Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
File: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft (raw, json)
Hash identifier: prsOmUHZAjpmV7RMo+37Ec2P/canbVIrMqz2arnT5c8=
Subject key identifier: 99:E3:4A:09:D9:5F:49:6A:CD:0B:26:B3:96:AE:A2:2C:67:68:40:89
Authority key identifier: A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
Certificate issuer: /CN=a4a37878c14f216c32649819ea428a58225504fb
Certificate serial: 01A11D1A78D658ADBC642190BCA06E490BFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
Manifest number: 0A3C
Signing time: Thu 08 Oct 2026 20:00:36 +0000
Manifest this update: Thu 08 Oct 2026 20:00:36 +0000
Manifest next update: Fri 09 Oct 2026 20:00:36 +0000
Files and hashes: 1: clGNCBZAUsZmUY2Yr9tTeA-xspg.roa (hash: 5vbfK5sSOuwTJdbsyPF/pmsdysNhxTsWqZlPG/oHPeQ=)
2: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl (hash: y6665A5eGfJtGnN99ahJv2f1eSbk8ugA4sZdt6hSW4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:1a:78:d6:58:ad:bc:64:21:90:bc:a0:6e:49:0b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a37878c14f216c32649819ea428a58225504fb
Validity
Not Before: Oct 8 20:00:36 2026 GMT
Not After : Oct 9 20:00:36 2026 GMT
Subject: CN=99e34a09d95f496acd0b26b396aea22c67684089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c7:a3:25:02:9e:46:69:31:ce:fc:0e:ae:e8:
9c:08:e2:b2:3a:f2:03:45:9e:07:dd:29:9e:e2:2d:
05:fe:a0:bc:24:28:bb:4b:6a:07:29:68:7d:a7:67:
84:2d:fa:53:1f:ff:ab:79:e1:b4:33:8f:ab:84:30:
f3:2e:e2:f1:e5:6a:a3:ee:4c:73:1f:ca:af:4d:94:
e7:50:0e:6d:f8:83:9c:e5:91:17:52:a4:14:88:b7:
b1:99:de:99:fc:f1:32:57:61:cb:02:4e:9f:93:34:
f5:62:22:ee:83:ba:dd:55:13:67:1b:97:1d:84:3e:
6f:7b:9f:46:4e:47:00:52:8b:e0:f0:3d:94:6b:aa:
63:39:95:14:04:69:85:18:ad:87:06:37:3c:ca:a2:
95:a3:0b:8f:d7:00:6e:b2:db:13:67:d5:1c:02:3f:
b5:56:5e:9e:60:c8:2c:6f:35:4b:fa:cc:11:9e:c6:
b3:f2:d9:63:0a:bb:d7:81:87:d1:2a:8e:31:2e:21:
7d:ca:c9:33:13:ef:61:79:11:8e:e3:93:17:c8:c4:
36:e0:02:5b:00:9e:6c:15:6e:81:05:b4:17:8d:f0:
7c:8a:cb:4e:24:94:9f:a9:42:38:51:cd:44:e1:1f:
99:b4:ac:f0:d8:c6:a4:45:07:57:c1:13:fa:50:52:
6f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E3:4A:09:D9:5F:49:6A:CD:0B:26:B3:96:AE:A2:2C:67:68:40:89
X509v3 Authority Key Identifier:
keyid:A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:43:a7:73:36:6b:aa:ca:5e:b8:80:86:a2:22:43:24:cc:30:
9a:a8:3e:f6:0b:c7:dc:d9:c1:1f:69:cc:be:4a:49:70:c1:c2:
a8:a3:f8:24:8f:b0:48:14:0e:da:06:32:ef:38:12:c9:d6:a0:
99:fc:fd:a2:c2:97:be:7c:13:87:2e:a7:81:05:04:39:b6:d3:
1d:b1:92:01:23:d3:ef:72:a3:89:ad:18:85:b3:2f:8e:a4:a1:
57:c2:ff:b6:71:f3:97:fd:c1:2c:83:00:8c:0a:8b:ce:58:be:
3c:74:1c:6e:b7:e0:d4:16:6a:d0:50:44:53:8e:d8:ec:66:f7:
8b:0e:3a:9b:bd:cd:0a:56:a3:f8:89:8c:ae:67:32:e4:18:d2:
8f:bb:b5:fc:4c:2b:00:e3:28:f6:a4:39:b9:a3:76:01:2d:4b:
6b:3d:40:ad:2d:64:74:ed:db:1b:66:b7:b6:51:21:f1:73:1d:
32:56:95:3b:0d:cd:cd:3d:19:59:57:47:77:24:c3:63:ec:01:
8c:92:c2:2a:50:b1:b8:4c:46:e6:94:5d:73:59:9f:c9:d5:c2:
61:1e:5f:16:4c:1a:49:96:19:97:54:91:e3:dc:bd:2e:1e:e7:
cb:e8:cd:a8:97:d0:4c:5a:13:98:fc:23:7b:ba:cf:e4:39:70:
b5:0b:76:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 00:50:19 2026 by rpki-client