Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
File: pDOBaM2dWvBgQBP8QnQSb8WB88s.mft (raw, json)
Hash identifier: mQQr/gvg5wd98Gs+7AWZFz3zq3ExnnK/ht5St/dmavQ=
Subject key identifier: 0A:4F:B2:87:48:34:B9:E8:A8:42:8C:03:06:11:CF:99:DD:0E:C4:40
Authority key identifier: A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
Certificate issuer: /CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Certificate serial: 01A160B24D7619120EAD1D355DBC2AF2D25E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
Manifest number: 1153
Signing time: Wed 21 Oct 2026 23:01:00 +0000
Manifest this update: Wed 21 Oct 2026 23:01:00 +0000
Manifest next update: Thu 22 Oct 2026 23:01:00 +0000
Files and hashes: 1: 5t5_5MqWJNollBMPqdFua97XfMM.roa (hash: KTz9ZppQRmMMx9XPLOR36od8YyLkBIE5elG5FeL6i2Y=)
2: FSHrqYhJli1tSVyjlj_58RREeXk.roa (hash: uSCHyOKTAFU7tgMnLJvTfArI/447X68lLDwgFscWtJQ=)
3: pDOBaM2dWvBgQBP8QnQSb8WB88s.crl (hash: JDvDTDuw8aF5pmPZIy9nkUs5IhJ/5eyXoW5uURaYIC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 18:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:b2:4d:76:19:12:0e:ad:1d:35:5d:bc:2a:f2:d2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Validity
Not Before: Oct 21 23:01:00 2026 GMT
Not After : Oct 22 23:01:00 2026 GMT
Subject: CN=0a4fb2874834b9e8a8428c030611cf99dd0ec440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:63:a9:f7:49:13:e9:8f:58:af:ea:f7:0e:90:
33:63:e2:9a:5a:bd:43:65:70:77:43:f4:f5:d7:3c:
0e:01:19:99:48:e6:ec:b5:17:c4:86:b0:5e:59:a2:
12:40:82:f5:7b:c4:39:ab:ae:eb:07:fb:33:31:bc:
77:5c:38:a5:9b:f8:9d:ee:89:e0:89:d4:33:da:35:
61:49:5c:fa:9d:2b:8f:c8:9e:ba:c2:b4:c2:51:5d:
e2:1f:70:da:1e:c0:8b:33:17:39:fd:bf:c4:38:27:
d5:2a:06:f7:8a:67:d2:d3:3d:71:1b:68:ed:72:bd:
dc:bd:dc:e5:1e:d9:f8:f7:96:80:50:0f:b6:7a:da:
8b:70:d4:c0:bc:36:55:79:4d:38:c9:47:9e:d8:42:
73:69:9a:f5:76:c2:b4:d2:4c:c5:38:63:31:6a:0e:
7b:7f:25:0e:d2:6a:3d:c1:8a:96:c3:25:6f:6b:4e:
29:dd:33:65:52:2b:75:33:99:da:3d:45:04:1c:b6:
05:aa:f1:ec:49:6c:1e:a9:06:82:26:b6:07:70:24:
c6:dc:a1:b5:a3:d2:42:8a:97:77:64:d0:da:de:bb:
9c:55:bd:e7:cd:00:64:f9:0a:37:9d:f1:ea:32:2f:
81:24:de:24:16:4e:d7:25:0a:bd:b8:0b:24:74:ba:
37:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4F:B2:87:48:34:B9:E8:A8:42:8C:03:06:11:CF:99:DD:0E:C4:40
X509v3 Authority Key Identifier:
keyid:A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:e4:d3:f7:6b:74:8b:b7:19:70:b9:6e:c3:b9:f3:c7:3b:a6:
e8:39:e8:f5:b2:54:ea:f7:d9:e0:95:b6:7e:7f:9f:9f:73:3b:
55:36:1b:15:d3:21:96:b8:cf:9a:af:8e:7b:4c:b5:89:04:03:
90:14:f9:dd:9c:72:d7:40:e6:54:3d:6a:3b:3c:40:e8:19:b0:
52:11:9f:02:1d:39:dc:c4:3d:0e:74:89:12:27:c7:ab:77:e6:
34:2e:1e:95:c9:a1:b4:6e:0f:ea:72:45:f2:73:8e:c9:ca:f8:
c6:63:ee:46:87:1f:31:28:d2:50:c1:27:6c:0d:25:ce:1f:e1:
70:c9:70:0a:ff:92:73:45:5e:06:f6:47:f1:79:07:d5:cc:c9:
cc:10:dd:eb:f9:5a:f8:40:32:fe:34:0f:4b:9d:b0:54:4d:de:
80:b9:ae:cb:c8:0c:b2:eb:c6:b6:27:f2:7c:3d:42:29:74:22:
65:e0:4d:8c:28:7a:a4:0c:cc:fd:e6:ef:d1:63:53:3f:f2:4e:
5a:1d:4e:da:e6:36:9f:38:55:2c:4a:6e:50:63:ab:dd:3a:8d:
c4:77:c7:81:5d:8c:75:5f:ec:3a:59:1a:81:00:de:6e:b7:a2:
e4:b5:e5:85:e3:d1:93:20:ba:7a:87:68:3c:f7:32:3a:ab:52:
0c:25:2e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 03:14:21 2026 by rpki-client