Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
File: pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft (raw, json)
Hash identifier: ldtdHkVK9IQjWngss7b37swfatJaPnTqAZZ2ByXDm9o=
Subject key identifier: 0A:8E:16:A6:79:19:23:E2:6F:9D:BF:61:87:59:06:BC:1E:C4:3A:E1
Authority key identifier: A4:F5:53:3A:52:7B:26:4C:A2:E8:37:32:85:D7:80:D3:3A:2B:D0:A1
Certificate issuer: /CN=a4f5533a527b264ca2e8373285d780d33a2bd0a1
Certificate serial: 019DA30A657B2F96BA3F9BA0F34F94A416A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
Manifest number: 055A
Signing time: Sun 19 Apr 2026 00:01:00 +0000
Manifest this update: Sun 19 Apr 2026 00:01:00 +0000
Manifest next update: Mon 20 Apr 2026 00:01:00 +0000
Files and hashes: 1: pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl (hash: iGdtNuvMprSOumaHiS2jExmMqYq12YI4JpkZCbLjfeA=)
2: t83QwmnsF94N1e2quVeWFqxv3Q4.roa (hash: S00r80MkvAcmYicBdHFKql/0j/7ix5B+Lwxl0Q6uMXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:65:7b:2f:96:ba:3f:9b:a0:f3:4f:94:a4:16:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f5533a527b264ca2e8373285d780d33a2bd0a1
Validity
Not Before: Apr 19 00:01:00 2026 GMT
Not After : Apr 20 00:01:00 2026 GMT
Subject: CN=0a8e16a6791923e26f9dbf61875906bc1ec43ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:89:25:d9:33:f1:83:2e:99:d3:69:b8:a4:b0:
9f:8c:bc:90:55:0e:c2:3d:e1:2a:40:1c:c2:30:32:
7e:82:f2:91:97:eb:4f:e0:c2:5a:79:fe:1d:94:bc:
e8:5e:f1:59:87:a0:bb:4b:63:f0:6e:b6:a3:74:56:
ef:3f:59:6f:0f:c8:dd:ad:1d:9c:e9:ca:df:1d:86:
7a:8a:da:26:ca:28:17:c6:b9:49:d1:85:58:14:12:
e6:e5:5a:df:53:07:87:3a:10:e5:4f:47:f6:18:46:
73:76:4a:27:f9:e2:b6:fb:78:4b:c6:e5:34:ff:5d:
c3:25:59:94:58:8a:d1:ca:ba:66:f0:58:df:19:5b:
50:f2:0a:29:67:63:3e:65:25:de:a4:a7:2f:56:a0:
d4:00:2e:e8:8b:15:b7:25:a6:87:96:b7:1a:be:6b:
ad:b0:ae:81:18:d4:ad:43:cd:c0:21:31:1d:e1:1c:
b7:bf:b8:ff:d4:ca:ac:66:a4:0e:ba:53:72:8b:6a:
8c:81:b4:ed:fd:6e:a9:21:68:13:12:9a:20:89:b5:
8f:39:31:9d:2b:66:9f:d5:4b:cf:8b:8b:39:b8:1d:
83:09:7a:49:8c:b3:0c:3e:bb:12:03:65:01:91:41:
d7:18:fe:82:e5:98:fe:55:bc:96:64:53:c9:80:77:
b1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8E:16:A6:79:19:23:E2:6F:9D:BF:61:87:59:06:BC:1E:C4:3A:E1
X509v3 Authority Key Identifier:
keyid:A4:F5:53:3A:52:7B:26:4C:A2:E8:37:32:85:D7:80:D3:3A:2B:D0:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:79:45:51:c6:e2:ea:fb:ed:a3:c1:6a:4b:f6:9b:7c:0c:1e:
c4:e6:12:41:94:91:d5:39:08:db:e8:c4:76:c7:b7:65:b3:35:
61:74:6c:34:0a:32:e1:7a:e1:85:24:84:3c:f9:a2:2a:28:bc:
da:b0:9d:32:05:3b:be:6d:3d:3f:a9:be:24:fc:9a:e3:7f:87:
37:92:2f:81:96:c5:f7:df:87:5e:d8:67:1e:22:c1:c7:9f:3a:
fc:08:51:74:f5:11:61:a4:0d:19:11:bc:68:0e:1a:a7:6d:1f:
17:9b:ea:cb:a3:21:bc:35:10:05:a2:0e:e1:dc:98:c6:e8:a4:
2a:b1:7a:94:af:a2:44:dd:0f:24:8f:9c:3e:4a:33:a7:d6:39:
68:07:e9:35:d5:6a:fd:98:5c:2e:13:98:ca:4e:93:08:f5:55:
d4:d3:4b:39:71:76:5f:a3:1d:92:5c:be:f0:7e:5f:68:b8:76:
97:78:d3:94:bb:ca:99:87:bc:fa:70:5a:b3:c8:51:de:99:d7:
9f:44:e0:9e:79:a6:27:ed:f4:87:98:4c:80:6e:31:61:d1:94:
9e:03:e5:c3:71:80:a4:70:a4:22:3e:c0:a6:ba:3c:f3:96:da:
9c:bb:12:e7:7c:53:dc:90:c8:84:cf:4d:a4:15:a4:7a:f3:73:
ec:86:0d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:17:09 2026 by rpki-client