Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.mft
File: PqU6yajcRG-34BE7aLOOlwwZ98w.mft (raw, json)
Hash identifier: YheaOZSdAXIW5RwiGXnQjnJUvodvW4aYUNU9JxexfVE=
Subject key identifier: 99:85:F0:86:B7:8D:A2:B1:62:8D:37:55:0C:95:58:9E:81:2E:2F:50
Authority key identifier: 3E:A5:3A:C9:A8:DC:44:6F:B7:E0:11:3B:68:B3:8E:97:0C:19:F7:CC
Certificate issuer: /CN=3ea53ac9a8dc446fb7e0113b68b38e970c19f7cc
Certificate serial: 01A181BE5B92CEDA3B95AA846CA794EC507D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqU6yajcRG-34BE7aLOOlwwZ98w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.mft
Manifest number: 1A55
Signing time: Wed 28 Oct 2026 09:01:38 +0000
Manifest this update: Wed 28 Oct 2026 09:01:38 +0000
Manifest next update: Thu 29 Oct 2026 09:01:38 +0000
Files and hashes: 1: PqU6yajcRG-34BE7aLOOlwwZ98w.crl (hash: PoIlHAWmyhhU2bygTpjFSn9eB6Ylt4dqz5jeuqZT6bk=)
2: ugGgjfrNMaOwuHgQR5J_mmnCoSw.roa (hash: N5PN03imR/rPD+0R00oOm/EBGbZntmCDYE46dLOAj4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqU6yajcRG-34BE7aLOOlwwZ98w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 09:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:be:5b:92:ce:da:3b:95:aa:84:6c:a7:94:ec:50:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea53ac9a8dc446fb7e0113b68b38e970c19f7cc
Validity
Not Before: Oct 28 09:01:38 2026 GMT
Not After : Oct 29 09:01:38 2026 GMT
Subject: CN=9985f086b78da2b1628d37550c95589e812e2f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:93:c8:58:ca:af:95:9b:41:c0:70:23:02:35:
2e:6e:6d:ca:f2:31:25:7e:a8:17:85:c0:ac:b2:de:
48:e7:e1:64:71:fb:78:7b:ed:9d:5a:ef:e1:4d:92:
66:47:3c:30:9d:40:4f:57:ce:7c:cb:81:3a:20:c7:
b9:98:91:87:ce:d2:df:fd:fc:5c:29:2a:3f:10:38:
c8:c3:9b:79:ec:77:11:42:ab:1e:0b:12:ec:52:c7:
74:93:aa:92:84:9e:9c:ad:38:d1:a7:a9:3a:ae:6c:
2b:fc:f8:2d:64:14:06:7f:1c:1a:ea:43:8b:a4:b4:
6b:25:f8:45:c1:a2:c4:53:35:c0:b0:41:93:3b:55:
8d:1b:dd:61:b7:92:f5:a7:f5:e3:76:2f:d5:09:6b:
e5:46:da:74:a8:d1:cc:a4:9c:35:58:ad:a5:16:c6:
b1:42:65:a2:7c:e5:cb:9e:40:44:10:16:92:73:d1:
fa:91:6e:09:c8:cc:6c:e7:a2:1a:fb:c6:21:9e:9d:
84:87:e2:b8:ae:a4:7a:95:e7:18:b8:60:ac:6f:9c:
74:b0:b0:ed:c8:3e:d1:37:1c:3a:c0:80:ad:25:e6:
ea:4a:bb:75:92:fd:0a:e4:ed:ca:5c:4c:20:d7:e3:
44:52:96:1b:2d:00:f7:04:e7:9c:9e:78:37:7e:4f:
b1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:85:F0:86:B7:8D:A2:B1:62:8D:37:55:0C:95:58:9E:81:2E:2F:50
X509v3 Authority Key Identifier:
keyid:3E:A5:3A:C9:A8:DC:44:6F:B7:E0:11:3B:68:B3:8E:97:0C:19:F7:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqU6yajcRG-34BE7aLOOlwwZ98w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f4:27:bc:19:55:23:9d:e7:1a:ab:87:89:87:59:48:c3:2b:
97:2c:5b:9e:97:68:77:3a:67:55:5d:ca:d8:01:d6:ee:71:5f:
dd:6b:0c:1a:e8:da:48:68:ae:fc:c4:4f:4b:01:46:07:28:cf:
c8:5d:a1:29:f2:7b:94:db:81:78:66:4d:86:12:d7:40:21:0d:
50:a1:63:c1:e7:33:fa:71:21:af:10:39:4b:dc:50:27:5a:fc:
ee:2c:8f:83:34:6f:fb:0d:be:e0:99:6d:77:83:57:c3:33:7b:
9c:ae:f7:3d:be:28:10:14:1b:48:fc:eb:b3:7f:b1:53:a1:d7:
f6:b7:9d:60:47:b5:91:10:d2:a6:11:b1:c9:9f:33:3f:39:66:
53:01:8e:ee:2f:99:cc:50:ca:98:67:3a:2c:52:9b:cc:f9:61:
a6:f1:ce:c8:8a:08:fc:a6:18:0a:96:70:71:24:b3:92:a5:56:
e8:12:ba:91:d0:5b:93:a8:df:cb:fc:79:c3:90:7f:41:01:b2:
76:df:cd:57:bc:5d:1c:30:7e:a2:92:51:cf:58:be:47:ea:17:
b1:a8:19:7c:38:70:99:f9:7c:97:ef:8b:4a:5c:43:ef:a7:62:
db:45:79:83:f8:0c:8a:51:f3:c5:97:7c:78:2a:18:ae:a4:0a:
f6:8b:28:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:47:04 2026 by rpki-client