Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
File: pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft (raw, json)
Hash identifier: OZ8zx+R+twP4QatXWzwlg0WkVlJmIAqpBYj2oO6LrCM=
Subject key identifier: 8C:B4:03:87:2D:12:A1:EF:B3:98:65:BD:B9:21:E0:5F:C7:7A:72:14
Authority key identifier: A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0
Certificate issuer: /CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
Certificate serial: 01A1385AE1ED41817F74A45C682869538B51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
Manifest number: 1024
Signing time: Wed 14 Oct 2026 03:00:42 +0000
Manifest this update: Wed 14 Oct 2026 03:00:42 +0000
Manifest next update: Thu 15 Oct 2026 03:00:42 +0000
Files and hashes: 1: Z8sIth2fuLtbZU5YZYofujl3N3Q.roa (hash: OuZ+DZI7vPFF2f+5cYLFAwbQ08o0C2E+Uzidod1oA7I=)
2: pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl (hash: 6qQ0W1pxUO5C077iw+Kww9taYX41WSPAw168Hg/PCqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 03:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:5a:e1:ed:41:81:7f:74:a4:5c:68:28:69:53:8b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
Validity
Not Before: Oct 14 03:00:42 2026 GMT
Not After : Oct 15 03:00:42 2026 GMT
Subject: CN=8cb403872d12a1efb39865bdb921e05fc77a7214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a2:93:89:33:69:d2:3b:41:81:69:2d:19:84:
9f:3a:94:02:f7:87:50:39:1d:3f:b0:7f:13:e9:73:
fb:75:93:35:aa:14:2b:9d:c8:d3:56:3b:d1:af:36:
74:f6:80:6c:58:58:b3:de:87:a1:0a:cd:eb:7a:c3:
df:fb:fd:fd:97:57:77:8d:99:fa:33:c5:8f:1e:02:
c3:65:c9:b1:35:89:50:2e:0f:2f:47:44:8f:10:50:
84:4a:02:72:55:ec:b9:b8:73:d9:64:f7:48:0f:41:
53:38:21:a9:e4:32:a5:e7:f2:10:b9:aa:58:fd:27:
9b:a2:25:ff:b6:47:49:0b:5b:fa:95:3a:59:b8:99:
ac:45:10:72:f0:8c:ee:52:2a:8a:e0:83:2e:f3:5f:
b7:7e:d8:1b:73:45:29:af:8c:93:34:e5:2d:87:83:
4f:95:8e:d7:63:d0:98:93:9f:da:55:b5:c4:eb:60:
99:da:49:6c:55:3b:8a:0b:c4:eb:46:f7:4a:84:32:
ca:74:b8:85:13:af:f5:6d:de:ab:28:59:2b:c5:69:
c5:1c:cb:de:1a:65:36:7b:3f:5e:e9:26:92:43:8c:
84:1d:5d:37:8e:39:5c:ba:ba:39:d1:a3:19:8b:8c:
12:cf:0f:40:9e:22:10:cc:6f:37:d2:48:89:27:54:
c0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B4:03:87:2D:12:A1:EF:B3:98:65:BD:B9:21:E0:5F:C7:7A:72:14
X509v3 Authority Key Identifier:
keyid:A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e7:b3:be:e3:f0:a6:ab:04:5d:77:ba:87:1f:21:7e:0b:ff:
45:a2:ed:27:92:70:5e:74:09:4b:e4:ac:2b:da:14:6f:c5:2e:
70:11:af:1a:61:c9:1b:5d:ec:44:aa:e6:c6:c7:ce:b9:42:9b:
c5:99:f3:de:7b:9b:22:12:72:ac:33:27:ba:77:97:2e:6c:c8:
35:c0:74:1f:86:e0:7a:65:22:e9:5f:55:e7:cb:15:13:2e:f7:
e0:3d:cc:bb:2e:f1:04:81:a8:af:ae:ef:d6:a0:32:41:dc:12:
b2:96:bd:e5:3f:e3:c6:cc:57:0d:90:1e:18:e0:17:be:6a:bb:
88:de:11:e4:1d:f9:86:3d:c5:8c:30:96:6b:b0:80:82:01:8c:
1f:03:49:d8:04:db:43:13:9f:8c:09:d0:7b:a8:2b:c1:8b:d0:
02:06:20:80:44:10:89:53:30:53:19:7f:86:b4:99:a8:5a:fe:
ac:09:fe:61:ff:bd:64:08:e6:42:93:bd:2c:3f:fd:97:9b:36:
9b:a0:2d:25:59:4e:dc:6e:c4:83:7e:6b:c7:1b:12:aa:a8:60:
89:1a:16:3e:1c:e3:1e:37:05:dc:8f:98:5f:55:21:87:d8:35:
f5:79:c0:9f:dc:3a:9b:5f:e5:8c:c1:39:99:a0:94:a8:b4:5c:
1c:49:52:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 11:55:18 2026 by rpki-client