Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/pIKPtnaRQQizohBYAGsbdGU6coQ.mft
File: pIKPtnaRQQizohBYAGsbdGU6coQ.mft (raw, json)
Hash identifier: 4nKTVuMm/v4vGydG8QGuzhQJ05Z2tZHIBt94v2WxEnw=
Subject key identifier: 86:D4:B0:7C:13:1C:34:83:6E:BA:C0:5D:88:F6:46:02:40:08:6A:C8
Authority key identifier: A4:82:8F:B6:76:91:41:08:B3:A2:10:58:00:6B:1B:74:65:3A:72:84
Certificate issuer: /CN=a4828fb676914108b3a21058006b1b74653a7284
Certificate serial: 01A06E03655ABE9DD3DF16166B099761FAF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pIKPtnaRQQizohBYAGsbdGU6coQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/pIKPtnaRQQizohBYAGsbdGU6coQ.mft
Manifest number: B3
Signing time: Fri 04 Sep 2026 20:01:51 +0000
Manifest this update: Fri 04 Sep 2026 20:01:51 +0000
Manifest next update: Sat 05 Sep 2026 20:01:51 +0000
Files and hashes: 1: pIKPtnaRQQizohBYAGsbdGU6coQ.crl (hash: u2zsfFAKB/QeIh9Qc+brJiu9kMdfgw5zNjE+yLUjIRI=)
2: xnpLWQbK7jsUsduUEIccPsw5IXY.roa (hash: Twr62ldc2Qdv26LvzsZhRcIFu9JARGt1MRoXVZFiTVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/pIKPtnaRQQizohBYAGsbdGU6coQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/pIKPtnaRQQizohBYAGsbdGU6coQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pIKPtnaRQQizohBYAGsbdGU6coQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:03:65:5a:be:9d:d3:df:16:16:6b:09:97:61:fa:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4828fb676914108b3a21058006b1b74653a7284
Validity
Not Before: Sep 4 20:01:51 2026 GMT
Not After : Sep 5 20:01:51 2026 GMT
Subject: CN=86d4b07c131c34836ebac05d88f6460240086ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:58:ae:e4:77:20:88:cf:d5:6e:0d:c3:c5:45:
12:8c:9f:47:65:8d:86:b6:1a:82:38:ef:70:83:82:
a9:bf:5d:12:b4:e1:20:3c:46:d3:48:26:bc:3d:01:
c8:88:38:aa:a7:b7:68:84:27:23:a8:6f:72:5e:9e:
e3:12:6a:68:0f:31:62:be:5e:a2:fc:c6:83:e0:b6:
ea:bc:75:af:21:58:b3:58:30:e1:63:35:35:92:f9:
2e:5d:8a:11:b0:c3:a1:a0:6b:3f:e6:cf:53:16:2e:
03:5f:4d:93:91:bc:81:fd:58:16:56:7d:5f:36:93:
b3:37:8b:b3:76:57:3a:85:73:65:bd:1b:5a:c0:97:
4d:4a:53:e4:d8:33:81:99:a8:e6:f1:3d:47:96:4b:
b7:93:08:22:8d:96:61:67:67:c6:87:fa:85:cf:20:
31:1a:16:10:12:71:58:1d:8a:f2:20:b8:2e:e1:7e:
cb:11:3f:69:ed:6f:02:69:d6:70:9b:a9:2e:88:b2:
5c:a5:e6:52:bc:de:14:db:e3:2e:cf:34:b7:48:7f:
37:3b:fc:e1:3f:37:b4:23:e0:79:ff:0b:c0:fc:56:
05:72:e3:a4:09:4b:11:c0:13:98:90:7f:3b:aa:09:
08:cd:a7:9e:aa:96:e8:a4:e7:b0:71:fd:0d:d6:f3:
ea:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D4:B0:7C:13:1C:34:83:6E:BA:C0:5D:88:F6:46:02:40:08:6A:C8
X509v3 Authority Key Identifier:
keyid:A4:82:8F:B6:76:91:41:08:B3:A2:10:58:00:6B:1B:74:65:3A:72:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIKPtnaRQQizohBYAGsbdGU6coQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/pIKPtnaRQQizohBYAGsbdGU6coQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/pIKPtnaRQQizohBYAGsbdGU6coQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d6:bb:6b:ac:77:03:c6:c3:f2:ac:78:79:eb:5a:98:7c:d3:
75:2b:13:a0:02:c8:e2:03:08:04:ca:ed:dc:4c:69:4e:84:a4:
1b:60:7f:58:c4:26:d4:d2:d2:b6:a3:32:c3:4b:62:ec:fe:10:
8b:15:8d:a8:b3:9c:01:8b:2e:0d:30:af:a2:c7:c5:ea:1e:bd:
d3:1b:25:31:3b:9a:ec:d7:bf:9f:7a:91:e8:b6:2d:2c:70:cb:
5b:33:8b:bd:c2:2d:c6:bb:a0:6f:28:fb:73:63:8e:d4:6c:af:
03:32:fb:f4:e6:7f:12:4d:65:cd:36:23:4d:a3:c0:2c:74:f6:
63:94:88:3a:db:e4:c3:7b:bb:8f:a6:92:f3:de:91:db:94:ff:
d6:3f:4f:5b:60:61:14:bb:ad:3e:22:8d:5b:35:6a:01:45:9f:
a9:47:b1:c4:70:c2:e7:e7:ba:5b:d2:27:6a:f5:81:e2:2b:8e:
78:51:88:23:9b:98:94:02:a8:89:0b:05:1f:cb:5d:be:04:b7:
0a:3e:dd:ca:6d:3d:ca:00:73:38:81:ad:4e:f9:60:c1:fd:f4:
61:43:c5:28:2b:83:20:f3:aa:86:89:b0:8e:1a:50:eb:0d:4e:
e2:40:68:82:cd:d3:8d:f5:73:92:01:f1:8a:b7:89:f2:2f:51:
f2:09:80:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:37:39 2026 by rpki-client