Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
File: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft (raw, json)
Hash identifier: j6aveqjf8BsaHxWdGB+k3HC2Hg/17ATBTuR9sour48c=
Subject key identifier: 01:10:65:4A:9F:AE:F4:05:90:01:FB:44:93:38:66:22:93:4C:1A:2C
Authority key identifier: A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95
Certificate issuer: /CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
Certificate serial: 01A13C00AE0D324014CFFEAC444791A02AF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
Manifest number: 1AA3
Signing time: Wed 14 Oct 2026 20:00:39 +0000
Manifest this update: Wed 14 Oct 2026 20:00:39 +0000
Manifest next update: Thu 15 Oct 2026 20:00:39 +0000
Files and hashes: 1: ZMTWhcJ1e7tvXHUUl4ANoGMrIWk.roa (hash: 9yOiqGJYeL5bi8PHF9fNeVVcmhOJdy6bDsiWR0m6Ve0=)
2: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl (hash: J3oNtm+fFCcD8CSHgruO0RMdQ1Uh7zD0j2d6RQpPTPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:00:ae:0d:32:40:14:cf:fe:ac:44:47:91:a0:2a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
Validity
Not Before: Oct 14 20:00:39 2026 GMT
Not After : Oct 15 20:00:39 2026 GMT
Subject: CN=0110654a9faef4059001fb4493386622934c1a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2f:ca:fe:ab:b7:20:e1:b6:8b:55:f4:b5:ec:
5e:32:72:85:3d:2b:92:ed:ad:aa:9c:df:ce:24:43:
df:75:e6:09:93:da:c0:12:19:fe:55:6b:fa:55:bf:
08:a0:d3:d0:a4:3e:a8:e4:cd:fb:d4:50:c2:bc:70:
e0:6b:6b:29:11:7e:e5:98:b5:c3:f6:52:c1:52:09:
1b:2c:11:25:1a:6b:c1:77:2e:c7:27:90:05:3a:17:
e4:97:a5:a2:b9:b3:02:a5:b4:30:93:4e:07:4e:74:
d3:08:62:38:c5:8b:c7:71:c6:fa:49:2c:76:e9:de:
4c:75:7c:27:18:9a:73:7b:dd:f9:0a:c1:02:da:fe:
38:71:bd:51:53:e7:a0:d9:b1:5b:97:75:50:60:fc:
bd:0d:a4:d4:e2:14:12:0b:cf:59:d7:67:34:30:93:
a4:85:e6:8a:d1:f2:0c:93:ea:dd:e5:72:88:fa:09:
3f:20:40:41:32:f6:30:cb:7c:f3:c6:02:f7:90:90:
d8:30:a2:9a:75:17:0c:06:03:d9:9a:36:ec:ec:3d:
f8:52:c5:50:0e:58:ca:03:18:7f:fd:41:23:1c:8f:
dc:01:89:c8:4f:27:19:8a:bb:c7:c7:a4:fe:68:ec:
00:7b:76:7e:fb:6b:95:83:3d:f2:ee:2d:db:be:bc:
d1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:10:65:4A:9F:AE:F4:05:90:01:FB:44:93:38:66:22:93:4C:1A:2C
X509v3 Authority Key Identifier:
keyid:A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:4b:a1:08:f0:fd:56:2a:a6:f8:ba:1b:73:b3:f6:76:9b:af:
39:00:1c:4a:59:f3:a8:5a:5c:b0:81:50:5d:d3:ac:f4:2f:b2:
