Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
File: pZCvyl_rSsOMGnOFetdW9_M-Nos.mft (raw, json)
Hash identifier: EqJnB3xK9003NuwWM5LzwHkuRBt4fmGNEZAabNLFKv4=
Subject key identifier: 39:E1:B7:43:0E:EC:43:40:7A:40:53:A4:E5:74:2C:47:5E:AB:47:B5
Authority key identifier: A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B
Certificate issuer: /CN=a590afca5feb4ac38c1a73857ad756f7f33e368b
Certificate serial: 01A17EF436D162AADC02182E5CCBA05422AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
Manifest number: 0C55
Signing time: Tue 27 Oct 2026 20:01:36 +0000
Manifest this update: Tue 27 Oct 2026 20:01:36 +0000
Manifest next update: Wed 28 Oct 2026 20:01:36 +0000
Files and hashes: 1: PVIvAggMAtuREjhV8GPK-EuHdx8.asa (hash: /yi4srMyiV+9qj1Uy16aZQoRy4KHU28OFJInXDw+3jg=)
2: pZCvyl_rSsOMGnOFetdW9_M-Nos.crl (hash: VI6Oy+G5Sp6Y0pOI21mC8205kFSpZM9yjVfjyjGUcKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 20:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:f4:36:d1:62:aa:dc:02:18:2e:5c:cb:a0:54:22:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a590afca5feb4ac38c1a73857ad756f7f33e368b
Validity
Not Before: Oct 27 20:01:36 2026 GMT
Not After : Oct 28 20:01:36 2026 GMT
Subject: CN=39e1b7430eec43407a4053a4e5742c475eab47b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9e:99:dc:89:bd:f3:57:b4:64:46:f0:54:3c:
35:88:a8:39:df:01:08:5c:91:3e:23:eb:96:36:59:
4c:31:05:2c:b4:9b:aa:2d:7f:fa:be:32:59:64:5f:
52:17:ac:0e:1a:14:b8:f7:cc:2c:52:6a:2c:c2:f3:
99:6b:90:6f:5c:a6:cf:ff:ef:b4:09:eb:b1:02:57:
cd:74:d5:c0:ca:8d:41:35:80:d0:36:0b:40:47:d8:
7a:c3:35:17:dd:83:cb:4c:72:ca:84:a6:55:5b:04:
8e:97:7a:22:73:d4:06:30:22:03:2e:9f:97:ae:80:
7f:ae:3f:aa:eb:46:67:f6:0c:b8:d3:da:17:3a:5f:
49:32:d1:a3:a7:5f:26:62:0c:bf:3c:8f:44:09:c1:
c1:49:bf:f3:2b:11:04:83:c7:00:2f:1a:34:a0:4b:
a0:f2:78:76:3c:ee:67:15:27:54:6f:0c:15:67:0f:
69:fa:4c:f8:3c:0d:4b:21:38:c7:b4:d8:00:bf:10:
ec:11:a4:12:31:10:7e:e3:30:da:e1:e5:a9:ce:c9:
5d:03:77:aa:6c:f3:98:fc:07:3c:6c:01:4c:ac:50:
66:8c:80:28:79:86:28:1e:82:58:11:cb:f2:40:f2:
4d:f4:ac:1f:b5:25:13:11:69:33:e3:02:11:63:c7:
1b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E1:B7:43:0E:EC:43:40:7A:40:53:A4:E5:74:2C:47:5E:AB:47:B5
X509v3 Authority Key Identifier:
keyid:A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:9d:82:0e:51:16:a0:9f:cd:70:05:2a:45:bd:e2:81:84:13:
7a:46:00:82:c5:26:d0:6d:c9:87:24:61:76:9d:45:5a:d6:a4:
2f:6f:70:a2:87:7d:b4:44:ed:52:9b:f1:d6:bf:86:7c:14:5f:
cb:a4:65:79:2c:67:a8:a9:5f:28:26:3d:2d:e3:f2:8f:67:ed:
47:f5:3c:8f:8a:cd:6d:ea:62:6f:31:08:cb:60:76:2a:00:e9:
ea:d4:5f:08:42:32:a9:ad:06:fd:cb:47:11:f2:55:29:ed:e2:
09:a4:2c:fa:45:3e:39:31:7e:5a:24:e8:40:c7:97:da:8d:49:
f8:c5:45:d9:b6:70:96:29:25:83:fe:8c:b2:1c:c4:99:c2:06:
67:e2:53:41:ec:75:b3:a8:e5:35:df:9a:23:9a:a3:92:34:4d:
26:6f:06:cc:d3:09:ba:a9:84:2e:28:a2:d4:41:a7:73:51:52:
61:d1:fd:40:11:57:8a:6f:be:38:eb:69:03:1e:ef:81:0f:41:
03:52:26:fb:d0:10:a0:32:e6:e8:77:26:d7:22:f8:23:18:7a:
57:1b:2c:f4:50:3d:21:a9:70:03:ce:4d:44:9a:0a:fa:fa:ab:
e4:b5:c8:ac:1b:c4:5c:f0:b0:d3:3d:50:cb:86:b5:b1:d4:ac:
8b:ae:97:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF+9DbRYqrcAhguXMugVCKsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1OTBhZmNhNWZlYjRhYzM4YzFhNzM4NTdhZDc1NmY3ZjMz
ZTM2OGIwHhcNMjYxMDI3MjAwMTM2WhcNMjYxMDI4MjAwMTM2WjAzMTEwLwYDVQQD
EygzOWUxYjc0MzBlZWM0MzQwN2E0MDUzYTRlNTc0MmM0NzVlYWI0N2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA056Z3Im981e0ZEbwVDw1iKg53wEI
XJE+I+uWNllMMQUstJuqLX/6vjJZZF9SF6wOGhS498wsUmoswvOZa5BvXKbP/++0
CeuxAlfNdNXAyo1BNYDQNgtAR9h6wzUX3YPLTHLKhKZVWwSOl3oic9QGMCIDLp+X
roB/rj+q60Zn9gy409oXOl9JMtGjp18mYgy/PI9ECcHBSb/zKxEEg8cALxo0oEug
8nh2PO5nFSdUbwwVZw9p+kz4PA1LITjHtNgAvxDsEaQSMRB+4zDa4eWpzsldA3eq
bPOY/Ac8bAFMrFBmjIAoeYYoHoJYEcvyQPJN9KwftSUTEWkz4wIRY8cbuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnht0MO7ENAekBTpOV0LEdeq0e1MB8GA1UdIwQY
MBaAFKWQr8pf60rDjBpzhXrXVvfzPjaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFpDdnlsX3JTc09NR25PRmV0ZFc5X00tTm9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS82NzJiMjUtNjE5OC00ODNlLWEwNWYt
OGYwNjNhNWY2YTg2LzEvcFpDdnlsX3JTc09NR25PRmV0ZFc5X00tTm9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS82NzJiMjUtNjE5OC00ODNlLWEwNWYtOGYwNjNhNWY2YTg2
LzEvcFpDdnlsX3JTc09NR25PRmV0ZFc5X00tTm9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAop2CDlEW
oJ/NcAUqRb3igYQTekYAgsUm0G3JhyRhdp1FWtakL29wood9tETtUpvx1r+GfBRf
y6RleSxnqKlfKCY9LePyj2ftR/U8j4rNbepibzEIy2B2KgDp6tRfCEIyqa0G/ctH
EfJVKe3iCaQs+kU+OTF+WiToQMeX2o1J+MVF2bZwliklg/6MshzEmcIGZ+JTQex1
s6jlNd+aI5qjkjRNJm8GzNMJuqmELiii1EGnc1FSYdH9QBFXim++OOtpAx7vgQ9B
A1Im+9AQoDLm6Hcm1yL4Ixh6Vxss9FA9IalwA85NRJoK+vqr5LXIrBvEXPCw0z1Q
y4a1sdSsi66XvQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 04:52:21 2026 by rpki-client