
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
File: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft (raw, json)
Hash identifier: kUr8mx4scwkfia1LbyUulAirsaNinLMvaRIhBgBavs0=
Subject key identifier: 3A:91:C4:91:84:3A:05:45:BD:DB:F5:66:FF:F7:52:43:3D:C2:0E:94
Authority key identifier: A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E
Certificate issuer: /CN=a50f21c3dc93757fc03282a835600d659f961e8e
Certificate serial: 01A0FFB54CEFE1948CB3727AFB6EF20B1B00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
Manifest number: 0F66
Signing time: Sat 03 Oct 2026 03:01:06 +0000
Manifest this update: Sat 03 Oct 2026 03:01:06 +0000
Manifest next update: Sun 04 Oct 2026 03:01:06 +0000
Files and hashes: 1: IyFwnbWnoKfZVMOw4siaFLOw0dM.roa (hash: I/fImPBHiDykSEzgNGq+cfAayabaV17LU6Onzjp6x+A=)
2: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl (hash: lcrmvn29tb+/1a4GP75kqYYmVVWqfoe8MXKCKCgvB/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:b5:4c:ef:e1:94:8c:b3:72:7a:fb:6e:f2:0b:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a50f21c3dc93757fc03282a835600d659f961e8e
Validity
Not Before: Oct 3 03:01:06 2026 GMT
Not After : Oct 4 03:01:06 2026 GMT
Subject: CN=3a91c491843a0545bddbf566fff752433dc20e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:65:e5:1d:5b:9e:7b:09:c4:fb:fd:ea:af:3b:
05:42:f3:17:25:bc:64:bf:9c:36:97:2a:8b:62:a7:
18:86:58:1e:f6:4f:fc:10:5d:f5:2e:12:17:95:50:
b3:8e:7d:36:f3:73:9a:fa:54:ce:f5:1e:76:ab:1c:
14:4e:d6:eb:f5:e4:30:0f:84:f1:1d:d9:38:4c:b2:
ab:4e:59:8b:fa:8b:c4:e9:44:61:30:7d:b1:62:31:
8a:4c:05:52:5a:75:3d:0c:84:0c:f5:53:3c:0a:ea:
c6:c4:53:a2:10:e4:28:5a:b2:c5:07:cd:52:3d:dc:
bf:b5:15:ac:bf:b2:fb:ba:10:86:28:70:a3:31:4d:
2b:55:4f:98:ef:e6:72:14:63:3f:60:30:cd:e9:3c:
73:d8:a1:a9:b0:43:79:0f:53:b0:a8:d4:63:d7:a5:
64:1b:1d:22:94:58:75:53:c0:fd:0c:1a:ae:a1:e9:
26:82:ad:cd:96:0c:0a:15:40:28:22:1f:71:55:75:
20:67:9b:26:85:e5:48:4d:9d:54:30:94:90:05:a0:
5f:89:7c:a4:a2:3f:f5:4f:82:dc:6b:23:53:74:37:
95:1e:9e:4f:62:db:40:71:d0:4b:cd:28:6c:52:b2:
95:b3:82:84:87:b6:67:d2:11:d1:81:a6:f4:a7:0f:
37:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:91:C4:91:84:3A:05:45:BD:DB:F5:66:FF:F7:52:43:3D:C2:0E:94
X509v3 Authority Key Identifier:
keyid:A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:71:99:f4:67:2f:6c:96:f4:80:74:97:31:4e:c5:12:cb:90:
34:e5:67:46:6e:1b:e1:15:cb:b0:d5:bb:af:b6:02:56:be:c3:
bb:a1:d7:32:ef:3e:ce:d6:71:02:ea:82:34:26:29:c8:23:5a:
c5:cf:6a:ef:7c:03:9f:f3:a2:66:6b:b9:e9:b8:29:a5:0b:05:
62:50:a7:a7:57:89:f6:7f:ea:7a:6d:a5:6a:24:33:7c:14:76:
0f:e3:6a:72:55:68:5a:78:09:4b:65:0e:a9:1e:59:7f:60:f3:
33:3c:db:c3:09:2b:bd:56:5d:77:9a:c7:81:0b:d5:c5:c7:3d:
dd:53:f3:fc:82:5f:a4:39:3d:22:9e:fd:d3:50:6e:a2:6c:79:
61:c4:c3:df:81:57:cc:a3:59:ba:9e:7f:0a:00:07:24:e3:7f:
ae:d6:f9:68:05:3b:63:2e:32:7f:9f:84:80:12:9c:fc:6f:a8:
cc:d2:cf:b3:b6:23:73:2b:4d:b3:5a:a6:e3:c1:a7:59:8f:c6:
92:3e:76:fa:65:5f:ee:8d:7a:ca:8b:24:16:e0:70:2a:58:4e:
0b:f3:fa:89:74:00:e7:b3:17:bd:01:b9:8c:e4:22:56:db:2e:
be:e2:2c:48:80:3a:2e:5d:62:45:1e:6c:45:07:14:c7:4d:09:
08:fd:9d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:22:40 2026 by rpki-client