Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
File: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft (raw, json)
Hash identifier: jd1fdlhnH8dHuvHctZ45Slo4cmGVjzbPEzatrC9JCMk=
Subject key identifier: 84:CD:0F:23:88:85:D4:0E:CB:79:20:3D:8D:2D:A6:AC:B0:AD:BC:6F
Authority key identifier: A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95
Certificate issuer: /CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
Certificate serial: 01A13DEF18F25257D2A0D33BC9D7115EA943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 05:00:41 +0000
Manifest this update: Thu 15 Oct 2026 05:00:41 +0000
Manifest next update: Fri 16 Oct 2026 05:00:41 +0000
Files and hashes: 1: ZMTWhcJ1e7tvXHUUl4ANoGMrIWk.roa (hash: 9yOiqGJYeL5bi8PHF9fNeVVcmhOJdy6bDsiWR0m6Ve0=)
2: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl (hash: S07iBWiRqznwT7mw5kz0Mfqc7+2C/wKasui7iYl2mi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ef:18:f2:52:57:d2:a0:d3:3b:c9:d7:11:5e:a9:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
Validity
Not Before: Oct 15 05:00:41 2026 GMT
Not After : Oct 16 05:00:41 2026 GMT
Subject: CN=84cd0f238885d40ecb79203d8d2da6acb0adbc6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:63:f0:d9:2b:af:b1:d7:b0:12:80:74:ce:94:
6f:c9:07:12:7c:e0:6a:99:1f:08:d0:c3:b8:55:7b:
c3:35:2d:03:40:da:5c:ef:d7:3f:e9:10:0d:43:cf:
21:fb:b9:5c:0a:87:b5:02:62:e0:7b:4d:be:8c:2c:
c7:2d:b5:2e:93:df:80:6a:4f:74:56:35:6e:5e:13:
35:aa:a2:10:8b:0b:3c:5f:d1:3a:5d:5f:4e:ae:58:
fa:fc:6b:cc:68:03:64:2c:2e:ca:67:5e:c7:e9:7a:
2c:07:1c:4e:d2:4b:d0:86:35:d8:60:0a:04:99:8d:
ea:20:e8:40:30:e8:f6:ed:6b:04:6c:a8:fd:dd:e4:
20:52:d3:80:64:28:48:9d:c8:58:b0:9b:f4:76:13:
cb:04:ae:40:ea:54:f1:83:8e:8f:68:99:e3:59:ed:
71:89:e3:0f:a8:3c:53:ca:31:2b:cc:41:13:97:4e:
01:90:96:e3:c1:51:5b:43:14:e8:c3:26:bd:7c:40:
fd:c6:01:76:27:3f:ab:df:dd:90:db:a2:43:49:2e:
64:b4:48:d3:45:d8:0c:30:f4:19:b3:db:4c:b1:b8:
ca:6a:1a:06:5b:11:67:c3:52:c1:19:fc:27:f0:23:
54:f0:1d:c8:d0:dd:41:93:28:7f:b5:c3:d5:4c:e6:
8c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CD:0F:23:88:85:D4:0E:CB:79:20:3D:8D:2D:A6:AC:B0:AD:BC:6F
X509v3 Authority Key Identifier:
keyid:A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:be:b7:99:9f:93:31:e5:1a:87:1b:85:3d:f2:b5:9a:ef:48:
7e:60:e9:89:20:bc:ad:50:ea:14:3d:1c:fd:3a:48:ca:02:56:
f3:53:0d:4e:42:87:f6:db:fc:ac:01:2e:a1:19:71:b0:d7:74:
b4:49:39:63:75:f7:4b:d4:b1:53:30:30:7a:f7:d1:81:9e:6a:
d3:74:c3:bd:11:e6:f2:8e:72:6f:75:65:8e:8b:7d:c6:67:0b:
a6:af:39:f0:c3:57:44:69:21:a0:89:d5:f3:07:ef:79:f7:50:
d5:f9:2c:fd:b8:a2:f5:b1:9a:a0:26:41:bb:72:1c:df:29:24:
f9:14:22:09:40:b4:3e:79:9c:d1:ba:a1:32:a3:84:7a:c9:28:
94:8d:c6:cb:d8:bb:fe:0f:dd:54:f3:6e:43:6e:ea:56:c7:4c:
e0:5e:f3:ba:5f:09:c5:3b:10:ab:00:56:ec:43:ef:1a:49:a9:
7f:7a:e9:6b:ff:50:e0:0e:49:8e:36:55:e0:08:ff:f7:2d:67:
8c:57:1c:47:cd:08:32:29:e9:f3:a5:89:4c:85:4a:ae:5d:a1:
ae:1e:aa:bc:36:5d:bd:e0:b9:42:23:a1:b7:a5:1a:20:f0:66:
d8:f2:3c:c2:0e:b5:40:9b:82:1b:de:b8:58:06:4d:31:8e:20:
2e:bc:64:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 17:01:54 2026 by rpki-client