e5:96:5d:5c:64:51:b5:ab:bd:67:bd:c9:d4:b0:7c:33:4b:7b:
f6:bc:4f:01:37:0f:40:8f:6a:c6:2d:8b:4b:63:4f:3a:3e:ce:
e4:ff:5c:94:a1:f5:36:76:45:cb:67:47:5a:6e:57:24:91:47:
fa:f7:f2:d1:1a:4d:b5:35:c8:24:86:a9:66:be:dd:07:a2:8d:
ab:c8:a3:d3:0f:6e:c1:f4:15:f9:d0:ad:3c:04:0e:9c:80:f8:
b1:57:56:78:03:ab:d4:b1:b3:e2:88:96:69:15:2a:7f:ec:21:
6a:59:e7:cc:83:77:21:3c:84:0e:9c:13:72:72:8c:87:e6:e1:
06:34:40:e0:8a:89:b0:bf:b9:e1:53:c8:5a:8d:bf:6d:6d:a4:
22:61:25:8e:04:46:75:2d:4d:df:1e:00:5b:6e:dc:8c:13:1c:
1c:b8:2b:54:22:89:0a:10:f9:cb:0e:bb:1c:90:52:77:22:59:
c8:76:37:8a:5c:00:a2:9d:ac:6d:c0:6e:41:d5:de:55:8e:78:
1c:2b:96:29:92:5c:3f:3f:d4:a7:89:9d:12:c0:b8:9d:c8:b5:
23:ec:dd:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE8AK4NMkAUz/6sREeRoCr0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZjUyM2Q5NDgzODdkOGM1ZmNkZjc1MmUwYTFjYzQwOGNm
ZTgzOTUwHhcNMjYxMDE0MjAwMDM5WhcNMjYxMDE1MjAwMDM5WjAzMTEwLwYDVQQD
EygwMTEwNjU0YTlmYWVmNDA1OTAwMWZiNDQ5MzM4NjYyMjkzNGMxYTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkS/K/qu3IOG2i1X0texeMnKFPSuS
7a2qnN/OJEPfdeYJk9rAEhn+VWv6Vb8IoNPQpD6o5M371FDCvHDga2spEX7lmLXD
9lLBUgkbLBElGmvBdy7HJ5AFOhfkl6WiubMCpbQwk04HTnTTCGI4xYvHccb6SSx2
6d5MdXwnGJpze935CsEC2v44cb1RU+eg2bFbl3VQYPy9DaTU4hQSC89Z12c0MJOk
heaK0fIMk+rd5XKI+gk/IEBBMvYwy3zzxgL3kJDYMKKadRcMBgPZmjbs7D34UsVQ
DljKAxh//UEjHI/cAYnITycZirvHx6T+aOwAe3Z++2uVgz3y7i3bvrzR8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAEQZUqfrvQFkAH7RJM4ZiKTTBosMB8GA1UdIwQY
MBaAFKT1I9lIOH2MX833UuChzECM/oOVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFBVajJVZzRmWXhmemZkUzRLSE1RSXotZzVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wODVjMzUtMjhhYy00MjQxLWI5NTEt
MjBhOTAwYmM3NzZhLzEvcFBVajJVZzRmWXhmemZkUzRLSE1RSXotZzVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8wODVjMzUtMjhhYy00MjQxLWI5NTEtMjBhOTAwYmM3NzZh
LzEvcFBVajJVZzRmWXhmemZkUzRLSE1RSXotZzVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFkuhCPD9
Viqm+Lobc7P2dpuvOQAcSlnzqFpcsIFQXdOs9C+y5ZZdXGRRtau9Z73J1LB8M0t7
9rxPATcPQI9qxi2LS2NPOj7O5P9clKH1NnZFy2dHWm5XJJFH+vfy0RpNtTXIJIap
Zr7dB6KNq8ij0w9uwfQV+dCtPAQOnID4sVdWeAOr1LGz4oiWaRUqf+whalnnzIN3
ITyEDpwTcnKMh+bhBjRA4IqJsL+54VPIWo2/bW2kImEljgRGdS1N3x4AW27cjBMc
HLgrVCKJChD5yw67HJBSdyJZyHY3ilwAop2sbcBuQdXeVY54HCuWKZJcPz/Up4md
EsC4nci1I+zdEA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 05:32:06 2026 by rpki-client