Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.mft
File: pNFmKbDakg__Ob-1rSmmjYR4BcY.mft (raw, json)
Hash identifier: H6TI1nvqijDnKHgM3TxcUwc/kyiq0K224G28nw2ZS5U=
Subject key identifier: 88:1C:6C:14:16:FA:CD:8E:40:17:62:90:BE:7D:BB:A9:F2:AB:41:61
Authority key identifier: A4:D1:66:29:B0:DA:92:0F:FF:39:BF:B5:AD:29:A6:8D:84:78:05:C6
Certificate issuer: /CN=a4d16629b0da920fff39bfb5ad29a68d847805c6
Certificate serial: 01A0C331C02A7F0A357FD3EF0611E88A384A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNFmKbDakg__Ob-1rSmmjYR4BcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.mft
Manifest number: DF
Signing time: Mon 21 Sep 2026 09:00:12 +0000
Manifest this update: Mon 21 Sep 2026 09:00:12 +0000
Manifest next update: Tue 22 Sep 2026 09:00:12 +0000
Files and hashes: 1: ZbVknpayZkYaSssOD6rrhRn8Uew.asa (hash: uH8YNsT4olZ4QCB+2CENMu1+IA4IAyWwSnwOCS0RVB8=)
2: pNFmKbDakg__Ob-1rSmmjYR4BcY.crl (hash: VCym4fdr/fSba0Zd7/6WlRl+T0bGwRQOoDJiLVoX7Fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNFmKbDakg__Ob-1rSmmjYR4BcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:31:c0:2a:7f:0a:35:7f:d3:ef:06:11:e8:8a:38:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d16629b0da920fff39bfb5ad29a68d847805c6
Validity
Not Before: Sep 21 09:00:12 2026 GMT
Not After : Sep 22 09:00:12 2026 GMT
Subject: CN=881c6c1416facd8e40176290be7dbba9f2ab4161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:55:f1:e4:38:34:c8:ee:b9:e1:38:7a:a9:07:
74:09:3c:7f:8c:c1:2e:cc:9a:d2:53:9d:95:47:7f:
3c:0f:9a:64:e0:a0:a9:d4:36:d3:13:6c:05:17:22:
7e:55:0f:f0:11:e8:bd:3e:e8:75:23:f6:b1:c6:81:
51:0e:32:fd:70:c7:1c:80:41:79:8b:4b:ea:74:f0:
21:a2:55:62:aa:b9:15:12:4d:8c:40:52:69:6a:a9:
69:ed:45:88:d1:16:96:57:3e:af:32:11:77:d8:86:
41:d8:e5:8c:2c:4e:e7:25:4b:79:bf:1a:92:00:f4:
3e:9d:83:10:84:85:3d:6a:8d:e1:48:8e:c3:6c:db:
fd:05:73:9d:25:4d:4d:0e:98:6a:52:7d:18:8a:8c:
1e:a5:a3:cf:bf:a2:30:85:d8:f5:32:a0:48:2d:19:
32:70:cd:7f:6c:03:08:a0:ee:3f:dc:d5:52:d6:cd:
81:5f:2c:51:6a:90:36:a6:32:77:ad:05:fe:6a:93:
4f:df:96:1e:a7:ec:5b:70:3c:2d:9b:49:9a:b7:72:
13:18:ac:20:1f:1a:29:f6:c4:7a:c9:6a:55:27:ba:
26:cd:43:75:4f:54:c5:7e:43:6b:47:66:2c:0f:7b:
0f:f4:62:b6:b1:a1:2b:36:ab:d2:e5:ad:13:54:07:
eb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1C:6C:14:16:FA:CD:8E:40:17:62:90:BE:7D:BB:A9:F2:AB:41:61
X509v3 Authority Key Identifier:
keyid:A4:D1:66:29:B0:DA:92:0F:FF:39:BF:B5:AD:29:A6:8D:84:78:05:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNFmKbDakg__Ob-1rSmmjYR4BcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/pNFmKbDakg__Ob-1rSmmjYR4BcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:25:cd:8e:87:00:8b:42:aa:60:de:01:53:9e:ab:c0:ef:70:
c3:15:85:97:7b:9c:52:ed:4c:69:8f:b7:90:be:f1:48:86:e8:
66:fd:e7:07:82:5e:1e:67:82:f7:12:69:e1:70:85:fc:bf:51:
9b:a2:a4:bc:06:77:02:80:22:77:e5:f2:de:de:10:f6:9e:81:
b7:7f:d4:aa:0b:27:fa:11:cf:13:9c:d4:64:e2:ae:60:fa:dd:
78:c6:d7:8b:68:7b:b7:d7:fe:80:70:8c:ea:7a:46:49:99:54:
ca:89:ac:9c:19:9e:e1:b0:a8:60:8a:86:6f:4d:c9:46:e6:1d:
1b:63:13:49:a3:d0:9b:1a:f3:39:16:8e:fe:07:c0:ab:33:69:
59:4e:70:32:45:e1:66:bc:f9:15:b4:f9:c1:69:38:5f:1d:84:
9d:5a:39:19:1f:f2:45:3d:b2:1c:e6:9f:84:fc:10:87:5f:03:
17:c9:73:a8:fa:1d:a4:8a:37:7c:b2:c4:f5:06:5e:f9:37:43:
38:01:65:43:52:be:37:76:8d:96:a9:69:e2:d3:91:cd:72:7f:
87:60:c2:88:9f:c3:b5:b0:85:82:95:f3:08:3c:3a:aa:2e:75:
9e:dd:63:3a:c3:3e:1b:c1:6a:46:7b:cd:81:15:dd:59:69:f6:
86:74:7f:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDMcAqfwo1f9PvBhHoijhKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZDE2NjI5YjBkYTkyMGZmZjM5YmZiNWFkMjlhNjhkODQ3
ODA1YzYwHhcNMjYwOTIxMDkwMDEyWhcNMjYwOTIyMDkwMDEyWjAzMTEwLwYDVQQD
Eyg4ODFjNmMxNDE2ZmFjZDhlNDAxNzYyOTBiZTdkYmJhOWYyYWI0MTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/FXx5Dg0yO654Th6qQd0CTx/jMEu
zJrSU52VR388D5pk4KCp1DbTE2wFFyJ+VQ/wEei9Puh1I/axxoFRDjL9cMccgEF5
i0vqdPAholViqrkVEk2MQFJpaqlp7UWI0RaWVz6vMhF32IZB2OWMLE7nJUt5vxqS
APQ+nYMQhIU9ao3hSI7DbNv9BXOdJU1NDphqUn0YiowepaPPv6Iwhdj1MqBILRky
cM1/bAMIoO4/3NVS1s2BXyxRapA2pjJ3rQX+apNP35Yep+xbcDwtm0mat3ITGKwg
Hxop9sR6yWpVJ7omzUN1T1TFfkNrR2YsD3sP9GK2saErNqvS5a0TVAfrywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIgcbBQW+s2OQBdikL59u6nyq0FhMB8GA1UdIwQY
MBaAFKTRZimw2pIP/zm/ta0ppo2EeAXGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE5GbUtiRGFrZ19fT2ItMXJTbW1qWVI0QmNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9hOTExNTQtYjkxNy00MTVkLWFhYzAt
ZDUwMzI3N2Q3NDA2LzEvcE5GbUtiRGFrZ19fT2ItMXJTbW1qWVI0QmNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9hOTExNTQtYjkxNy00MTVkLWFhYzAtZDUwMzI3N2Q3NDA2
LzEvcE5GbUtiRGFrZ19fT2ItMXJTbW1qWVI0QmNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmSXNjocA
i0KqYN4BU56rwO9wwxWFl3ucUu1MaY+3kL7xSIboZv3nB4JeHmeC9xJp4XCF/L9R
m6KkvAZ3AoAid+Xy3t4Q9p6Bt3/Uqgsn+hHPE5zUZOKuYPrdeMbXi2h7t9f+gHCM
6npGSZlUyomsnBme4bCoYIqGb03JRuYdG2MTSaPQmxrzORaO/gfAqzNpWU5wMkXh
Zrz5FbT5wWk4Xx2EnVo5GR/yRT2yHOafhPwQh18DF8lzqPodpIo3fLLE9QZe+TdD
OAFlQ1K+N3aNlqlp4tORzXJ/h2DCiJ/DtbCFgpXzCDw6qi51nt1jOsM+G8FqRnvN
gRXdWWn2hnR/RQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:41:16 2026 by rpki-client