Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
File: p4kEQNrxw6w4dz6FIVES90twYjI.mft (raw, json)
Hash identifier: edrJbrbeO2sDHVXaqvYYVoLW7jlok3g5Ukh0BlVYYfo=
Subject key identifier: 8E:68:61:4A:2A:56:DC:D1:CE:57:9B:DC:0D:EB:80:CD:87:1B:B4:64
Authority key identifier: A7:89:04:40:DA:F1:C3:AC:38:77:3E:85:21:51:12:F7:4B:70:62:32
Certificate issuer: /CN=a7890440daf1c3ac38773e85215112f74b706232
Certificate serial: 01A08AC32FEC9D547CBA5E982A7E76877055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
Manifest number: 0200
Signing time: Thu 10 Sep 2026 10:00:42 +0000
Manifest this update: Thu 10 Sep 2026 10:00:42 +0000
Manifest next update: Fri 11 Sep 2026 10:00:42 +0000
Files and hashes: 1: iX6vy1XcuPqqbDz8w-InkH2wG7I.roa (hash: GqKpcRA3VOR2P5FWA83zgHTmjRMOW1fhvmM6tUVqgDI=)
2: jcRzJUg7IUVEUlfjHqL1NEbulJY.roa (hash: 043yV8J6dMsTpPpYvQ/xWssybIOO8FTRI8kOXFFcDXA=)
3: p4kEQNrxw6w4dz6FIVES90twYjI.crl (hash: cbfwbW2T3mLJM93RNIfjURvJSR5zaIZTjySEy4IZU5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:2f:ec:9d:54:7c:ba:5e:98:2a:7e:76:87:70:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7890440daf1c3ac38773e85215112f74b706232
Validity
Not Before: Sep 10 10:00:42 2026 GMT
Not After : Sep 11 10:00:42 2026 GMT
Subject: CN=8e68614a2a56dcd1ce579bdc0deb80cd871bb464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2c:f2:b4:d2:0c:97:94:17:26:94:9d:38:70:
39:01:eb:eb:82:5d:8e:dc:c5:7f:6f:d9:1f:2c:14:
72:45:29:39:a0:a3:bb:27:b5:3c:7f:3f:91:d6:98:
d7:5b:eb:21:ef:e5:de:e4:cf:c5:3d:7e:1a:21:42:
0a:4c:86:91:bf:2a:f4:26:3f:c9:9d:96:ee:60:5a:
8e:fa:18:8a:85:30:6f:7b:2f:63:e4:b2:36:0d:85:
63:44:48:66:8a:2d:9f:25:e0:b0:6b:e0:19:7f:b2:
33:fb:3b:ac:49:0c:19:24:be:66:b8:a8:26:f8:85:
58:50:65:db:87:75:c6:4e:38:f0:a9:d0:b3:49:3d:
86:83:b3:bd:a3:eb:55:2e:51:9e:f9:b4:e1:fb:bf:
85:20:57:cf:65:bd:ac:69:ef:0e:25:31:cd:bd:f5:
b2:00:0f:4f:db:3b:97:ba:33:dc:ec:ce:3d:06:9c:
1e:0b:83:68:2f:25:33:41:07:f7:ba:a1:55:b7:64:
f7:91:78:3a:18:02:52:6a:de:e8:12:8c:1d:5c:dc:
26:cf:84:50:61:4d:07:3f:d0:16:7f:ef:69:41:7e:
48:f1:e3:d3:0f:a2:b5:d6:39:f5:3a:2d:a0:5d:a4:
7e:71:d1:81:b3:7c:a6:36:98:eb:6e:65:f2:ca:91:
e2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:68:61:4A:2A:56:DC:D1:CE:57:9B:DC:0D:EB:80:CD:87:1B:B4:64
X509v3 Authority Key Identifier:
keyid:A7:89:04:40:DA:F1:C3:AC:38:77:3E:85:21:51:12:F7:4B:70:62:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:fb:7c:14:78:b9:cc:0a:f4:d9:54:17:a5:32:e9:f4:a0:84:
41:b6:2e:38:93:c2:67:a4:60:c4:bc:ab:b4:d9:55:86:dd:fe:
2b:05:dd:2e:27:1e:42:23:3f:39:3b:1b:55:9b:5a:61:59:c5:
9c:20:44:60:2a:16:c5:04:a7:6c:21:a9:26:c2:30:f0:ed:b1:
7a:3b:9b:0a:1b:2b:30:dc:96:1a:6c:53:f1:6e:5a:18:fd:e2:
1d:75:a9:8d:b5:10:8b:38:23:05:fc:d1:bd:ba:bc:e5:c7:f0:
d4:ec:a7:40:ef:17:2d:7d:f2:02:2b:ac:cb:fb:dd:d3:13:54:
5f:95:41:e8:2d:a0:6b:cc:28:26:03:ae:26:6a:2b:bf:fd:2d:
22:11:ed:f6:8f:65:14:27:39:6f:3e:6d:e9:c2:1c:a7:48:a2:
18:59:81:5a:55:d1:fa:8c:ff:c3:3b:49:0f:5a:5b:be:d6:dd:
e7:89:cf:64:aa:7c:e2:58:9b:d6:e0:d3:57:4f:63:ad:a9:30:
1d:9d:68:3a:0c:b2:cb:37:3d:d7:33:73:8d:29:ae:07:e6:a1:
f2:c9:31:0a:c1:d0:e3:5e:9d:17:0a:1c:10:4f:b2:81:0b:7f:
a7:54:da:47:0b:ab:da:df:33:0b:20:da:49:04:f8:e0:d0:bd:
93:c0:07:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:41:23 2026 by rpki-client