Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
File: to-PMlFKGD6Xejx982Rz1WJgxKQ.mft (raw, json)
Hash identifier: zrKaRpWRaHcVoJriINkGGqcHSdbXpOLVV/KRphMJU0w=
Subject key identifier: 19:C5:E3:88:D3:FC:0D:BD:DC:3E:CA:E1:71:A9:D5:7C:77:26:9F:70
Authority key identifier: B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
Certificate issuer: /CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Certificate serial: 01A0E3D009411C8E925796427BA7F2C01966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
Manifest number: 0ED7
Signing time: Sun 27 Sep 2026 17:00:56 +0000
Manifest this update: Sun 27 Sep 2026 17:00:56 +0000
Manifest next update: Mon 28 Sep 2026 17:00:56 +0000
Files and hashes: 1: UycNDBh6XIKJ82eOMM9nsWm3RUU.roa (hash: j5CuV0Ecvfd3t9K7/xrfKK4OIBdyHHKPYNpzUJ5l9jc=)
2: to-PMlFKGD6Xejx982Rz1WJgxKQ.crl (hash: nEfKBw5smLng/eD3URN7njPaqwVh53TR7keb0n4Olfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:d0:09:41:1c:8e:92:57:96:42:7b:a7:f2:c0:19:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Validity
Not Before: Sep 27 17:00:56 2026 GMT
Not After : Sep 28 17:00:56 2026 GMT
Subject: CN=19c5e388d3fc0dbddc3ecae171a9d57c77269f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:49:27:89:b7:a3:39:12:c4:91:5a:02:34:87:
65:4c:f0:a6:1a:de:ad:e2:bd:f7:d2:77:0c:64:8a:
ff:28:0b:de:37:14:82:86:c2:98:93:6c:2d:c1:5f:
66:30:96:66:aa:4d:45:5d:62:50:3e:d8:b8:7e:bd:
ea:33:a2:1a:67:e7:9b:7b:be:2a:5d:9e:00:51:f1:
84:d8:3b:92:41:0f:e2:0d:0a:b3:71:b2:22:87:68:
00:5b:ff:46:e3:e6:ed:1b:f6:8c:5e:c8:1a:81:09:
ed:cf:31:a7:65:60:c0:02:6e:24:0d:1c:00:48:5e:
cc:b8:5d:e4:29:b5:c5:d8:1a:8e:e2:2a:56:63:b3:
8b:c2:19:da:7c:31:43:35:9b:c3:dc:8f:df:0d:30:
c9:b3:ca:df:ae:23:12:6b:bb:c4:f5:0f:65:5d:6f:
36:1c:00:a5:4f:34:bd:15:9c:00:b2:d7:6c:13:88:
bc:c5:12:2e:7d:60:36:e0:76:3a:67:ff:bb:d7:6c:
64:84:84:8b:b4:ca:59:83:8a:3b:58:45:03:e7:e9:
b6:20:3f:7d:11:57:15:1d:38:22:2c:e1:db:f2:5c:
3d:54:20:f4:bd:52:c7:46:4e:9e:1e:12:82:38:b9:
7c:b7:2d:a7:99:51:1e:21:37:2b:48:57:54:6e:e2:
d8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C5:E3:88:D3:FC:0D:BD:DC:3E:CA:E1:71:A9:D5:7C:77:26:9F:70
X509v3 Authority Key Identifier:
keyid:B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:39:f2:f0:3d:50:49:bb:0c:3b:c9:fa:2c:9d:e2:e2:ca:1d:
e1:5c:fb:a2:d9:5a:3a:a1:58:4e:fb:4f:6a:4c:57:7c:31:41:
97:d7:98:40:c8:53:a1:89:8f:79:f6:5e:d6:d0:f4:50:a6:12:
b7:15:55:9c:10:60:23:11:47:07:5c:a3:b0:75:67:77:40:30:
06:76:c9:43:e5:0b:ec:08:24:cf:f9:82:c5:cc:05:58:a5:77:
85:e6:e9:18:a7:23:cc:2c:a8:a0:f7:88:c3:fd:0a:7d:6c:ff:
45:57:02:7b:3d:df:3c:dc:66:3c:30:58:9c:10:04:41:f6:93:
e4:f5:b3:4d:9b:15:a3:42:21:7d:71:09:bb:6d:08:f4:be:42:
0b:26:ee:dc:e6:d3:d9:d1:07:91:53:27:c9:4e:57:ba:68:f9:
55:94:ea:4f:82:b0:71:40:65:c3:da:84:89:25:af:54:16:d4:
35:67:a8:25:14:78:f7:09:5d:f7:2e:fc:7e:d1:09:5f:3f:3f:
09:f2:84:7d:5d:81:a9:ed:2d:43:22:fe:28:74:47:e7:dc:28:
95:fb:fb:b7:95:ec:81:ba:4b:6a:94:cc:38:49:a2:7b:97:1a:
08:2d:7b:dd:f4:e6:66:03:9a:b9:b1:89:9a:0a:2b:da:bc:14:
7e:44:bc:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:16:41 2026 by rpki-client