Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
File: pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft (raw, json)
Hash identifier: KiznSBB78zxm/L4Q/jzSW1BrrKCeS9DrUoDBHFhpQBw=
Subject key identifier: 8D:BB:47:0B:0B:E3:71:5A:9F:10:05:A5:52:F8:C8:6F:1C:10:A9:19
Authority key identifier: A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
Certificate issuer: /CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Certificate serial: 01A17BBB16A99917A2C9DEFC8B1CACFDFA5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
Manifest number: 1ACC
Signing time: Tue 27 Oct 2026 05:00:20 +0000
Manifest this update: Tue 27 Oct 2026 05:00:20 +0000
Manifest next update: Wed 28 Oct 2026 05:00:20 +0000
Files and hashes: 1: 7UycSOA2fNBupvFy-hFdJV1v7Io.roa (hash: 5kwOqNqNs3Py67MnZDjj6z2WyhVaijv3n26KPo38psM=)
2: EUznPNdi1RBuO_YCf9akt2u9WRY.roa (hash: LZ23fGDWAJm3pcS6NWs5vwLClCe20PqadqZJEm5+Myk=)
3: VHAZMRbuJy6K49Zh7bvrBNs8QHU.asa (hash: erFKugp76cbDaqZL6jbZ+AatD/saCuONTcWq0wMAJBI=)
4: arHeDdPCjS_AVATAetTx45LL1Dk.roa (hash: wzrmHuwOdDJUETKg+nffMJxHljjlvyXkAo4P+Hrjp2w=)
5: gugoFb8q0SHtyIBkY0PLePdn0z4.roa (hash: PfJgvUjin+qon9RPc3E2cAaH5BLLpJd7HD9BJAEBX68=)
6: pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl (hash: OtqV9OTFyTy6+raPxc4KsCeimyLndq3nLeiilqPs6nQ=)
7: qE8RROX_Abt_X7_dq6_I4v_syO0.roa (hash: j+dQK6D8sHBmyU5YdzKLTUPT+QDZeyjIoFCaIOac7LY=)
8: xoRDajz4eJy11O_J5fLAv4U4v9E.roa (hash: CkGw0sLJe5mjxRbSsZKMcGEgfVdDoPyOYU+L3J4izT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:bb:16:a9:99:17:a2:c9:de:fc:8b:1c:ac:fd:fa:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Validity
Not Before: Oct 27 05:00:20 2026 GMT
Not After : Oct 28 05:00:20 2026 GMT
Subject: CN=8dbb470b0be3715a9f1005a552f8c86f1c10a919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6b:1a:f2:69:e0:27:22:a2:f2:28:8b:ff:b1:
92:95:9c:7a:de:a8:7f:61:d6:b4:60:fc:51:50:67:
3c:be:82:d9:86:4a:8e:12:81:cb:12:20:7e:71:5e:
c3:8c:68:50:1c:b2:10:e1:ac:38:aa:15:4c:2e:b6:
9e:00:9b:dd:61:a0:da:b6:0a:30:19:2a:7e:2f:fe:
a6:ff:e6:b5:5a:3e:ff:93:b0:8e:a8:25:f8:35:71:
e1:63:94:44:dd:81:88:19:71:ec:09:d6:72:03:84:
a5:3d:9e:c7:9e:7d:22:b8:25:8d:aa:b3:bc:d1:68:
40:88:1a:a3:2a:83:2f:4b:f7:7c:bc:ef:ad:cb:fe:
e9:a1:34:0b:b1:45:02:74:e1:63:89:6b:b0:b2:1f:
a7:9a:e3:3c:0d:95:d6:eb:a0:28:ba:a7:a4:df:d2:
73:af:72:22:a1:ae:c9:3e:39:05:8b:12:7d:4a:9a:
7d:7c:88:de:1c:47:ee:56:56:a6:a1:32:12:75:45:
80:8d:99:bf:e4:a0:c0:f2:fe:4c:db:26:af:a6:b5:
2a:d5:fb:04:7c:ea:35:25:fb:06:a4:cb:cc:eb:3c:
e4:9e:ce:36:58:34:16:1b:01:bb:7d:a4:cb:cb:49:
cf:4d:82:ec:0e:49:55:ec:06:0d:15:f9:dd:24:bf:
08:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BB:47:0B:0B:E3:71:5A:9F:10:05:A5:52:F8:C8:6F:1C:10:A9:19
X509v3 Authority Key Identifier:
keyid:A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:29:a8:32:12:5d:c4:74:7a:51:01:ac:f9:b7:8f:48:34:26:
ad:02:14:45:04:36:0c:72:bb:f6:ab:1e:08:21:57:ca:e7:76:
62:d5:f3:a3:0c:81:65:30:c1:da:00:4c:4a:97:e2:ef:82:00:
a2:ee:db:2d:75:f5:f9:5e:a9:de:af:e8:c0:50:15:12:36:8a:
7c:d2:ca:a0:67:d4:0f:b0:37:ad:7c:46:05:a0:ef:97:48:44:
c8:5b:9c:e7:bd:36:55:dc:6c:8d:ea:03:35:e3:c8:fb:c7:bd:
4c:10:f7:99:71:8a:00:e8:1f:cb:d4:fe:fb:71:bb:3f:e2:3b:
ef:3c:20:d6:36:31:b4:91:7e:d6:40:af:21:f7:30:e5:a8:a8:
be:00:2b:c9:6f:6a:22:31:2e:b7:1d:77:e6:1f:8c:22:5a:d5:
c2:45:4c:da:76:9a:26:27:7b:ac:4f:e7:cb:01:d3:65:9e:69:
e3:fa:32:1d:d6:70:41:79:aa:1b:00:68:34:3c:3d:e7:79:ec:
fb:14:b9:95:9f:2e:06:0a:d7:db:f6:1e:5a:53:8b:08:81:57:
28:c5:e9:2c:7d:8f:3a:d3:13:75:77:51:92:4c:a0:a3:ab:c6:
5b:7f:aa:bb:6a:5d:4b:13:f9:2d:b1:15:eb:e6:84:89:f8:55:
e8:72:88:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:25:25 2026 by rpki-client