Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
File: pMtQ54o6MeM3XPKquGXoRf8umcE.mft (raw, json)
Hash identifier: qGRv/S6MHjtRVlSol6njHwYVGWNNvZ9tULRCCWvJaoI=
Subject key identifier: 61:42:FF:00:11:E9:66:5E:40:A9:2F:85:3F:81:BB:6D:64:06:21:CD
Authority key identifier: A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1
Certificate issuer: /CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
Certificate serial: 01A1DE02D4F9E5872B953050BA52842AC904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
Manifest number: 1B08
Signing time: Sun 15 Nov 2026 07:01:29 +0000
Manifest this update: Sun 15 Nov 2026 07:01:29 +0000
Manifest next update: Mon 16 Nov 2026 07:01:29 +0000
Files and hashes: 1: KeBHh_EXoo6vxPcJVgCWPFy_Qck.roa (hash: Lb6JJsVM1wJrwKLdOhRrqdN+kt/BOWmpYchxNlLSv+A=)
2: RgbTxSuQRNXFVhZjHsG1yRfbDcY.roa (hash: QEQTGxs8uKOEp8JVm8z26NyHbZ3CIT8Ts2wlZUqrfqw=)
3: fc-z64p9INgXqSlpt0wgmjnDjcM.roa (hash: iAvsJsJGvYYjjk6ye/5/KN/cmvlNuk2vjqxHBnhTILY=)
4: pMtQ54o6MeM3XPKquGXoRf8umcE.crl (hash: HVpbb7pdHxq1+gDSIJ+S+CPkMHgcnWQO0G6KZmn9d5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:d4:f9:e5:87:2b:95:30:50:ba:52:84:2a:c9:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
Validity
Not Before: Nov 15 07:01:29 2026 GMT
Not After : Nov 16 07:01:29 2026 GMT
Subject: CN=6142ff0011e9665e40a92f853f81bb6d640621cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b5:43:cc:a6:96:dd:73:7c:ed:c4:42:0a:d8:
b3:79:e1:a8:60:42:75:8a:45:bf:69:8a:d3:67:5d:
ac:e9:17:f7:3a:2a:69:5c:1c:7d:43:cb:da:24:86:
96:b8:03:95:ec:34:00:c4:23:30:e6:78:2c:94:0e:
e1:b1:90:86:24:8e:4f:8a:11:53:f7:d2:9a:94:71:
97:0b:6d:31:9a:a6:5d:06:02:ab:58:11:aa:c2:a3:
98:b3:a7:a8:e7:b8:a6:e2:7a:de:69:ba:bc:1c:0a:
45:fc:13:2b:d2:ca:aa:4e:97:74:ea:14:06:d2:de:
38:91:e2:6e:53:a9:7f:49:3e:dc:73:3a:6b:17:95:
69:8c:c7:bf:88:a2:fd:dd:34:44:d5:5b:75:49:c0:
fb:0d:66:26:73:22:83:ff:20:0c:1d:a6:fa:18:f9:
d0:de:99:2e:c2:a6:68:41:76:51:e5:cf:0a:d0:7c:
e6:0c:5a:bc:ab:97:1b:4b:9f:71:1b:40:8f:0d:3b:
78:5e:c2:53:5c:1a:3f:ca:9d:8b:48:e8:ec:9a:08:
e6:a6:68:69:f8:2c:c8:9a:8d:61:d7:58:75:ae:44:
cd:05:81:2f:ff:1b:4f:07:3c:69:bc:68:d9:00:ad:
19:b5:70:c7:60:58:a9:e9:7f:02:40:77:53:00:f3:
49:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:42:FF:00:11:E9:66:5E:40:A9:2F:85:3F:81:BB:6D:64:06:21:CD
X509v3 Authority Key Identifier:
keyid:A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:72:34:65:2b:e8:cb:78:7d:7c:f5:5f:59:35:ca:8a:b4:9d:
f3:88:95:4c:41:c6:02:cf:12:3a:20:e6:9b:f9:3e:20:aa:23:
f5:15:e2:44:4b:ec:83:11:86:b5:b7:d4:d2:68:70:94:fb:bb:
2f:f0:8d:37:63:f9:a8:c3:3e:f5:60:fc:47:f4:7e:56:d7:42:
39:43:e0:62:07:85:aa:b5:fb:05:64:cf:7a:e1:c9:1c:e0:f7:
27:a8:04:6d:04:4e:c2:06:f9:2e:45:35:38:4c:75:42:7b:60:
ec:ce:8a:9e:47:58:31:c4:de:a2:de:39:34:3b:69:90:a7:78:
3a:c9:bb:2b:71:f1:f7:99:f7:38:53:c7:06:25:9c:21:90:a8:
90:37:6f:40:30:ca:a0:26:ab:20:9f:83:3a:b6:d0:ca:89:15:
7e:93:fa:bd:db:4f:58:c9:3d:30:9c:86:ef:03:b4:89:d5:da:
0b:4c:e7:f6:9d:23:5f:aa:4d:ad:21:6d:ba:98:0c:43:4a:43:
da:97:be:2f:ef:1b:c3:ef:54:c7:5d:3b:d7:42:88:02:d7:42:
19:bd:8d:77:4d:96:29:ae:18:df:a6:50:d6:a7:95:77:5b:76:
b7:97:d1:b1:c3:9f:fa:32:31:4f:c2:fc:12:12:ca:e3:b0:ad:
49:62:40:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:40:36 2026 by rpki-client