Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/pIKPtnaRQQizohBYAGsbdGU6coQ.mft
File: pIKPtnaRQQizohBYAGsbdGU6coQ.mft (raw, json)
Hash identifier: PAyY8RrVNeP64KP8O+THQESQbL7eMshnNgNJGQy0UsY=
Subject key identifier: B8:C3:00:6B:C1:0B:25:A6:DA:1F:58:FA:BD:3D:FD:17:39:23:82:5D
Authority key identifier: A4:82:8F:B6:76:91:41:08:B3:A2:10:58:00:6B:1B:74:65:3A:72:84
Certificate issuer: /CN=a4828fb676914108b3a21058006b1b74653a7284
Certificate serial: 01A170CA5669D9CBDED181E1CDDA8164B79F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pIKPtnaRQQizohBYAGsbdGU6coQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/pIKPtnaRQQizohBYAGsbdGU6coQ.mft
Manifest number: 0139
Signing time: Sun 25 Oct 2026 02:01:10 +0000
Manifest this update: Sun 25 Oct 2026 02:01:10 +0000
Manifest next update: Mon 26 Oct 2026 02:01:10 +0000
Files and hashes: 1: pIKPtnaRQQizohBYAGsbdGU6coQ.crl (hash: l5bk59orFiaicDODaygRq5fZiqlsXl+NouDQIuUkT1k=)
2: xnpLWQbK7jsUsduUEIccPsw5IXY.roa (hash: Twr62ldc2Qdv26LvzsZhRcIFu9JARGt1MRoXVZFiTVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/pIKPtnaRQQizohBYAGsbdGU6coQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/pIKPtnaRQQizohBYAGsbdGU6coQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pIKPtnaRQQizohBYAGsbdGU6coQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:70:ca:56:69:d9:cb:de:d1:81:e1:cd:da:81:64:b7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4828fb676914108b3a21058006b1b74653a7284
Validity
Not Before: Oct 25 02:01:10 2026 GMT
Not After : Oct 26 02:01:10 2026 GMT
Subject: CN=b8c3006bc10b25a6da1f58fabd3dfd173923825d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3c:d6:b0:c3:dd:96:11:0b:9b:32:d2:40:96:
98:21:3a:f4:c5:fe:32:ac:88:85:3c:db:f2:66:58:
0c:d3:3f:24:11:e5:b0:4d:9f:90:46:a0:a2:a2:b4:
bf:3a:1e:ef:d7:e3:93:e9:d2:dc:c4:a2:12:fa:c6:
65:8b:3b:67:c9:28:14:50:e6:60:b0:61:b1:a2:4b:
49:b6:a3:82:52:6f:e4:8c:f2:95:82:b3:97:d6:90:
f9:0d:05:77:24:59:32:d0:30:a7:d2:1e:b2:15:9d:
27:9d:e2:86:97:51:d0:ae:2d:82:2b:49:5d:d5:19:
5b:10:99:16:14:13:5d:68:a6:1a:60:ad:d3:a8:f1:
80:ab:69:c4:eb:76:ed:cb:bb:fe:21:93:03:54:d5:
cf:7b:ad:c4:14:17:2c:e5:59:8b:f7:88:d2:57:8f:
76:f1:83:4a:a8:e2:a9:fe:ba:f5:c0:f9:79:38:45:
ff:f3:fb:6f:1d:5d:5c:e1:ab:4d:7b:cf:d1:d2:36:
b7:1c:83:a2:69:a6:52:67:81:55:28:ee:c3:c3:42:
ab:61:f6:76:ab:c7:58:ec:49:69:f9:93:be:76:77:
3f:c0:71:87:47:59:62:a0:a8:33:e4:fd:eb:1e:d1:
d3:bf:df:26:4c:6f:a2:56:00:2d:bf:5b:3b:a9:4a:
f5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C3:00:6B:C1:0B:25:A6:DA:1F:58:FA:BD:3D:FD:17:39:23:82:5D
X509v3 Authority Key Identifier:
keyid:A4:82:8F:B6:76:91:41:08:B3:A2:10:58:00:6B:1B:74:65:3A:72:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIKPtnaRQQizohBYAGsbdGU6coQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/pIKPtnaRQQizohBYAGsbdGU6coQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/pIKPtnaRQQizohBYAGsbdGU6coQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:a9:f3:86:4b:a3:9c:dd:71:04:02:38:3f:64:9f:d2:3a:aa:
31:12:c8:bc:23:40:04:6d:06:4e:26:c8:73:26:08:7c:6b:e6:
d7:58:3a:33:d6:4d:bf:a3:34:e9:35:b0:44:5c:f9:80:53:d0:
e5:38:e2:a6:ae:87:6e:f2:01:32:53:9c:af:1b:06:8a:b0:33:
af:50:11:11:b5:18:ae:f5:ea:87:8d:33:bb:65:d9:18:8d:71:
6c:b8:b5:38:f9:3c:4f:2c:3d:ce:e0:ab:c6:5d:9c:01:d5:af:
90:50:cf:48:85:d0:49:77:e3:be:4f:94:1c:ff:c7:3e:fc:c5:
34:87:f8:f2:e1:6e:9a:30:97:35:f1:9f:56:b1:25:48:7e:d4:
be:70:23:fa:e8:b2:e8:e2:fa:d8:85:4e:4e:ec:7f:fc:71:36:
d1:d8:6b:f4:3b:e8:85:95:d8:c1:09:ad:e7:d0:42:be:a7:2b:
67:9f:4e:96:8a:a2:05:76:70:a3:27:57:05:7f:90:1a:bd:e3:
04:0f:4a:1e:b4:e5:a0:de:b0:09:40:7c:69:c8:88:1d:13:68:
2a:c3:b6:29:24:14:87:ab:57:2f:49:00:02:44:c3:2b:c0:10:
a1:ce:9c:b6:4a:98:52:0b:db:36:bb:e0:84:75:46:b5:8e:54:
60:fa:0a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 09:12:33 2026 by rpki-client