Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
File: pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft (raw, json)
Hash identifier: kqtdZglX2QGK0WscytFhcqD8wL56JEInj38XhrmjvKw=
Subject key identifier: 43:67:D0:28:48:9A:7A:AC:F3:98:3C:F6:C8:73:A8:10:ED:16:9F:FE
Authority key identifier: A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0
Certificate issuer: /CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
Certificate serial: 01A13A4A2734E1AE865C85CBD58EA273957B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
Manifest number: 1025
Signing time: Wed 14 Oct 2026 12:01:40 +0000
Manifest this update: Wed 14 Oct 2026 12:01:40 +0000
Manifest next update: Thu 15 Oct 2026 12:01:40 +0000
Files and hashes: 1: Z8sIth2fuLtbZU5YZYofujl3N3Q.roa (hash: OuZ+DZI7vPFF2f+5cYLFAwbQ08o0C2E+Uzidod1oA7I=)
2: pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl (hash: Kjr9/C5pQbxF94s/0Pp83n4pj00XGGoOwdQXEaIOd+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 12:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:4a:27:34:e1:ae:86:5c:85:cb:d5:8e:a2:73:95:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
Validity
Not Before: Oct 14 12:01:40 2026 GMT
Not After : Oct 15 12:01:40 2026 GMT
Subject: CN=4367d028489a7aacf3983cf6c873a810ed169ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f2:c5:b1:d8:48:09:2e:cc:4a:d1:c9:56:8f:
2b:19:5a:da:e8:67:51:4e:94:2b:e3:f9:13:3f:c6:
0f:6e:d0:7a:1c:01:3d:3e:bb:ad:60:68:e4:2f:db:
38:4a:bb:22:7d:25:87:3e:3a:f6:fb:c3:35:f8:e9:
53:e4:9b:3d:5a:d7:de:98:5e:44:b7:58:2e:8e:f5:
81:fb:73:4e:87:e8:12:52:5e:48:63:30:ba:63:e7:
78:10:ed:dd:a1:24:27:6d:9d:f8:61:58:b2:a9:42:
b3:af:3b:2e:50:5f:6f:10:61:5f:9a:83:85:30:86:
f4:69:70:cb:e6:8d:d7:aa:22:2e:fc:06:17:bf:4d:
5a:ef:e3:cf:44:e7:45:04:57:5f:f2:09:5e:d9:2d:
9a:a8:13:86:1c:5c:e7:b8:8a:ee:3b:c0:63:5c:fd:
bc:84:ef:bf:1b:88:ef:b4:dc:35:59:6a:4f:af:21:
5c:22:d6:ba:ad:15:7f:00:78:a6:c3:bd:be:d8:ae:
22:78:6f:5f:04:9a:48:29:bf:ee:d9:d6:17:51:0a:
63:07:bb:32:88:bf:a5:02:e2:58:91:6a:8d:a8:c1:
bc:97:05:9a:a0:92:24:76:37:53:de:4c:5a:bc:5c:
11:5a:00:eb:9b:8e:44:c2:a5:e7:68:f1:1c:1f:a7:
2b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:67:D0:28:48:9A:7A:AC:F3:98:3C:F6:C8:73:A8:10:ED:16:9F:FE
X509v3 Authority Key Identifier:
keyid:A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:40:3b:7d:7b:d1:fd:04:5a:ce:c0:a5:eb:62:89:94:55:d4:
b0:e9:bf:7c:4b:c7:84:9d:a5:d6:96:7a:bf:7e:95:e7:56:69:
91:25:0a:1f:20:0b:55:9f:a0:84:57:5a:ac:25:bd:96:a1:db:
b4:cc:dc:b6:3d:eb:e1:df:79:21:bd:9d:5e:22:b5:dd:74:f8:
42:9a:c1:fa:60:d5:7c:b8:e2:84:54:6b:22:71:ad:db:00:bf:
cc:c0:ca:9c:66:1a:38:d7:e8:74:e2:1c:c4:b1:19:85:31:2e:
62:94:2a:e2:a5:ec:5e:c9:40:c6:0c:cf:39:9d:f6:20:94:1c:
87:bc:de:d2:87:00:bb:c8:d1:8a:e3:ec:96:3d:89:e7:9b:0e:
7f:a1:af:57:50:e7:3c:c9:78:1c:ac:6d:a7:f7:15:be:6d:33:
ba:ea:68:f0:1b:c3:9e:64:b3:9a:19:3e:6e:e6:05:8c:e4:fe:
21:63:26:31:ff:6c:67:18:56:0b:d4:db:d8:35:20:17:bf:29:
be:d9:e5:13:fb:17:33:45:e6:10:57:f1:2d:78:44:2f:50:fb:
1c:2d:71:68:df:1f:7c:71:3f:59:1e:f8:d6:7f:95:65:81:07:
c6:11:eb:bd:bf:64:96:8a:86:4a:7e:d9:5b:8a:c4:e4:0a:7d:
ed:a3:16:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:38:00 2026 by rpki-client