e7:b7:3f:82:21:d2:b5:3c:65:ee:82:69:
65:a3:0a:95:50:f2:0d:ea:d6:c7:29:b6:af:c7:bc:94:ed:a5:
96:70:91:22:75:d6:71:89:e9:70:63:3f:25:c5:fe:7e:fa:01:
33:a4:6b:a7:ed:31:02:09:12:5c:6c:16:08:02:30:d8:06:26:
2c:cb:f6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:11:45 2026 by rpki-client