Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
File: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft (raw, json)
Hash identifier: ZdBycwI9nOaw2u6YWr/+vINAPA1LHXJ+mo0i9HWX5ok=
Subject key identifier: DF:33:4F:3F:59:3D:6D:37:64:0F:7B:CA:4F:CD:43:53:60:61:EC:46
Authority key identifier: A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
Certificate issuer: /CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Certificate serial: 01A0C6D7B8F3EA85420E6F38CD6541C3923F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
Manifest number: 0E5A
Signing time: Tue 22 Sep 2026 02:00:21 +0000
Manifest this update: Tue 22 Sep 2026 02:00:21 +0000
Manifest next update: Wed 23 Sep 2026 02:00:21 +0000
Files and hashes: 1: jbAqNXtEEA5VMmJmYWIDy0wpLeE.roa (hash: heA9ElftnVcEx/Z56cUQXfy2JpdBhi/Gw5ToPa737lc=)
2: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl (hash: +pkIdrXCmPo+zfOU/UEIqEdMtpetNXSO/+SsjDWua9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 02:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d7:b8:f3:ea:85:42:0e:6f:38:cd:65:41:c3:92:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Validity
Not Before: Sep 22 02:00:21 2026 GMT
Not After : Sep 23 02:00:21 2026 GMT
Subject: CN=df334f3f593d6d37640f7bca4fcd43536061ec46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cf:21:7a:ac:01:12:23:1a:41:d0:3e:06:56:
36:d9:ea:6e:84:aa:50:bf:d9:cb:bf:82:55:dc:6f:
01:05:f9:13:f2:33:f9:57:e9:15:e4:22:06:2b:88:
73:41:b5:60:e3:39:03:6a:d4:b4:ec:63:03:44:87:
eb:a8:b7:95:77:37:60:7e:f7:8a:c1:59:24:56:0c:
ec:d1:eb:32:d0:8f:47:f0:59:10:e7:c6:fd:0f:7f:
43:43:50:a6:cf:1d:1d:98:74:9a:59:dc:07:6d:7f:
d0:8a:87:e9:d3:6d:1d:92:d0:32:58:eb:0d:64:1c:
3d:75:90:f3:1a:f4:fc:30:bb:64:60:ae:82:eb:b8:
61:d1:45:3c:b1:a5:fa:40:5c:e0:da:f1:ce:a3:90:
5c:f5:d5:af:41:78:7b:f3:38:d1:1b:43:fe:6f:60:
e3:ab:2a:5d:dd:a1:3c:44:0f:1a:dd:b3:9d:aa:30:
86:93:fb:de:1f:12:7a:92:c7:3e:10:e7:22:10:8d:
08:32:58:a2:1b:5c:03:62:f3:e9:99:eb:a8:d9:bf:
67:bc:07:65:65:5a:28:08:2d:ea:da:af:fd:26:15:
bc:38:5d:62:6e:7e:c2:77:8e:b1:73:62:cd:19:cb:
45:ef:5e:c2:8a:6b:1f:aa:95:34:32:d3:a1:35:f2:
71:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:33:4F:3F:59:3D:6D:37:64:0F:7B:CA:4F:CD:43:53:60:61:EC:46
X509v3 Authority Key Identifier:
keyid:A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d0:42:1b:f6:e0:91:40:12:b6:1b:cc:12:7d:cd:a3:1d:54:
c3:2f:30:4c:4d:bf:38:8b:e5:0e:f6:bf:40:50:13:8d:1d:81:
a0:51:cb:ac:07:74:38:1e:6d:73:50:dc:5d:46:bf:89:5d:50:
04:b7:88:f1:8d:83:46:76:95:aa:82:be:ef:57:ba:70:99:ea:
c5:09:d2:8f:97:7b:38:ed:6d:44:2f:f9:bf:ff:41:f9:e4:99:
b6:3a:37:55:4a:ca:1c:79:81:f4:f9:96:e1:ba:b5:51:90:56:
10:af:c2:a9:27:50:f3:2a:ad:fe:99:74:a4:37:6d:ec:3f:92:
97:71:65:2e:85:b1:e3:cd:d5:b1:62:ef:64:5f:83:78:aa:1b:
51:10:72:a1:04:fd:f8:bd:fe:67:1d:bc:af:29:a8:ec:b2:1b:
e5:4b:d1:44:a4:f0:28:14:d1:c1:4c:fc:b3:21:7d:cd:80:c6:
ae:23:a4:29:b3:7a:43:8b:f8:ff:c9:2c:5f:8b:ca:df:d7:61:
a9:5d:73:59:ec:d4:0f:fe:19:5a:36:25:86:f1:f0:05:d2:69:
97:55:e9:0c:7b:c1:bc:76:23:00:fa:36:6e:25:33:06:28:f1:
f0:9a:9b:e2:37:53:a1:bd:a3:14:52:ad:26:d0:ec:81:9f:ef:
a3:23:0e:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDG17jz6oVCDm84zWVBw5I/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NDc4OTNmYjViMzQ4ZTY4YTY2ZDU1YTI4ZjI3OGNiZjM5
MzFkZjQwHhcNMjYwOTIyMDIwMDIxWhcNMjYwOTIzMDIwMDIxWjAzMTEwLwYDVQQD
EyhkZjMzNGYzZjU5M2Q2ZDM3NjQwZjdiY2E0ZmNkNDM1MzYwNjFlYzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAws8heqwBEiMaQdA+BlY22epuhKpQ
v9nLv4JV3G8BBfkT8jP5V+kV5CIGK4hzQbVg4zkDatS07GMDRIfrqLeVdzdgfveK
wVkkVgzs0esy0I9H8FkQ58b9D39DQ1Cmzx0dmHSaWdwHbX/Qiofp020dktAyWOsN
ZBw9dZDzGvT8MLtkYK6C67hh0UU8saX6QFzg2vHOo5Bc9dWvQXh78zjRG0P+b2Dj
qypd3aE8RA8a3bOdqjCGk/veHxJ6ksc+EOciEI0IMliiG1wDYvPpmeuo2b9nvAdl
ZVooCC3q2q/9JhW8OF1ibn7Cd46xc2LNGctF717CimsfqpU0MtOhNfJxZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8zTz9ZPW03ZA97yk/NQ1NgYexGMB8GA1UdIwQY
MBaAFKZHiT+1s0jmimbVWijyeMvzkx30MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGtlSlA3V3pTT2FLWnRWYUtQSjR5X09USGZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kYThjYjEtMWJmYy00M2ZkLWEwZDIt
ZDYyNDQ5NmRkY2M4LzEvcGtlSlA3V3pTT2FLWnRWYUtQSjR5X09USGZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9kYThjYjEtMWJmYy00M2ZkLWEwZDItZDYyNDQ5NmRkY2M4
LzEvcGtlSlA3V3pTT2FLWnRWYUtQSjR5X09USGZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9BCG/bg
kUASthvMEn3Nox1Uwy8wTE2/OIvlDva/QFATjR2BoFHLrAd0OB5tc1DcXUa/iV1Q
BLeI8Y2DRnaVqoK+71e6cJnqxQnSj5d7OO1tRC/5v/9B+eSZtjo3VUrKHHmB9PmW
4bq1UZBWEK/CqSdQ8yqt/pl0pDdt7D+Sl3FlLoWx483VsWLvZF+DeKobURByoQT9
+L3+Zx28rymo7LIb5UvRRKTwKBTRwUz8syF9zYDGriOkKbN6Q4v4/8ksX4vK39dh
qV1zWezUD/4ZWjYlhvHwBdJpl1XpDHvBvHYjAPo2biUzBijx8Jqb4jdTob2jFFKt
JtDsgZ/voyMO9A==
-----END CERTIFICATE-----
Generated at Tue Sep 22 12:51:31 2026 by rpki-client