Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/PM6ikJsxCrIUek4InbjQLWM67aU.mft
File: PM6ikJsxCrIUek4InbjQLWM67aU.mft (raw, json)
Hash identifier: 3uImUr2n23Yjw/2cmYZ5ajNPvWuKelP6wP29yWByDpw=
Subject key identifier: 07:6C:E2:15:37:65:DC:65:E4:00:A2:35:06:57:32:11:4A:76:E3:9E
Authority key identifier: 3C:CE:A2:90:9B:31:0A:B2:14:7A:4E:08:9D:B8:D0:2D:63:3A:ED:A5
Certificate issuer: /CN=3ccea2909b310ab2147a4e089db8d02d633aeda5
Certificate serial: 01A1724A76C1BF912AC1F859C33F2745E79E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PM6ikJsxCrIUek4InbjQLWM67aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/PM6ikJsxCrIUek4InbjQLWM67aU.mft
Manifest number: 0139
Signing time: Sun 25 Oct 2026 09:00:44 +0000
Manifest this update: Sun 25 Oct 2026 09:00:44 +0000
Manifest next update: Mon 26 Oct 2026 09:00:44 +0000
Files and hashes: 1: PM6ikJsxCrIUek4InbjQLWM67aU.crl (hash: 5+KtnJU5/TLF/Yb0hGGcp+luRDGxfEYtnQEI6b4wgDI=)
2: UOM6gziwTgthgiT-MMgDEZJHkKw.roa (hash: zJtaUU6Qy0ipND2taxR1aWCjYr5rjwd98bLyWYvXmh4=)
3: htL6EkfhzoE25fJ7cW4uqIL-_6Y.roa (hash: qbYEhkyiHcqaqoWIYEZ+ftQZbk2jPVv+9gYHwpRtHyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/PM6ikJsxCrIUek4InbjQLWM67aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/PM6ikJsxCrIUek4InbjQLWM67aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PM6ikJsxCrIUek4InbjQLWM67aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:4a:76:c1:bf:91:2a:c1:f8:59:c3:3f:27:45:e7:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ccea2909b310ab2147a4e089db8d02d633aeda5
Validity
Not Before: Oct 25 09:00:44 2026 GMT
Not After : Oct 26 09:00:44 2026 GMT
Subject: CN=076ce2153765dc65e400a235065732114a76e39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b2:cc:09:1c:df:85:45:58:48:7e:ba:f6:54:
a4:cb:f7:09:c6:e1:18:57:ba:95:c2:3c:f8:fc:6b:
15:43:67:d2:f4:7e:ed:c4:d5:24:3d:86:64:cc:4c:
b2:b9:52:b8:29:10:97:db:25:77:44:d3:85:3b:18:
af:8c:65:50:e6:97:bd:92:e5:61:c6:3c:2f:0e:eb:
37:a2:55:db:11:1d:3f:07:36:5a:e9:0c:93:c7:c4:
c4:7b:b8:db:1f:65:cc:9b:6f:03:5c:f0:62:04:bf:
48:d7:75:29:54:cb:8a:e8:f3:98:5f:ce:29:07:d7:
4f:0f:16:3d:8e:6f:f4:44:a5:e0:3d:f0:87:79:84:
71:d7:38:5a:64:0a:cd:0e:f1:28:6e:26:4d:11:d2:
d6:09:21:2b:4d:bb:90:62:86:59:d9:7f:07:e5:a5:
93:16:3a:01:d4:8a:d0:48:83:e6:26:70:a5:3e:03:
b2:c4:38:82:f8:a3:c5:a1:63:c1:47:32:e5:be:fb:
8c:2e:b8:52:9d:76:d3:73:5a:18:eb:df:02:1e:d3:
10:60:5c:18:1d:a3:15:6b:3b:f8:ee:86:a6:1e:15:
97:56:77:15:a0:f0:a6:f1:cf:87:8d:a8:00:76:f2:
f5:ce:cd:0d:f5:d2:2e:d8:cd:04:3e:73:63:cf:35:
b1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6C:E2:15:37:65:DC:65:E4:00:A2:35:06:57:32:11:4A:76:E3:9E
X509v3 Authority Key Identifier:
keyid:3C:CE:A2:90:9B:31:0A:B2:14:7A:4E:08:9D:B8:D0:2D:63:3A:ED:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PM6ikJsxCrIUek4InbjQLWM67aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/PM6ikJsxCrIUek4InbjQLWM67aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/PM6ikJsxCrIUek4InbjQLWM67aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:97:7d:24:7f:90:3c:83:1a:38:69:ae:da:16:6c:21:db:ca:
b6:6f:e9:dc:c5:4c:e9:3a:ca:2c:84:96:1e:6f:ce:8e:12:0c:
74:36:f0:de:b0:f1:0d:bb:18:1e:6d:66:72:1b:e6:e4:29:0f:
68:a0:2d:7f:f4:ba:89:bf:e3:ce:af:ed:2f:2f:11:20:2c:c9:
11:03:ac:ae:3b:b5:e8:6d:05:b9:b3:cb:f4:d9:46:f3:3b:fc:
0d:56:be:b1:d7:45:0b:01:11:ed:66:4c:4c:c4:f4:d7:90:f5:
78:09:fd:82:5c:45:89:66:38:35:71:bb:2b:8d:3e:3b:1b:ab:
d2:c5:70:54:79:8d:09:be:c7:31:71:8b:b5:1a:51:4f:5d:6f:
ec:15:ff:9b:4e:14:77:6c:98:15:ce:e5:91:84:72:ce:09:12:
a5:a0:ae:1e:d5:bb:46:79:3c:61:03:54:22:23:b4:6f:8e:08:
32:a8:45:94:e7:44:09:eb:b6:a4:ee:95:5b:87:2f:43:3c:29:
b3:81:5e:7b:08:f6:bf:12:c5:63:5e:39:67:a0:66:7f:11:33:
16:0a:0d:bc:13:4d:89:68:b0:cb:d2:00:e1:04:e1:bd:aa:1c:
ef:3e:99:2e:ea:eb:98:5d:5e:0a:54:01:df:c6:1e:b4:bd:8b:
a8:b0:d3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:21:31 2026 by rpki-client